Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JqOCwqUck71EJxpJujdSXB78r_k.roa
File:                     JqOCwqUck71EJxpJujdSXB78r_k.roa (raw, json)
Hash identifier:          x6yuZHYuZ0Xf5Sk6UbpuSZPGD/Wpe3aaLbDmNejcY3o=
Subject key identifier:   26:A3:82:C2:A5:1C:93:BD:44:27:1A:49:BA:37:52:5C:1E:FC:AF:F9
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184DACC8F44CB056AFE8D0B293B3FB62F76
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JqOCwqUck71EJxpJujdSXB78r_k.roa
Signing time:             Sun 04 Dec 2022 01:42:29 +0000
ROA not before:           Sun 04 Dec 2022 01:42:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200954
IP address blocks:        2a0a:6040:e300::/40 maxlen: 48
                          2a06:a005:2100::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:da:cc:8f:44:cb:05:6a:fe:8d:0b:29:3b:3f:b6:2f:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  4 01:42:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=26a382c2a51c93bd44271a49ba37525c1efcaff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:71:71:d5:b3:bf:0c:d9:46:39:6c:23:97:7c:
                    78:96:0e:62:5d:a0:68:f2:97:3f:40:7c:d1:2a:a5:
                    96:47:46:00:02:f7:bd:cc:08:d8:19:d3:41:d1:35:
                    6a:2b:48:21:10:a3:5c:33:57:fc:30:b2:c0:e6:a9:
                    74:36:1f:0c:be:59:a0:88:68:21:58:e8:1a:e4:95:
                    b3:89:86:62:31:b8:eb:de:3b:7b:4a:a9:91:72:26:
                    35:51:8e:d5:8c:64:fb:0f:ff:03:05:81:ae:fb:71:
                    b8:20:b2:86:05:e1:2b:c3:7b:32:76:1b:a3:4e:e3:
                    49:18:99:68:0a:f1:f3:4a:89:b6:fa:c8:d6:fb:eb:
                    23:7b:3a:6f:17:59:0e:da:74:17:19:83:42:3e:50:
                    ba:c4:d4:7b:ea:0a:00:1e:24:55:a2:2f:35:37:ad:
                    d7:35:9a:30:71:86:8f:73:6e:2a:a6:71:80:35:99:
                    50:f0:8a:e2:94:b2:8f:f7:8f:22:09:d1:01:31:70:
                    c3:a8:83:9f:f8:4e:e2:cd:6a:48:62:f0:d5:e3:75:
                    dd:2c:19:a2:f6:43:2e:d8:b6:fd:e1:57:75:27:35:
                    e9:06:17:38:b8:5e:ab:d2:75:3e:67:51:91:cb:d3:
                    d5:b1:49:a3:9a:a7:fe:af:03:11:23:d6:16:dd:11:
                    24:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A3:82:C2:A5:1C:93:BD:44:27:1A:49:BA:37:52:5C:1E:FC:AF:F9
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JqOCwqUck71EJxpJujdSXB78r_k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2100::/44
                  2a0a:6040:e300::/40

    Signature Algorithm: sha256WithRSAEncryption
         2d:2d:fa:a7:41:a6:d3:e6:a0:61:ba:d3:ca:c5:12:1d:0c:2c:
         27:03:04:00:06:95:05:d2:bf:21:76:34:c4:0e:01:88:2d:4e:
         72:bd:ea:05:82:e6:08:9f:20:85:e4:f5:d4:3f:8e:a2:ce:37:
         ec:b1:bc:4c:25:96:55:6c:ce:c8:90:a3:b3:7b:30:c0:5e:2f:
         41:96:6c:d1:77:7e:6f:91:ed:20:e0:3c:55:18:da:d9:10:82:
         8b:59:60:a4:7c:5d:c2:5b:c8:7d:bb:74:61:ae:3d:2f:79:27:
         0e:08:4a:3a:0c:7e:70:de:ab:f2:43:e6:2a:a2:f8:c2:06:53:
         11:63:e3:57:a7:11:3a:70:0f:4a:d7:2c:8d:a5:94:07:b2:ee:
         13:28:33:98:ca:9c:84:2d:df:ea:c9:22:b8:be:16:48:78:40:
         65:1f:37:fa:0c:e2:3e:77:df:cb:22:ca:48:ca:b3:cf:82:0d:
         67:9f:3a:5a:b7:78:80:28:dd:3a:72:3b:57:f5:93:af:53:f2:
         60:92:7e:63:46:24:5f:fb:dd:3f:ab:a7:cb:16:38:11:42:67:
         04:a1:d1:8d:62:4d:bc:62:12:d4:e6:9a:00:e0:08:16:f9:a8:
         37:e1:c3:24:3b:a2:96:93:77:2c:b3:4b:0d:30:82:a7:09:51:
         c1:80:bc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----