Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Hsq-lfITWFH5LgHoVgiJepbc87s.roa
File:                     Hsq-lfITWFH5LgHoVgiJepbc87s.roa (raw, json)
Hash identifier:          p/UjOd2j5QEobqoowwdhjQVrDyCTD3qspsgjgMXZGcM=
Subject key identifier:   1E:CA:BE:95:F2:13:58:51:F9:2E:01:E8:56:08:89:7A:96:DC:F3:BB
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018468ECDC79ED64EFB299DD421F547D46BB
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Hsq-lfITWFH5LgHoVgiJepbc87s.roa
Signing time:             Fri 11 Nov 2022 23:01:04 +0000
ROA not before:           Fri 11 Nov 2022 23:01:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203458
IP address blocks:        2a06:1287:4900::/40 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:68:ec:dc:79:ed:64:ef:b2:99:dd:42:1f:54:7d:46:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 11 23:01:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1ecabe95f2135851f92e01e85608897a96dcf3bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2a:f6:7b:74:1c:80:6b:ca:41:ce:82:6d:15:
                    d6:2c:f0:29:64:21:8f:de:46:43:fb:b9:aa:b0:d8:
                    09:8a:7c:3c:a6:59:36:26:e4:20:9e:7a:74:12:b6:
                    02:28:6a:4f:42:fd:ee:4a:19:b5:a3:b4:89:28:b6:
                    6b:c0:2a:87:77:1e:ff:a9:16:53:ce:02:70:25:1d:
                    c8:89:cc:8c:d2:24:38:3d:c2:3f:9f:82:ae:5e:22:
                    00:16:00:68:5f:3c:c2:92:72:c9:f6:d9:06:35:9c:
                    e5:52:b4:e8:53:47:6f:e2:82:9c:ad:bf:29:79:f7:
                    e3:7c:ab:7b:dd:ce:e4:b6:f2:bd:c0:2a:6b:c1:66:
                    0d:66:0b:c1:98:18:d9:ad:13:e5:37:bc:97:3a:c6:
                    74:cc:68:fc:c7:17:20:31:00:b2:2f:d3:3e:3f:05:
                    0e:88:94:7a:7a:59:37:8c:75:36:52:82:ca:68:7d:
                    95:21:b2:d1:03:e9:59:92:a5:a7:62:22:e5:26:2e:
                    6a:d0:1a:c1:9b:85:9a:fd:e3:c1:52:e9:68:b7:a3:
                    a2:8c:32:b2:6a:9a:1d:27:52:b3:38:d8:44:38:4c:
                    5f:07:34:16:6c:14:0e:93:9b:4a:c6:53:86:b4:20:
                    18:96:54:ae:37:61:85:1e:e2:0c:a9:fc:a2:09:b4:
                    42:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CA:BE:95:F2:13:58:51:F9:2E:01:E8:56:08:89:7A:96:DC:F3:BB
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Hsq-lfITWFH5LgHoVgiJepbc87s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:4900::/40
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:f6:b4:42:9f:e3:35:c7:4e:c9:e3:ac:45:a7:af:02:84:6b:
         57:51:6c:e6:13:5f:f8:54:8d:53:5b:2d:af:96:41:3f:df:a5:
         f4:1e:1c:d5:8b:ec:88:31:55:69:cb:ed:85:2e:96:20:3e:a1:
         51:81:36:de:02:96:75:12:d2:93:65:18:b7:b2:d2:94:53:45:
         66:62:0d:71:1d:22:2c:09:83:ce:e6:77:a2:59:a2:45:bb:39:
         66:3d:3a:f5:53:ca:3a:4e:0f:10:d9:ac:4e:60:1b:fa:0c:1a:
         82:8f:d5:bc:63:79:97:d9:44:6d:11:a4:11:e8:64:77:4b:34:
         8e:09:6c:8f:26:ac:19:09:d6:08:f0:65:b7:96:85:8f:b8:cc:
         7d:53:60:29:e1:7d:01:9c:97:12:cd:e3:0a:e8:ec:b5:b2:8b:
         fa:07:f7:a6:04:81:6d:cc:d0:16:04:df:7a:bc:66:9c:a4:ae:
         92:09:45:dc:8e:91:df:18:fb:d6:7e:e2:c9:3d:00:4e:33:9a:
         93:aa:6b:b5:4e:5a:54:c5:6d:92:50:d1:1d:f3:b0:f7:18:2a:
         72:e0:76:84:35:05:09:fb:e7:cc:f1:dd:40:67:8d:68:02:a5:
         6e:de:32:a6:e5:bd:68:c9:c8:95:9e:0e:8d:b1:ea:ae:14:7d:
         1b:93:e0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----