Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HhYJZRc_iY7Eg3JltRCAuldZNJ0.roa
File:                     HhYJZRc_iY7Eg3JltRCAuldZNJ0.roa (raw, json)
Hash identifier:          pPboSXO8tiMM7pJBa4jtCOBqPLqnjIzaqu8scQSbAz0=
Subject key identifier:   1E:16:09:65:17:3F:89:8E:C4:83:72:65:B5:10:80:BA:57:59:34:9D
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       15C83B56
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HhYJZRc_iY7Eg3JltRCAuldZNJ0.roa
Signing time:             Sat 01 Jan 2022 05:59:13 +0000
ROA not before:           Sat 01 Jan 2022 05:59:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     270013
IP address blocks:        2a06:a006::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365443926 (0x15c83b56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jan  1 05:59:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1e160965173f898ec4837265b51080ba5759349d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d0:22:9c:47:3f:91:af:bd:e6:a1:b3:46:8e:
                    5d:68:95:54:7a:f6:28:2f:0b:d8:81:24:1e:e2:1a:
                    1a:85:84:df:4f:77:5e:37:05:43:85:f5:e4:ac:87:
                    1d:c9:89:b5:b0:a0:f2:8a:7f:87:6c:e5:2e:3d:11:
                    58:b1:2b:62:4e:6a:ab:b3:00:27:34:65:14:cf:79:
                    4f:e7:d7:25:4d:f7:b4:96:f4:9e:05:5b:1f:d0:58:
                    72:42:6f:e6:c5:f5:56:64:82:fd:86:81:4c:7e:f1:
                    7f:e0:2a:21:a6:40:6f:41:5a:bf:ec:5b:31:a7:80:
                    d9:6b:e4:e5:0d:cc:25:2a:5e:60:0c:ff:a2:54:17:
                    1d:3d:52:53:cc:67:07:fe:42:f1:9c:4b:7a:df:8b:
                    2f:75:57:6e:34:e7:71:db:de:5e:a2:e8:5c:67:8f:
                    5c:3a:73:d1:30:56:ae:2f:06:d0:5e:d7:19:f8:a0:
                    41:3a:2e:d5:5f:94:eb:eb:25:63:18:d1:81:5d:ac:
                    fb:64:fb:ce:2e:a0:22:de:03:b7:ea:f4:55:d4:5f:
                    12:cd:0e:fe:78:13:f8:7f:4b:2a:11:24:85:09:2a:
                    c1:7e:b2:85:91:55:26:8e:ce:4e:5d:3f:91:5b:1b:
                    04:dd:fa:12:f7:3b:35:65:d3:be:d9:6a:19:0d:a4:
                    ea:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:16:09:65:17:3F:89:8E:C4:83:72:65:B5:10:80:BA:57:59:34:9D
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HhYJZRc_iY7Eg3JltRCAuldZNJ0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a006::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:df:4e:51:7e:f3:41:f6:f1:5d:fa:d2:bf:9c:67:5b:f5:af:
         3c:de:fa:37:75:f7:3c:03:d4:8b:22:39:0e:71:78:fb:4b:5c:
         1e:62:6c:e3:ac:bf:1b:79:ea:d4:58:e9:cb:0e:26:c0:df:42:
         90:1a:7a:ca:9d:43:86:45:04:7a:e9:5c:ea:d1:df:50:b5:c6:
         e2:f4:ed:a5:d9:6a:fb:2a:51:ee:63:f6:95:01:fd:2a:56:19:
         39:83:b9:8e:2a:b9:e2:6c:d2:36:09:49:00:5e:6b:ac:34:e0:
         91:a3:b7:0a:92:86:c0:0e:1c:3a:e0:fc:9d:1a:d1:74:1c:00:
         8f:1f:8f:47:2b:c7:db:5e:d6:3a:38:5b:22:dd:82:eb:60:80:
         46:8f:51:4d:cd:38:7f:6e:4b:64:ce:1f:6c:d0:90:88:f2:b5:
         c8:0a:85:e8:37:26:60:31:77:11:7d:fb:d7:57:be:c9:f1:d7:
         93:a8:58:e8:c8:8c:3a:62:7e:b0:7e:83:86:00:6d:60:5d:de:
         77:0f:70:ab:1c:a7:9b:83:3f:35:2d:a8:18:b6:0a:6a:46:10:
         bf:d8:c5:66:78:0d:35:40:49:fa:e3:2d:f4:0a:b2:b0:ce:a4:
         a3:d7:1b:d3:e7:6e:c6:ab:4c:48:09:53:4b:ae:ad:53:4e:c1:
         f8:a0:ce:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----