Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GWZ7OWEMSUG9e42w6_979Ho8be0.roa
File:                     GWZ7OWEMSUG9e42w6_979Ho8be0.roa (raw, json)
Hash identifier:          Pm9Mw0U235n6O/xzqqDBj2m9uWNQ7BPOpj8c6yC1fHc=
Subject key identifier:   19:66:7B:39:61:0C:49:41:BD:7B:8D:B0:EB:FF:7B:F4:7A:3C:6D:ED
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       18093628
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GWZ7OWEMSUG9e42w6_979Ho8be0.roa
Signing time:             Tue 12 Apr 2022 09:30:39 +0000
ROA not before:           Tue 12 Apr 2022 09:30:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211144
IP address blocks:        2a06:a005:431::/48 maxlen: 48
                          2a06:a005:432::/48 maxlen: 48
                          2a06:a005:440::/44 maxlen: 48
                          2a06:a005:430::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403256872 (0x18093628)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 12 09:30:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=19667b39610c4941bd7b8db0ebff7bf47a3c6ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b2:7e:b0:9c:92:8d:28:cd:7a:57:31:82:b3:
                    ad:f3:2b:20:da:2f:6d:61:6d:92:b3:5f:09:93:d9:
                    46:68:b0:21:cf:4f:16:f0:44:5b:50:e9:82:26:3e:
                    f8:65:91:d5:3a:33:cb:09:90:cc:c8:3c:8a:54:16:
                    f0:86:f5:42:4a:9c:4c:68:08:8b:ce:fc:a7:53:dc:
                    ad:99:32:57:99:ef:21:71:31:11:f4:17:43:01:db:
                    d0:ef:75:e5:21:05:19:8c:cc:82:e7:d4:60:57:cc:
                    7c:61:98:4e:7a:23:4a:a9:13:ac:f9:41:ee:f6:83:
                    f6:26:2d:fb:e8:e6:46:e5:1e:4d:bd:69:ff:df:fd:
                    1d:8f:0e:1b:a2:0f:f4:7b:4a:63:c6:18:8c:54:c1:
                    cc:4b:79:f8:50:8b:c5:af:c5:65:7c:a5:82:48:d1:
                    e1:49:4c:f8:98:8e:a2:0a:9d:a4:63:ec:49:8d:e3:
                    fb:76:74:f0:0b:1f:91:61:fc:db:a2:33:8f:a3:31:
                    d0:0a:c7:7d:4a:5c:48:cb:64:06:84:f2:27:08:c6:
                    f7:64:ed:fe:ae:2a:ab:65:fd:c5:b6:3c:44:d1:b3:
                    56:c5:7c:d0:9c:62:ea:ae:d3:0e:1a:2c:ee:73:36:
                    4b:f9:e9:91:93:dd:20:5d:e1:8b:22:e5:2c:8f:6e:
                    40:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:66:7B:39:61:0C:49:41:BD:7B:8D:B0:EB:FF:7B:F4:7A:3C:6D:ED
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GWZ7OWEMSUG9e42w6_979Ho8be0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:430::-2a06:a005:432:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:440::/44

    Signature Algorithm: sha256WithRSAEncryption
         2f:bd:6f:8e:c0:70:18:49:c8:73:a4:8f:cc:81:0c:fe:97:b0:
         16:d3:95:b8:20:85:2d:d2:d4:1d:e6:8d:9f:d9:ed:7b:89:ba:
         1f:1d:01:e1:2e:e0:9c:de:d1:7b:78:b9:fd:28:c8:76:c2:cd:
         6c:7a:71:02:aa:33:13:20:f8:44:f6:f6:aa:73:1d:eb:f9:b0:
         cd:19:43:23:69:51:3e:a2:25:c1:93:06:4b:da:5a:d4:64:ee:
         77:1e:a5:a2:ab:3c:f1:5a:a8:8a:1b:60:89:42:7d:cb:ca:a5:
         fc:88:d9:6a:bf:6b:0f:b3:c0:d9:f2:33:5a:39:b7:5b:77:ea:
         32:ec:27:4e:d5:f6:26:e4:9d:62:78:90:be:6c:68:bb:7d:e3:
         5f:6a:63:2c:3d:06:94:5f:ff:cb:42:d6:8f:1e:92:8a:73:b0:
         29:04:d1:bb:98:dc:be:fb:15:2c:bb:b7:cc:fe:11:e2:90:62:
         91:5e:51:49:38:83:39:29:d7:de:48:38:fc:a3:60:8e:0a:55:
         49:64:b7:71:e8:8c:90:55:30:ac:94:e3:51:af:f5:9a:00:5c:
         88:2f:41:93:95:4b:4a:0f:f8:76:e3:06:e0:56:99:ff:4f:fd:
         55:80:e0:e4:b4:d2:aa:3b:7c:90:35:93:ff:66:6f:99:5a:ba:
         73:97:f7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----