Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/KDqqUtrSPMZ6RroKJPigY3UziPs.roa
File:                     KDqqUtrSPMZ6RroKJPigY3UziPs.roa (raw, json)
Hash identifier:          mwirFd8K2IqpfMt/RkzY6DtYV6Yfh95ZNkSF9JnMo+U=
Subject key identifier:   28:3A:AA:52:DA:D2:3C:C6:7A:46:BA:0A:24:F8:A0:63:75:33:88:FB
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182A66E328BDDBB0EAFFF5452D098F30DC2
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/KDqqUtrSPMZ6RroKJPigY3UziPs.roa
Signing time:             Tue 16 Aug 2022 11:33:35 +0000
ROA not before:           Tue 16 Aug 2022 11:33:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     142634
IP address blocks:        2a06:a005:5ae::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:a6:6e:32:8b:dd:bb:0e:af:ff:54:52:d0:98:f3:0d:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug 16 11:33:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=283aaa52dad23cc67a46ba0a24f8a063753388fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0e:59:d7:0d:16:e5:de:b9:87:3f:b6:51:06:
                    bf:a5:fa:c3:b9:30:58:da:e6:e3:51:32:5b:91:04:
                    c2:62:f2:2c:88:3c:07:0d:5c:e2:d0:2c:e8:e3:aa:
                    bc:33:96:59:89:f3:56:5f:e2:75:b1:9b:f0:c6:ee:
                    65:7c:7b:2b:75:24:85:b1:26:4e:cd:93:bf:b9:ed:
                    8b:cd:f8:74:bc:ba:be:79:bc:2f:63:72:91:69:15:
                    03:50:f8:63:85:6b:be:af:d5:e1:b2:90:36:91:8d:
                    29:96:6b:14:53:37:b6:c3:a2:75:34:c7:81:e0:f2:
                    2b:86:68:c2:48:1a:29:92:5b:cb:ab:29:d4:a4:d0:
                    0e:5a:a0:17:71:1f:61:a1:a3:fc:43:8d:3d:82:84:
                    91:2d:8c:fd:2a:4d:32:13:04:59:94:a7:a2:ff:52:
                    8c:b2:49:c6:7c:7b:e7:21:e0:6a:54:35:e3:80:96:
                    a1:85:68:b9:b1:12:ba:80:50:6a:43:60:e4:60:a8:
                    10:15:e0:72:df:06:39:de:d8:a0:55:1a:18:cc:07:
                    d8:31:61:6f:e5:68:86:e6:2e:45:2b:43:e0:c4:f7:
                    7b:ad:1e:e9:1d:16:3c:e6:cb:78:18:67:da:6f:ca:
                    9d:a2:f1:6e:51:90:75:18:0d:fd:f8:17:54:73:b7:
                    91:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:3A:AA:52:DA:D2:3C:C6:7A:46:BA:0A:24:F8:A0:63:75:33:88:FB
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/KDqqUtrSPMZ6RroKJPigY3UziPs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5ae::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:5f:f8:66:f8:37:9a:37:4c:96:8f:bd:a8:5f:d2:76:7b:be:
         c9:b2:06:fd:65:48:0f:91:a6:c4:69:57:33:ac:86:bf:9e:b8:
         d1:ea:9f:07:db:fb:90:5b:c4:e3:7b:35:1f:9a:c4:17:ed:b7:
         4a:2f:7b:1b:e6:e3:8c:a3:ed:96:10:c7:d1:1c:a6:3e:2b:9c:
         15:e2:6e:8d:1b:ef:d2:58:2b:f0:33:b0:5a:b6:54:62:7c:91:
         06:e7:56:bd:3f:b7:29:8e:d7:37:1a:9a:e2:16:40:2b:cb:b7:
         a3:cf:2a:7a:eb:8e:1a:f3:b8:b5:32:01:15:2a:c1:a5:a8:8a:
         a4:8a:20:fb:47:dc:8d:eb:7c:0b:d7:64:6f:df:00:20:65:51:
         18:df:48:39:6b:d0:ff:db:38:3f:bc:34:70:7b:ad:02:39:5c:
         bb:f1:f0:85:5a:36:e5:24:6b:d7:e9:93:83:86:1e:08:79:d5:
         af:51:29:74:80:b7:6c:a9:bc:ee:61:85:c5:59:22:e4:55:47:
         f4:e7:ab:05:4c:de:0a:c1:8a:f3:a6:ae:d3:d7:8b:bc:39:de:
         cf:63:4b:52:3c:84:fb:83:93:9a:4d:ed:e2:03:57:c5:d2:28:
         b9:cd:a1:f4:72:36:a6:57:89:62:02:55:ae:95:6b:a8:87:ae:
         85:6e:25:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----