Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/KpLTNfuDFpYz54oneoLlRq_MD1s.roa
File:                     KpLTNfuDFpYz54oneoLlRq_MD1s.roa (raw, json)
Hash identifier:          B2y+dX1xgBA8ZN3bo++2Y2Sfmlsqxf+AfhJ3JstY/AQ=
Subject key identifier:   2A:92:D3:35:FB:83:16:96:33:E7:8A:27:7A:82:E5:46:AF:CC:0F:5B
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184F490848296343CEC109E80AA0241529D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/KpLTNfuDFpYz54oneoLlRq_MD1s.roa
Signing time:             Fri 09 Dec 2022 01:47:02 +0000
ROA not before:           Fri 09 Dec 2022 01:47:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200879
IP address blocks:        2a0a:6040:f200::/40 maxlen: 48
                          2a06:a005:116d::/48 maxlen: 48
                          2a06:a005:6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:f4:90:84:82:96:34:3c:ec:10:9e:80:aa:02:41:52:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  9 01:47:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2a92d335fb83169633e78a277a82e546afcc0f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:97:fa:4b:28:9b:f4:7c:95:1f:1d:4c:99:de:
                    70:25:90:c1:ec:1a:e1:7a:95:cf:78:e3:2b:f4:2f:
                    2a:16:83:46:ca:44:77:94:91:9a:f0:e5:49:9a:76:
                    36:66:05:21:e4:4b:13:9c:d1:3b:83:d8:92:d0:3f:
                    e4:62:6e:2a:de:be:27:91:0e:16:7e:30:f4:04:bf:
                    c9:d6:8c:85:aa:a2:20:fb:36:17:51:e2:e0:8d:2a:
                    69:b1:8c:fd:9d:10:5a:a7:47:28:5f:0b:8f:82:ad:
                    a0:a9:6b:67:b4:45:31:81:d3:cb:1d:6d:87:56:d2:
                    d2:a2:3e:11:a8:d3:39:b7:91:e7:87:51:82:1c:c5:
                    2f:ac:6d:bc:93:37:4d:22:c8:ce:f3:d0:37:36:87:
                    be:91:94:03:c7:77:fb:f1:8d:cb:7f:82:e2:94:64:
                    9c:04:a5:7d:a5:d1:07:d2:32:f2:06:e3:a0:52:ad:
                    d1:2b:30:18:ee:e3:be:60:ec:2b:f5:c4:94:6f:90:
                    a5:cf:1c:47:f8:3d:ba:eb:76:d4:c3:2a:a5:e5:eb:
                    8d:87:83:1b:47:86:48:d1:63:96:33:0b:09:b8:e0:
                    3e:8d:93:aa:ed:a3:a1:58:0d:24:ac:d0:19:3d:83:
                    a9:a2:5d:3c:19:d7:3e:fd:7b:6b:db:ee:fa:8a:c2:
                    37:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:92:D3:35:FB:83:16:96:33:E7:8A:27:7A:82:E5:46:AF:CC:0F:5B
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/KpLTNfuDFpYz54oneoLlRq_MD1s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:6::/48
                  2a06:a005:116d::/48
                  2a0a:6040:f200::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:01:d5:c1:5d:14:6e:ff:b9:f8:06:e6:09:51:f4:cf:59:d3:
         a4:a0:b8:84:eb:1b:34:0d:d8:6a:8f:14:a5:fd:3f:f1:85:62:
         c0:4b:9c:63:48:ad:74:72:cd:5a:c2:3d:27:81:eb:1e:c8:c5:
         e5:bd:7c:ad:be:9d:24:80:07:9e:57:23:64:dc:0f:59:9a:7f:
         2b:0e:f7:8e:d8:43:db:ab:8e:2f:02:ea:11:dd:8a:e1:94:40:
         b7:91:3c:c0:95:b4:7d:da:86:57:f1:ca:58:a9:40:a0:ed:b9:
         10:39:6b:44:58:59:fa:28:6b:97:42:d9:c4:b0:17:a6:5a:d3:
         cb:b6:c7:87:87:d3:f0:82:7e:81:44:5a:b1:78:29:c4:2c:5b:
         1c:7f:d5:f6:4c:aa:48:d3:69:6e:96:f2:e5:51:f5:36:76:8b:
         9d:0c:b4:36:62:8d:b4:12:b4:74:fc:94:ee:4c:ce:12:74:04:
         5a:0e:f9:33:eb:84:15:d5:cc:8f:86:1c:dd:c9:34:9c:1e:be:
         d7:a1:52:a0:47:24:bc:1d:cc:ae:67:5b:4c:36:1c:1a:04:2a:
         53:00:ef:86:1c:b6:4d:42:81:87:f8:ad:d9:df:a8:a5:1b:d4:
         e6:ec:f4:94:68:42:7e:f8:fb:dd:00:8f:12:cc:70:a1:43:4c:
         fc:81:0c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----