Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Ia9ArIV-cQpt5C8VWFSI3bYxf1s.roa
File:                     Ia9ArIV-cQpt5C8VWFSI3bYxf1s.roa (raw, json)
Hash identifier:          ktZe+YkRQDygUrXwrwjJtWuWwwH7jPrzEeKO+GOHk2Y=
Subject key identifier:   21:AF:40:AC:85:7E:71:0A:6D:E4:2F:15:58:54:88:DD:B6:31:7F:5B
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184D2EAC052D3F24EC076593494A96C4E1D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Ia9ArIV-cQpt5C8VWFSI3bYxf1s.roa
Signing time:             Fri 02 Dec 2022 12:58:30 +0000
ROA not before:           Fri 02 Dec 2022 12:58:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203888
IP address blocks:        2a06:a005:150a::/48 maxlen: 48
                          2a06:a005:d22::/48 maxlen: 48
                          2a0a:6040:300::/40 maxlen: 48
                          2a06:a005:2480::/44 maxlen: 48
                          2a06:a005:2490::/44 maxlen: 48
                          2a06:a005:b60::/44 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48
                          2a05:dfc7:6400::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:d2:ea:c0:52:d3:f2:4e:c0:76:59:34:94:a9:6c:4e:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  2 12:58:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=21af40ac857e710a6de42f15585488ddb6317f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2c:fc:02:c9:4a:ba:79:91:75:6d:7d:7d:a1:
                    e3:5a:ca:da:aa:99:a9:a0:0b:b2:94:8b:e9:47:f4:
                    54:71:32:fb:60:c3:4c:cf:d1:95:ac:ab:f8:71:71:
                    ff:d6:ed:07:a2:eb:e2:37:09:90:96:d0:0b:69:3f:
                    37:59:4f:65:d6:09:95:d9:7c:cc:07:45:cf:97:92:
                    6f:8e:06:22:30:f0:cf:7c:96:f0:91:af:97:a3:58:
                    80:46:70:98:cb:8b:10:dc:aa:d6:04:b2:e8:8a:4f:
                    78:f4:40:b2:65:19:7a:d8:cc:87:bd:94:57:d6:6b:
                    be:b2:28:2b:73:d5:74:c3:5c:56:c6:3d:8a:9a:f6:
                    fb:3d:43:b5:1c:72:5e:0f:13:9c:39:f8:39:67:51:
                    fe:9e:cc:8e:75:a8:c0:80:8c:b9:41:da:9f:8b:8a:
                    73:dc:f4:9b:c1:48:9b:5a:32:78:0f:1e:c0:4d:9d:
                    53:11:34:92:e0:89:53:b3:c1:67:28:ea:a2:83:22:
                    a5:de:bc:c4:57:14:3d:41:d9:a8:ec:6e:b2:96:73:
                    35:88:ec:4a:65:29:5d:4a:b7:de:79:9f:9f:6c:47:
                    4d:21:b8:cc:92:0a:c2:99:a9:d6:e2:6f:bd:2e:4a:
                    bf:55:d7:5b:95:af:0b:b1:8a:b8:93:c3:e2:d9:36:
                    a5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AF:40:AC:85:7E:71:0A:6D:E4:2F:15:58:54:88:DD:B6:31:7F:5B
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Ia9ArIV-cQpt5C8VWFSI3bYxf1s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:6400::/40
                  2a06:a005:b60::/44
                  2a06:a005:d22::/48
                  2a06:a005:150a::/48
                  2a06:a005:2480::/43
                  2a07:54c2:b00b::/48
                  2a0a:6040:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         6f:34:f3:33:27:2b:ed:0e:3b:03:04:16:30:5e:c4:4a:8b:c3:
         11:95:50:27:89:c6:e2:1b:b3:1f:0a:90:86:9e:f0:4a:87:68:
         7e:0c:d7:79:0b:3e:e3:af:e5:9a:c1:51:c5:c4:d1:2e:e1:80:
         a0:68:06:7a:b2:70:4d:83:bb:29:f4:6c:b6:6a:d0:04:56:1c:
         2d:7d:38:6a:3a:fe:1a:59:a6:25:04:14:f7:98:30:37:d3:f6:
         80:ad:4a:76:25:72:7c:66:ce:5c:2e:08:ff:42:ef:e1:5e:cf:
         40:ab:73:80:06:08:74:8a:fe:f9:05:a8:45:37:bd:59:ef:bf:
         29:80:5c:aa:9d:42:0d:00:12:df:96:1f:e7:c3:10:23:de:0f:
         8a:1e:c8:46:34:3f:33:2e:fc:b9:61:d4:31:13:18:2a:18:98:
         d8:1e:b7:09:5b:a4:ae:2a:25:cd:5f:53:43:f9:aa:3f:74:24:
         62:6c:11:a1:07:27:fb:78:ef:32:5d:0c:1f:09:33:c1:85:2c:
         aa:69:de:aa:c7:3b:a8:be:49:59:29:77:27:87:9e:63:b5:a6:
         94:c3:e2:58:e1:cd:be:9a:64:b7:94:99:da:ee:f3:37:8a:a2:
         81:eb:e9:d8:d7:03:b9:cb:bd:f5:85:4e:46:72:e5:f7:55:0f:
         f3:bc:b2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----