Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ImEfpRhDb-f9dmvnCNbo12tCGGQ.roa
File:                     ImEfpRhDb-f9dmvnCNbo12tCGGQ.roa (raw, json)
Hash identifier:          YWll6Muh6Tstq9OaSE3hQOg3WG6XojBb5smqJKuEuQ4=
Subject key identifier:   22:61:1F:A5:18:43:6F:E7:FD:76:6B:E7:08:D6:E8:D7:6B:42:18:64
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183B749FC50A84A553258C9D1C80C2D0CC6
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ImEfpRhDb-f9dmvnCNbo12tCGGQ.roa
Signing time:             Sat 08 Oct 2022 11:10:22 +0000
ROA not before:           Sat 08 Oct 2022 11:10:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     142594
IP address blocks:        2a06:a000:1d0::/44 maxlen: 48
                          2a06:a000:1c0::/44 maxlen: 48
                          2a06:a005:1730::/44 maxlen: 48
                          2a06:a005:16e0::/44 maxlen: 48
                          2a06:a005:16d0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:b7:49:fc:50:a8:4a:55:32:58:c9:d1:c8:0c:2d:0c:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct  8 11:10:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=22611fa518436fe7fd766be708d6e8d76b421864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8b:39:3e:ee:12:a2:d9:2d:3f:f3:28:38:86:
                    a2:00:75:9c:33:6a:ee:1b:7c:67:ab:ef:91:80:d5:
                    c0:92:e5:f6:47:b9:92:c1:9a:ff:1c:8f:06:52:35:
                    5e:24:94:45:28:aa:27:f6:4c:2c:29:22:64:2c:bb:
                    0d:e6:92:2c:86:16:93:fb:bc:b0:2d:9c:71:bd:16:
                    55:9f:ab:b3:2e:e2:07:95:df:7f:8b:1b:c4:89:88:
                    e5:60:76:76:36:f2:96:7c:fe:9e:1b:7b:31:90:26:
                    c6:d8:0b:ec:c0:40:f9:33:e9:2e:ba:7d:b7:06:dc:
                    b6:d0:2d:f1:03:f3:db:2f:e8:93:13:2f:73:36:ac:
                    4b:d0:c4:c6:d4:43:31:2c:40:b8:f1:0b:08:ad:c6:
                    7f:fb:73:4e:5f:56:ba:99:65:2d:e1:d8:44:28:c3:
                    60:e5:32:fa:1d:93:27:18:8e:13:46:f1:fe:b4:34:
                    4f:74:e7:3a:ed:86:3d:93:df:46:87:4e:88:d2:3e:
                    d3:8b:0b:6a:21:4e:ef:2e:d3:5b:27:26:79:17:b5:
                    ec:f5:47:e1:d5:8f:2b:6e:4f:8c:ec:ea:e5:58:f6:
                    65:5d:ad:f7:40:b8:0f:61:ac:8b:45:80:7f:be:55:
                    9b:0a:9c:d4:26:ee:ff:3e:42:40:7d:b7:fa:4a:67:
                    de:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:61:1F:A5:18:43:6F:E7:FD:76:6B:E7:08:D6:E8:D7:6B:42:18:64
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ImEfpRhDb-f9dmvnCNbo12tCGGQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a000:1c0::/43
                  2a06:a005:16d0::-2a06:a005:16ef:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:1730::/44

    Signature Algorithm: sha256WithRSAEncryption
         7e:42:b9:a0:e8:44:dd:db:0c:51:4a:0b:01:5a:92:ac:73:96:
         ce:cf:6b:11:c5:86:20:e4:86:d6:66:9a:44:8d:41:7e:7a:10:
         b0:50:75:35:50:f8:db:7b:db:81:fd:86:64:17:9a:47:7f:c8:
         0a:07:e8:9e:42:01:0c:25:0d:a3:b8:2f:c8:0f:e3:24:04:77:
         24:31:8e:53:36:19:d3:dc:d2:2c:d3:49:37:cf:8b:83:5e:1b:
         2f:65:2a:ff:4b:fe:d0:05:1f:5f:ad:4d:26:9c:13:b2:21:db:
         6e:79:20:8b:a5:0e:c6:08:de:a7:4e:81:3e:b9:54:01:f5:97:
         5b:00:b0:7c:f1:56:e8:d9:7a:f3:f7:3c:88:56:83:ae:5e:32:
         91:86:d6:4d:e3:92:a8:5d:e0:1a:f9:d0:c0:d2:1f:6d:bc:b9:
         7d:3e:5b:ce:90:be:4e:e9:ff:7b:f5:d3:63:6e:29:76:b4:46:
         ea:2b:74:6d:97:c9:71:12:33:95:b1:a6:26:11:2a:5a:d0:94:
         e8:ba:d1:b9:8e:6e:de:a4:8e:43:c4:5a:6b:2d:cf:6d:f3:40:
         03:c1:c3:e4:50:06:ad:e9:c0:74:8a:c5:10:de:08:af:f8:9e:
         75:e3:d2:88:75:e6:6f:21:fa:0c:43:18:f9:24:ee:49:e3:e0:
         e0:54:05:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----