Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Lk0ep6K9rfSw9_cL6h6LsVL1-3U.roa
File:                     Lk0ep6K9rfSw9_cL6h6LsVL1-3U.roa (raw, json)
Hash identifier:          vxCvZlhehUxnPprbFYBRfGcw1qvIk2v11Mm4nv9eESA=
Subject key identifier:   2E:4D:1E:A7:A2:BD:AD:F4:B0:F7:F7:0B:EA:1E:8B:B1:52:F5:FB:75
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184E77C6D47DF5DDCF31DFF4CB741959BD3
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Lk0ep6K9rfSw9_cL6h6LsVL1-3U.roa
Signing time:             Tue 06 Dec 2022 12:50:02 +0000
ROA not before:           Tue 06 Dec 2022 12:50:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200850
IP address blocks:        2a0a:6040:800::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:e7:7c:6d:47:df:5d:dc:f3:1d:ff:4c:b7:41:95:9b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  6 12:50:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2e4d1ea7a2bdadf4b0f7f70bea1e8bb152f5fb75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e1:a6:09:63:48:45:41:e3:da:36:7b:6e:b8:
                    ec:16:83:59:46:09:6e:7c:0e:c2:df:e2:ac:f4:ad:
                    72:6e:76:ae:db:4c:bc:a1:c7:b1:da:9d:f4:c0:73:
                    ee:56:e2:8b:20:29:cb:3d:d4:0a:04:19:b0:e9:55:
                    c8:8b:25:fc:84:54:af:a1:33:09:3c:74:f6:63:e5:
                    ab:02:70:05:6c:85:3b:10:ee:ae:52:77:d6:2d:47:
                    2b:a2:dd:32:40:a0:d4:9a:80:2c:51:cd:b0:74:53:
                    57:ae:6b:3e:79:6a:42:1d:42:30:ca:71:b6:58:26:
                    54:9b:62:bc:bb:57:40:82:bc:15:5d:8c:00:7a:9a:
                    f8:6a:22:04:e0:3a:f3:fa:dc:10:1d:6a:25:9f:14:
                    b2:9e:6f:94:69:a6:0f:ad:6e:84:0c:27:2c:d8:cf:
                    cc:b6:a2:83:85:6d:eb:fc:4f:f2:ef:62:0a:8f:a1:
                    d5:1d:cd:e3:72:67:0b:36:c5:9f:bd:38:9c:ae:03:
                    10:02:9b:19:ba:70:9c:03:95:3b:0d:33:65:72:b7:
                    24:89:6a:25:2e:d1:8f:8a:d9:43:08:4b:81:93:22:
                    8f:d1:88:08:4b:51:08:51:d1:c9:cc:01:6f:b5:4a:
                    4e:a3:7d:aa:d0:3e:e8:cb:be:31:ce:35:bb:96:d6:
                    db:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4D:1E:A7:A2:BD:AD:F4:B0:F7:F7:0B:EA:1E:8B:B1:52:F5:FB:75
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Lk0ep6K9rfSw9_cL6h6LsVL1-3U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         4c:ec:37:28:b3:84:0c:24:b7:96:2e:80:b8:98:52:05:37:b7:
         6d:bb:2b:f5:e7:ec:c6:07:00:54:30:8d:72:ea:28:d1:e5:01:
         e1:fd:7d:47:54:c0:47:f1:40:de:66:bb:79:f3:4a:e9:50:50:
         47:e7:90:5d:c3:aa:ba:cb:c4:a3:4c:d6:a0:95:aa:da:98:a2:
         21:ce:2c:54:84:e2:03:7e:1f:1d:95:69:d1:62:81:8c:34:89:
         12:a5:a7:d9:8e:c6:f6:4e:a1:13:94:ab:13:08:72:70:d7:39:
         8b:11:91:fc:42:53:2c:41:d7:79:a3:c2:70:27:ba:49:27:43:
         00:79:6c:9a:6a:57:e0:b9:cd:b3:12:58:90:74:d5:14:fb:f8:
         f9:e1:44:bf:ad:01:f8:7a:39:83:17:03:ea:a5:e7:bc:fd:ec:
         41:4c:89:97:53:97:ad:b5:93:14:20:5e:7a:d0:0b:5a:63:1e:
         08:94:1f:4f:4c:e0:78:4d:ed:84:31:51:5b:20:3c:0f:70:19:
         0b:d7:93:90:39:76:a8:bc:0a:e3:8f:32:63:11:fc:a9:b5:7f:
         e6:58:06:01:09:b4:4e:70:95:ba:ae:d1:82:a3:ec:f8:bc:5b:
         aa:93:7f:a5:a4:15:6a:21:43:2b:92:7a:60:76:e7:f8:d3:dc:
         38:cf:ad:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----