Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HlqDAlmD2DZ60bbRHFyxnCZ3AY0.roa
File:                     HlqDAlmD2DZ60bbRHFyxnCZ3AY0.roa (raw, json)
Hash identifier:          Dv8yUMFT5s3lciPUfxZ+b1ev+QvjD0BjCxsOfY+Cl48=
Subject key identifier:   1E:5A:83:02:59:83:D8:36:7A:D1:B6:D1:1C:5C:B1:9C:26:77:01:8D
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184C33246DC61695AA7C3FA9731FE6DB11C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HlqDAlmD2DZ60bbRHFyxnCZ3AY0.roa
Signing time:             Tue 29 Nov 2022 11:42:42 +0000
ROA not before:           Tue 29 Nov 2022 11:42:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212252
IP address blocks:        2a06:a005:2430::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:c3:32:46:dc:61:69:5a:a7:c3:fa:97:31:fe:6d:b1:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 29 11:42:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1e5a83025983d8367ad1b6d11c5cb19c2677018d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4d:88:1b:2b:ef:d6:53:0c:aa:ef:03:c4:31:
                    ea:3d:75:b2:6a:a0:19:04:e1:af:de:1c:67:f1:03:
                    b4:a5:99:81:55:68:b0:8e:65:de:1e:bb:4f:55:7d:
                    ef:2b:32:26:ab:51:fa:fa:9b:cf:40:7f:0a:11:3c:
                    84:41:ad:35:be:3c:6e:f8:ea:b8:ef:35:40:65:ce:
                    e0:ff:70:52:01:fe:21:ef:35:89:03:95:9a:3a:6d:
                    9f:ee:37:05:4a:2c:ca:b0:95:bb:0a:0d:23:96:12:
                    30:3c:cf:45:1a:23:c3:ac:d6:f1:7b:ac:5e:6a:af:
                    79:83:03:e4:ae:3e:d3:29:dc:bd:5c:e8:fa:7c:2d:
                    76:d7:72:aa:ac:5d:d8:bc:75:cf:d9:fd:d8:89:4f:
                    2e:05:f8:fe:d8:67:56:23:65:1c:f6:c7:d2:a9:00:
                    de:9b:99:1f:38:4a:a7:4a:42:0c:dd:40:82:d9:7e:
                    fd:cc:32:22:ac:1a:c1:4c:3b:04:e1:7a:4d:e4:56:
                    41:f4:4a:7f:de:f8:df:1e:f9:08:7d:b0:a4:ca:dc:
                    57:27:d0:56:44:73:8e:d7:ee:a5:74:1e:38:e0:0d:
                    f1:fe:40:66:c8:e0:4c:46:a3:b8:d4:70:c6:2d:a0:
                    70:23:f1:42:6c:ce:44:bf:75:0e:f1:62:93:1b:6b:
                    35:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:5A:83:02:59:83:D8:36:7A:D1:B6:D1:1C:5C:B1:9C:26:77:01:8D
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HlqDAlmD2DZ60bbRHFyxnCZ3AY0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2430::/44

    Signature Algorithm: sha256WithRSAEncryption
         0a:e7:a5:ec:d7:9a:61:69:3d:ee:70:ef:b6:11:da:b5:dc:89:
         5e:07:27:ea:0d:87:e7:c9:6d:01:81:7f:62:1c:62:51:f8:78:
         e9:93:67:6d:7c:0f:9b:5c:39:d1:2f:ff:67:06:61:b3:e2:35:
         fe:57:9b:e5:f8:8d:64:a6:80:ab:73:ce:48:57:5e:c4:5d:34:
         80:c9:d5:03:57:38:0a:65:9e:6e:1e:d8:44:57:32:b8:fd:e2:
         0d:4a:ee:53:4f:90:f3:74:f9:ad:4d:2b:18:a3:1e:78:b7:fe:
         1c:25:80:3d:c0:9a:6d:5e:b1:60:6a:d6:06:7b:5c:e8:43:38:
         be:5b:a9:a7:43:93:d9:c2:cc:48:7b:e4:c7:7e:21:e8:8e:8a:
         10:41:70:4d:1f:2b:31:ad:9f:fa:49:dc:1b:01:39:37:1b:d8:
         8f:5e:15:1c:3d:1e:bf:09:df:5a:f5:82:3d:91:44:4b:60:b1:
         dc:2d:47:f0:c4:c6:ee:e1:30:bf:3a:a2:93:93:32:ef:a8:7e:
         00:6e:de:c9:21:ab:21:1e:9e:26:19:bc:2f:a2:a8:91:22:43:
         71:f8:a1:a0:d3:63:29:4c:a2:95:87:aa:ce:75:9b:95:fa:b2:
         bf:bc:2d:ae:98:91:77:ab:df:69:f3:cb:73:df:43:69:89:63:
         30:e4:2d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----