Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Jr2phSy_b-HbD3Hw3iZNVGKTcJg.roa
File:                     Jr2phSy_b-HbD3Hw3iZNVGKTcJg.roa (raw, json)
Hash identifier:          hghZbuytjOs71W56DWG+SP0jzNxeQgRH1j8mFxDgIo8=
Subject key identifier:   26:BD:A9:85:2C:BF:6F:E1:DB:0F:71:F0:DE:26:4D:54:62:93:70:98
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183BFFACA780AAEB66986BAD4169C2747B0
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Jr2phSy_b-HbD3Hw3iZNVGKTcJg.roa
Signing time:             Mon 10 Oct 2022 03:40:27 +0000
ROA not before:           Mon 10 Oct 2022 03:40:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44570
IP address blocks:        2a06:a004::/32 maxlen: 48
                          2a06:a000::/32 maxlen: 48
                          2a06:1280:1000::/36 maxlen: 48
                          2a06:a003::/32 maxlen: 48
                          2a06:a005::/32 maxlen: 48
                          2a06:a005:1a70::/44 maxlen: 48
                          2a06:a005:18e0::/44 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48
                          2a05:dfc7:1300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:bf:fa:ca:78:0a:ae:b6:69:86:ba:d4:16:9c:27:47:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 10 03:40:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=26bda9852cbf6fe1db0f71f0de264d5462937098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b6:a3:ac:c1:84:33:09:7d:a6:d0:e0:b7:5f:
                    d4:3c:68:da:07:de:74:00:d9:a3:7f:c4:5e:33:b3:
                    47:ae:e7:05:62:d8:8a:df:38:00:2f:38:5d:8e:8d:
                    97:25:a1:25:2f:93:79:7f:d6:f2:29:2d:cd:d3:ba:
                    26:72:ff:ad:a5:04:d1:a3:be:79:6e:eb:05:9d:ea:
                    2e:01:41:be:68:fc:41:a7:d4:6a:4b:68:a1:4d:66:
                    b5:4c:45:85:21:b1:09:f5:2d:9e:6f:16:51:31:2e:
                    ba:aa:a3:69:21:5c:81:d1:39:6f:af:ad:e2:f6:21:
                    5e:9c:c7:12:d1:35:0e:1e:e4:1d:2e:f8:ca:d9:a8:
                    05:af:b3:af:f6:5c:2c:72:6b:01:a2:bb:b6:bf:f9:
                    cc:99:70:12:f5:87:db:2d:34:30:56:7c:3c:51:2b:
                    37:93:93:35:0c:a7:2c:92:e3:02:72:5f:be:98:72:
                    2c:1a:08:b9:d5:ae:f4:c6:44:14:0b:c2:2d:92:2c:
                    26:25:d3:4c:50:be:9a:c3:a0:b9:27:9a:c0:aa:25:
                    1c:1e:24:26:f6:bf:bf:4d:b7:6b:c7:b3:3d:42:f5:
                    0b:5a:bc:f0:17:b5:30:5e:0d:43:07:3d:c7:fe:a9:
                    e2:47:49:7f:c5:ae:02:97:36:d9:4e:69:e4:14:1d:
                    2b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:BD:A9:85:2C:BF:6F:E1:DB:0F:71:F0:DE:26:4D:54:62:93:70:98
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Jr2phSy_b-HbD3Hw3iZNVGKTcJg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:1300::/40
                  2a06:1280:1000::/36
                  2a06:a000::/32
                  2a06:a003::-2a06:a005:ffff:ffff:ffff:ffff:ffff:ffff
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:49:73:14:6e:2b:fd:60:aa:0d:66:8a:65:44:1d:6f:86:3e:
         00:a5:88:60:4c:37:48:17:23:19:fb:15:fa:00:51:7e:e6:3e:
         cd:6f:a2:4f:8b:b6:56:3b:ae:60:41:bf:b2:f3:56:9f:69:d2:
         01:b2:d2:a6:7c:85:ae:a1:81:d6:34:7a:83:5c:7d:2f:25:da:
         6a:60:aa:1a:d7:f2:66:be:2f:8b:34:93:f1:3e:72:f3:1f:67:
         52:e6:1f:15:65:15:de:ed:5e:9d:bc:87:09:85:32:3b:14:d3:
         8a:0e:56:3f:4b:db:ac:a1:52:0d:94:a1:bb:6e:26:4f:d3:0b:
         c0:af:32:78:73:e1:a4:2a:d2:fe:04:d2:a3:ce:79:d1:ea:74:
         b3:36:20:ad:8d:ca:ed:5c:6e:ab:80:2d:c4:b7:5e:d0:e5:94:
         28:15:0f:ec:e5:a0:ba:f1:29:f1:66:b7:14:04:08:58:7e:d6:
         8f:ae:18:c9:a8:3d:2c:5b:62:c1:ca:72:64:df:c8:31:bd:7b:
         eb:f2:21:5a:6c:ed:6f:6b:d8:3b:6e:a1:c9:78:ba:ca:4d:61:
         f3:b4:5e:26:00:3e:ea:39:b1:d6:df:68:b8:9f:e9:19:47:51:
         28:66:15:a7:3f:61:e0:cf:9c:3d:61:e1:3b:cc:c8:3d:bd:b5:
         34:1d:f9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----