Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/LkMyolfflYLoedcQMc0odlsDsv0.roa
File:                     LkMyolfflYLoedcQMc0odlsDsv0.roa (raw, json)
Hash identifier:          9ArMMecvG8+hmLApvERBAm8FD/b5yuDVLt7uYcLb99Y=
Subject key identifier:   2E:43:32:A2:57:DF:95:82:E8:79:D7:10:31:CD:28:76:5B:03:B2:FD
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1786F6A5
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/LkMyolfflYLoedcQMc0odlsDsv0.roa
Signing time:             Tue 29 Mar 2022 13:49:32 +0000
ROA not before:           Tue 29 Mar 2022 13:49:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211509
IP address blocks:        2a06:a005:9::/48 maxlen: 48
                          2a06:a005:8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394720933 (0x1786f6a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Mar 29 13:49:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2e4332a257df9582e879d71031cd28765b03b2fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:24:2d:40:69:b5:4d:08:00:1e:d2:73:b1:9e:
                    53:37:f2:ec:2c:09:14:71:a0:a2:bf:63:be:43:1e:
                    a2:18:c7:3e:b1:e8:e2:1a:6a:84:36:b4:96:09:ab:
                    30:20:e5:0f:64:26:ef:2a:5f:37:d8:e2:02:5c:3c:
                    13:dc:4b:4c:ef:9e:98:1b:4f:8b:d0:7c:b8:2a:2b:
                    95:27:8c:a6:7a:e4:69:31:7f:0a:50:eb:f0:47:ca:
                    c0:d3:d5:e0:e0:75:8c:45:2c:24:03:b8:0a:4a:1c:
                    6d:3e:68:7f:f6:b2:97:dd:92:b6:1a:0f:8e:de:3c:
                    7b:fb:a2:5f:b9:93:fd:a2:ac:fd:e7:04:5c:04:f0:
                    04:fb:77:3a:f1:03:02:ab:ff:13:11:bd:47:c6:62:
                    56:c9:81:06:d6:36:ac:b1:dd:28:5f:07:d6:43:23:
                    e9:41:99:5a:cb:af:22:7e:32:c1:7d:63:b0:1a:11:
                    27:4c:13:d9:22:fe:fb:fc:ea:cf:2b:2a:13:af:30:
                    89:04:d0:a1:99:45:1f:c4:0f:e0:26:2d:23:77:86:
                    de:6a:8e:e8:bc:e3:c3:72:b7:e8:36:58:fc:fd:7c:
                    78:da:c8:0b:fc:bf:7e:57:4c:90:36:b1:42:61:3e:
                    7c:ea:d7:e3:18:d6:be:fa:aa:2b:e5:c0:1d:67:7f:
                    5e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:43:32:A2:57:DF:95:82:E8:79:D7:10:31:CD:28:76:5B:03:B2:FD
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/LkMyolfflYLoedcQMc0odlsDsv0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:8::/47

    Signature Algorithm: sha256WithRSAEncryption
         58:3c:5a:f5:40:1c:e4:d8:8b:97:8d:98:3f:33:26:e0:ed:60:
         45:b2:4c:28:6b:d0:e8:4f:6d:fc:e8:ef:5d:0d:ca:bd:1f:78:
         15:21:6a:e1:9c:ab:fc:02:f5:f5:c0:cd:db:02:b9:94:7e:ed:
         16:55:14:e7:83:7c:f1:2a:26:a6:12:d2:11:04:03:96:d7:c2:
         98:f0:6d:cf:2d:db:3b:18:d8:71:fa:c0:5f:4e:f3:02:07:e8:
         a5:46:ed:ff:45:a1:42:be:26:03:41:56:86:50:b4:cb:9b:7b:
         89:57:4f:0d:08:52:bb:fe:af:8e:cd:31:af:fb:06:e1:18:47:
         16:f9:72:de:54:e0:4e:44:6b:dc:61:0a:14:3d:04:34:18:d5:
         93:af:85:c1:b2:20:30:91:b5:10:4c:c4:35:d9:7d:08:95:cc:
         00:6d:09:c1:4b:f9:49:c2:1b:b2:12:ce:9e:f6:b4:54:ca:e0:
         1e:5a:7f:8d:55:30:82:87:3a:ec:09:52:69:e0:a3:1b:d4:76:
         d0:bb:36:86:9f:76:c3:15:71:78:c6:df:70:d3:a7:e0:7d:aa:
         53:56:f4:99:ee:90:e5:3f:dd:4d:2c:7e:ed:a5:7f:54:bf:7b:
         3d:58:02:fa:5b:7b:0e:df:3f:ad:be:cf:6e:86:0e:5a:cd:69:
         ed:c5:1d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----