Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/K4xF5k3eE6I3oAynO4hsxlBkhD4.roa
File:                     K4xF5k3eE6I3oAynO4hsxlBkhD4.roa (raw, json)
Hash identifier:          oUyOxtFZ6HE5yXQobw7RDVo8gBD7BA15zo+d+dPc3oI=
Subject key identifier:   2B:8C:45:E6:4D:DE:13:A2:37:A0:0C:A7:3B:88:6C:C6:50:64:84:3E
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018218212E4C27287FE19F2B0CC4342B02BA
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/K4xF5k3eE6I3oAynO4hsxlBkhD4.roa
Signing time:             Tue 19 Jul 2022 20:23:23 +0000
ROA not before:           Tue 19 Jul 2022 20:23:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203852
IP address blocks:        2a06:a005:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:18:21:2e:4c:27:28:7f:e1:9f:2b:0c:c4:34:2b:02:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 19 20:23:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2b8c45e64dde13a237a00ca73b886cc65064843e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4d:0d:4d:57:df:8f:4b:db:15:04:d7:62:25:
                    ff:42:2b:e3:36:ac:8f:91:46:f4:0d:38:24:88:70:
                    c8:db:2c:a6:fe:e8:d1:02:57:5f:b9:2a:33:72:3f:
                    0e:47:47:41:c9:ff:ca:27:93:95:ad:f5:68:0d:ef:
                    d2:45:64:93:69:75:e5:4b:a1:f9:ea:af:00:70:7f:
                    d9:7e:07:81:6c:ae:77:22:53:13:a6:6d:14:9e:09:
                    51:af:f4:fe:72:15:e7:8e:26:ee:9d:e8:c9:44:c2:
                    09:79:74:9e:8d:f6:f3:3a:05:25:fa:e6:88:71:9d:
                    fb:ab:8c:b1:75:64:32:ef:76:e3:cc:d2:be:dd:c9:
                    d7:0b:57:e9:61:b9:ef:da:7b:22:b4:58:44:4f:9b:
                    bf:be:11:9f:12:46:13:98:45:25:3f:f0:8e:67:08:
                    b2:37:fc:52:03:2e:02:98:c5:4e:3c:51:af:83:4e:
                    b4:81:91:08:b2:18:29:ba:33:6c:f8:47:92:c8:b6:
                    31:61:6c:c1:ae:74:70:e8:10:9d:1e:8a:68:35:af:
                    df:f6:60:e6:13:9a:e7:4f:af:ce:5a:7c:ac:31:7d:
                    c9:96:61:01:c5:55:c9:86:cd:6c:c0:1e:30:b9:d4:
                    3e:92:fe:30:7d:5e:1c:af:b4:e2:a6:75:46:87:10:
                    46:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:8C:45:E6:4D:DE:13:A2:37:A0:0C:A7:3B:88:6C:C6:50:64:84:3E
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/K4xF5k3eE6I3oAynO4hsxlBkhD4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:a9:bb:f1:5c:53:fe:26:6b:81:97:dc:24:f2:3f:36:89:08:
         f1:7e:c2:fa:20:f8:12:79:0a:0d:65:47:dc:20:70:c8:e5:a0:
         8d:7b:89:32:be:27:db:33:33:c2:32:bf:f1:15:fb:02:9f:ce:
         5e:d6:8f:82:4b:3f:b3:6b:1c:03:8e:20:73:ac:a3:1c:d1:3e:
         21:43:a1:52:80:89:dc:ce:b0:d5:1b:e7:2f:df:30:fd:59:de:
         0f:a7:b9:d4:6c:a5:75:b5:52:24:0f:e9:fd:4c:56:7d:fa:c6:
         80:eb:e6:c1:63:84:e8:0d:42:69:f1:0c:87:7b:1b:d7:ba:fe:
         9c:50:1a:ac:e6:4b:ca:00:18:e9:32:78:e5:07:b2:bb:99:a9:
         5b:9a:cf:e2:f5:16:08:cb:7f:33:69:31:36:2c:c4:d3:90:2f:
         73:59:d5:34:bf:e0:5d:59:f2:2c:03:c0:b7:7e:43:89:6e:be:
         7e:43:ac:b3:8e:be:f1:d5:83:a8:85:d4:fd:aa:91:ac:da:4f:
         9b:f5:db:67:b8:e6:26:9f:0f:5f:03:f6:26:62:f7:dd:99:5a:
         b2:96:a7:04:10:d6:5d:ee:30:9c:ac:ed:3f:ff:9b:e3:0c:e4:
         31:0e:05:f0:19:88:34:c7:03:b7:5f:7e:ca:b0:4b:d9:2d:7b:
         24:50:c3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----