Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/KI5QikWPad75McNjAkyjr1wctEg.roa
File:                     KI5QikWPad75McNjAkyjr1wctEg.roa (raw, json)
Hash identifier:          gLtyDPx08OEOXkw5ZOiE5SVc8eCfhlZiSdYOjW0T47I=
Subject key identifier:   28:8E:50:8A:45:8F:69:DE:F9:31:C3:63:02:4C:A3:AF:5C:1C:B4:48
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183863D04A4C020B2172DE4565DF1C3BADD
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/KI5QikWPad75McNjAkyjr1wctEg.roa
Signing time:             Wed 28 Sep 2022 22:34:49 +0000
ROA not before:           Wed 28 Sep 2022 22:34:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208548
IP address blocks:        2a07:54c4::/32 maxlen: 48
                          2a06:a000:300::/40 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:86:3d:04:a4:c0:20:b2:17:2d:e4:56:5d:f1:c3:ba:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep 28 22:34:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=288e508a458f69def931c363024ca3af5c1cb448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:55:8b:38:ca:55:44:c3:57:ff:c7:4d:68:0b:
                    c0:2f:8d:82:3c:91:eb:43:5b:b9:d5:56:45:cd:e2:
                    3a:3f:68:79:18:26:bd:f6:71:2a:a2:48:42:2d:e0:
                    22:a8:9f:78:7e:77:1b:c1:4c:74:78:95:07:64:29:
                    71:ee:be:91:1b:fb:c3:ba:a9:70:55:61:6f:ee:32:
                    db:56:9f:2a:e9:1c:c5:23:50:d2:ab:80:c4:ef:bd:
                    aa:56:91:2a:d8:d6:71:44:b6:5a:d8:d3:aa:6e:f7:
                    a2:01:ab:9e:3e:a4:28:44:50:cf:ee:d0:91:dc:2a:
                    46:01:51:fc:9c:4c:ff:20:91:ad:93:fa:5f:16:d8:
                    08:0d:ab:9d:82:2e:f7:c9:d9:fd:bc:49:6f:51:6f:
                    73:0f:a2:6d:67:b9:de:d6:c1:66:bf:4b:13:f1:22:
                    56:69:bf:c0:f6:bf:e2:5e:c6:19:f6:a7:2d:87:5b:
                    6d:be:f4:f6:11:e8:99:ec:0a:80:77:e8:ba:6c:cd:
                    79:56:13:1e:e7:7f:89:86:94:b2:e9:11:f8:60:d2:
                    a4:f3:17:95:a4:4d:8c:c6:e5:f2:13:77:bb:3c:23:
                    cf:ba:dc:58:39:15:b1:d8:7e:be:d3:62:75:89:ca:
                    e3:02:b9:de:ec:a5:88:b5:11:fe:46:9d:b1:a0:67:
                    0a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8E:50:8A:45:8F:69:DE:F9:31:C3:63:02:4C:A3:AF:5C:1C:B4:48
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/KI5QikWPad75McNjAkyjr1wctEg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a000:300::/40
                  2a07:54c2:b00b::/48
                  2a07:54c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:9f:8a:65:88:f9:f2:cc:b1:80:94:67:ef:22:38:15:4d:79:
         c1:6c:13:7d:84:a7:58:5b:68:f0:4f:75:b2:d3:10:f9:de:d8:
         4f:54:d7:88:67:c2:9b:9a:b0:71:f2:2c:64:90:d7:47:eb:8c:
         2c:0a:a2:18:7a:f5:58:33:ea:fa:ca:e2:87:de:48:16:77:da:
         98:b1:30:c2:a2:eb:26:1d:e9:30:96:d3:7b:9f:18:48:99:d8:
         b3:89:39:34:6d:9e:f9:44:b8:8d:02:09:72:a2:52:50:9a:c7:
         38:77:c9:a4:ef:6e:c6:95:bd:94:b3:b9:18:cd:7e:49:76:3c:
         9c:b4:21:df:77:8a:8c:95:e8:9b:0b:4c:66:2c:ad:62:29:b9:
         46:ad:5c:6c:5e:95:80:9c:6f:a3:4e:1a:3b:ac:58:3b:f7:6d:
         5e:4d:4f:71:1f:b0:59:65:45:de:48:8d:de:64:2c:ff:8a:cd:
         5e:20:95:aa:30:7d:30:88:4c:f6:77:9b:5a:dc:f3:d8:70:65:
         97:b3:b9:28:4d:14:19:13:e0:80:66:13:c9:58:5a:ef:b6:72:
         c9:2e:76:42:66:86:50:22:47:8c:87:4a:99:2b:9c:73:3d:5b:
         a2:88:75:cc:10:01:27:47:f4:5b:8b:97:3c:8c:f7:90:3d:55:
         a0:c8:04:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----