Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IKrpE4kNx8_OUsYjigKNiLRolXQ.roa
File:                     IKrpE4kNx8_OUsYjigKNiLRolXQ.roa (raw, json)
Hash identifier:          ABIe9WMxF/FhAWws6YfOTyls3PTgBheNg2Z2l8sGzFU=
Subject key identifier:   20:AA:E9:13:89:0D:C7:CF:CE:52:C6:23:8A:02:8D:88:B4:68:95:74
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182F45E18CC6E4B0F5336823BFE8AD1DE3C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IKrpE4kNx8_OUsYjigKNiLRolXQ.roa
Signing time:             Wed 31 Aug 2022 14:46:23 +0000
ROA not before:           Wed 31 Aug 2022 14:46:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211622
IP address blocks:        2a06:a005:860::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:f4:5e:18:cc:6e:4b:0f:53:36:82:3b:fe:8a:d1:de:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug 31 14:46:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=20aae913890dc7cfce52c6238a028d88b4689574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5c:19:7d:77:5d:08:92:b7:57:6c:1b:12:93:
                    89:b4:b3:42:a4:a6:b5:e7:6b:c2:63:4e:23:8f:96:
                    91:27:85:01:2e:0c:07:fd:89:a0:fa:8f:1c:45:97:
                    de:91:a5:7c:81:c1:a7:55:5e:66:ca:c5:18:9e:77:
                    e0:ce:5c:35:10:4f:7a:04:34:e4:41:74:a2:7e:6d:
                    1c:9a:2f:a9:98:37:24:01:e1:2b:8f:37:c0:8a:26:
                    c6:60:b3:26:61:85:c4:aa:bc:3a:da:5a:9e:b0:95:
                    25:17:c2:bb:ca:67:18:bd:47:2e:4b:25:11:80:29:
                    90:33:7f:2f:27:3d:ac:48:75:e8:83:bb:7a:0b:d2:
                    f2:ec:f8:b8:47:fd:d2:bf:64:b9:6e:4e:7a:bf:7b:
                    8d:e4:8c:60:6d:14:bc:48:49:81:22:02:c0:c9:ba:
                    a4:7e:47:8c:42:15:62:83:86:24:2e:77:a4:4f:b1:
                    a0:27:5f:c2:41:8c:90:97:c3:7b:a6:96:2a:c7:00:
                    d0:19:d8:89:19:cc:b9:fd:28:5f:cb:89:fb:82:de:
                    d8:ee:3f:d0:39:3a:5c:2d:d2:1b:e2:47:0f:45:46:
                    da:63:fa:af:41:26:e5:6c:b9:fd:01:ad:9e:3a:b7:
                    51:eb:e8:f7:f0:7a:1d:af:7f:2b:8a:01:9d:b4:42:
                    7e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AA:E9:13:89:0D:C7:CF:CE:52:C6:23:8A:02:8D:88:B4:68:95:74
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IKrpE4kNx8_OUsYjigKNiLRolXQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:860::/44

    Signature Algorithm: sha256WithRSAEncryption
         44:a8:c2:e0:f8:71:d4:1b:6c:ea:c8:90:ef:c7:69:2c:82:93:
         2f:10:ca:8c:cf:5e:a1:27:cc:3c:6f:66:0b:12:ab:46:33:be:
         92:a8:3f:37:ae:b7:66:42:ed:2e:62:0a:a2:60:ce:00:cb:69:
         ec:b1:77:1d:a0:6f:bd:70:3b:83:90:45:ba:70:e6:b2:cf:ec:
         98:cc:78:8a:f8:3c:fa:7a:58:20:12:39:ab:ff:e8:be:07:2a:
         59:f9:7a:fd:ae:c7:8c:f7:75:c0:2b:4c:06:4f:08:d1:3f:7b:
         a4:b3:91:91:95:88:03:b1:f6:60:f8:27:49:c8:3c:bd:2b:15:
         db:d5:26:32:f2:da:ce:b6:c0:cd:c5:b8:e8:da:40:20:ec:79:
         3c:ec:46:b6:aa:98:cb:32:11:db:5b:15:14:bd:69:d1:7b:5b:
         80:1a:0e:46:ff:75:9d:3c:92:e2:dd:7a:85:8b:7a:67:18:11:
         f3:ca:d0:10:10:24:35:87:7e:48:22:5a:dd:85:88:34:10:09:
         1e:7b:05:60:f6:70:1f:59:18:9b:81:12:73:4a:8e:ec:c2:eb:
         40:68:6b:02:29:17:0e:da:26:5b:38:bb:a5:cb:f4:52:43:7d:
         65:a9:0f:24:bc:57:67:0f:9d:1a:fe:cb:70:5a:84:c3:f9:ca:
         4b:b6:04:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----