Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/LTzKJ-KFPXzkro00BXGjeE4WgQc.roa
File:                     LTzKJ-KFPXzkro00BXGjeE4WgQc.roa (raw, json)
Hash identifier:          snrrt2hjjURPsRmqsrn1JGR6/sHyvYGP6y4cpg2Sfu8=
Subject key identifier:   2D:3C:CA:27:E2:85:3D:7C:E4:AE:8D:34:05:71:A3:78:4E:16:81:07
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018314A5F71AB682E01C49BC34198620C9F1
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/LTzKJ-KFPXzkro00BXGjeE4WgQc.roa
Signing time:             Tue 06 Sep 2022 21:12:44 +0000
ROA not before:           Tue 06 Sep 2022 21:12:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202988
IP address blocks:        2a06:a005:857::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:14:a5:f7:1a:b6:82:e0:1c:49:bc:34:19:86:20:c9:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep  6 21:12:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2d3cca27e2853d7ce4ae8d340571a3784e168107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7d:0a:43:44:d0:ea:07:60:17:44:52:9c:62:
                    e9:53:46:94:83:b0:ab:c3:09:a2:dc:e4:25:ec:18:
                    13:37:1c:ba:97:59:44:47:7b:ba:9a:b2:2e:54:26:
                    b9:07:70:03:a6:d1:94:8e:79:18:72:74:8e:e6:73:
                    a8:1e:1e:ef:9a:ad:2e:0e:cf:9a:fb:89:2f:d8:df:
                    55:73:71:f2:1b:5c:bd:dd:56:56:7b:ad:d3:28:c8:
                    16:63:78:68:69:30:a6:dc:44:4d:a3:c3:da:00:0a:
                    cf:09:9e:57:de:f9:ae:f1:53:54:9e:ac:db:90:4c:
                    a5:20:6c:e5:11:e8:9c:23:50:98:e6:45:88:31:e5:
                    85:b8:1e:d3:3b:b3:52:ea:c8:fd:84:68:87:49:f1:
                    09:bd:fb:a8:b4:87:a4:1e:50:22:19:91:d6:ab:84:
                    cc:17:be:fb:e3:4b:bf:3b:29:4d:8e:fc:9b:4f:f2:
                    e7:08:23:30:a7:de:58:46:90:08:36:f2:31:c6:92:
                    88:77:83:4e:b5:97:0c:5b:14:29:f4:4f:10:63:9e:
                    49:1b:85:a6:c3:0a:07:00:56:48:9f:06:5e:36:81:
                    88:91:9c:86:14:a1:8b:7d:f3:e0:18:59:17:f2:d5:
                    58:85:49:4e:8c:79:1f:f6:32:bf:01:de:56:44:55:
                    cf:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:3C:CA:27:E2:85:3D:7C:E4:AE:8D:34:05:71:A3:78:4E:16:81:07
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/LTzKJ-KFPXzkro00BXGjeE4WgQc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:857::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:41:56:ff:26:91:c1:7a:d7:c8:c6:85:21:a9:5f:2a:9d:4d:
         60:87:9c:9b:28:03:64:87:e7:79:d7:95:0a:4c:d0:0c:a8:ff:
         13:2c:62:27:a2:bc:17:d5:41:7f:69:c7:f4:e2:ba:22:12:c6:
         99:ef:c9:12:29:5b:b3:69:34:28:d4:76:88:44:a5:b0:02:2c:
         25:c6:f1:47:47:c1:b8:38:b8:8e:31:8c:f7:16:1b:94:ab:54:
         8b:29:10:4f:44:df:f1:38:d4:df:1a:a4:29:13:09:fc:1a:ee:
         15:44:84:4d:08:11:4c:60:65:57:90:ae:19:ea:c4:58:e3:d1:
         83:25:1d:15:36:b5:e9:88:d8:3b:ae:4f:9b:0b:0b:ba:b7:8c:
         5f:68:5e:cd:0c:5f:15:4c:73:b9:18:af:17:cb:79:19:50:93:
         8d:b9:5b:97:8a:3e:53:63:cb:82:3a:80:c0:6b:bf:e7:2c:12:
         db:8e:dc:76:76:08:42:a2:ce:1b:0d:70:18:49:0c:38:37:a0:
         9d:95:2e:2e:9a:31:98:ed:51:18:c5:f3:86:03:50:fa:bf:a3:
         51:a2:34:62:af:81:80:3c:62:44:f9:80:2a:32:57:b3:c1:ac:
         2b:23:31:e0:93:a8:a6:95:9f:52:cd:ad:8b:90:57:0e:a2:08:
         3a:6a:1a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----