Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/LIwZfG6W8TW5ZrguPrtXhUjSNrw.roa
File:                     LIwZfG6W8TW5ZrguPrtXhUjSNrw.roa (raw, json)
Hash identifier:          0W1GcaR/2W5GmBmQH+Pdtxt6+PTgvQwLZGKT1bS2wn8=
Subject key identifier:   2C:8C:19:7C:6E:96:F1:35:B9:66:B8:2E:3E:BB:57:85:48:D2:36:BC
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1A386A56
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/LIwZfG6W8TW5ZrguPrtXhUjSNrw.roa
Signing time:             Sat 28 May 2022 14:54:13 +0000
ROA not before:           Sat 28 May 2022 14:54:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     142289
IP address blocks:        2a06:a005:a50::/44 maxlen: 48
                          2a06:a005:700::/44 maxlen: 48
                          2a06:a005:a60::/44 maxlen: 48
                          2a06:a005:a30::/44 maxlen: 48
                          2a06:a005:a40::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439904854 (0x1a386a56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May 28 14:54:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2c8c197c6e96f135b966b82e3ebb578548d236bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:01:2d:c5:bd:49:fd:1c:e4:a3:42:3b:e7:24:
                    28:bd:98:99:86:d7:79:40:36:0e:21:9b:7e:33:8f:
                    0a:93:b1:e8:81:f6:de:e8:9f:5f:a8:fd:23:4c:c0:
                    ab:08:5c:40:6c:0b:b2:80:8c:55:38:22:9a:9e:38:
                    a8:6c:14:98:3a:0b:6b:de:f7:80:6c:d9:40:91:b7:
                    1a:05:a3:0d:d8:de:50:b5:f5:37:b0:48:f0:82:88:
                    51:58:c6:94:6e:df:5f:5a:d3:22:ca:d4:c8:48:24:
                    a4:af:e5:8e:ba:51:a4:8a:9a:f5:b4:3e:4a:e9:c9:
                    2a:74:e7:33:62:81:4d:8a:92:f3:01:e5:e4:22:bf:
                    bf:69:9f:07:ec:d1:66:06:b0:d2:e7:a4:2d:24:94:
                    6a:7b:7e:ce:5a:3e:4a:f1:3f:b2:96:2a:e3:44:52:
                    44:37:ae:fd:b3:5e:25:28:e0:a7:99:33:3a:bb:14:
                    cb:1d:0d:f6:7f:42:a2:27:c5:3e:27:f3:cb:52:21:
                    ef:7d:e4:72:27:c4:19:2c:0f:b9:42:83:69:24:ba:
                    1a:8f:39:e4:17:11:49:87:ae:a4:0f:98:b1:15:11:
                    b1:31:ec:52:ab:cf:ae:bf:ba:1f:d3:20:1f:d9:3a:
                    36:65:cd:4e:65:b3:04:0b:22:f4:65:75:08:f9:23:
                    ba:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8C:19:7C:6E:96:F1:35:B9:66:B8:2E:3E:BB:57:85:48:D2:36:BC
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/LIwZfG6W8TW5ZrguPrtXhUjSNrw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:700::/44
                  2a06:a005:a30::-2a06:a005:a6f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         8b:ff:8e:c5:1e:53:20:57:8c:10:fc:62:f9:06:23:eb:81:4d:
         08:a3:b3:7a:30:d3:86:56:88:d9:95:e7:d5:ba:14:e7:4e:12:
         ed:9a:e9:5d:4f:1a:df:13:98:bc:2b:69:ee:f1:fd:c8:5e:9c:
         4d:dd:91:f3:9b:e4:52:c5:2f:0f:e9:a3:23:6b:99:b6:a1:99:
         a1:03:cc:b2:2e:4d:e9:f3:19:a6:d2:1d:e0:89:3c:60:8e:89:
         50:9d:ab:fd:ef:23:f3:2c:85:79:ea:52:3d:66:0c:26:83:5f:
         7c:a5:1f:01:26:25:9e:24:7c:f4:07:1f:30:48:b2:11:52:c8:
         d4:62:c5:09:f5:e4:59:dc:ad:71:4b:16:0d:49:ab:91:7c:ed:
         91:c1:08:22:ed:6c:66:7b:fe:69:dd:ee:5b:65:70:6f:ca:17:
         21:84:4d:f4:c8:10:06:78:5d:7c:99:6e:20:51:28:69:92:b2:
         a2:5a:b4:c2:86:49:19:bc:ed:ea:d9:62:36:96:68:37:55:ee:
         5a:af:53:fd:3b:44:62:1e:5c:c3:14:5b:f5:e7:9e:63:78:0a:
         72:aa:78:97:04:f1:54:cb:f9:58:bd:dc:78:b7:52:f2:ae:60:
         c3:57:9c:9c:fb:fa:18:7c:9a:74:d1:46:6e:4d:3c:a2:df:4d:
         71:65:01:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----