Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/MBYGEcPfa5Kz6wQiwTNqK-meds4.roa
File:                     MBYGEcPfa5Kz6wQiwTNqK-meds4.roa (raw, json)
Hash identifier:          Q6G+ihZM0yBsQDVhuqHoL6hnc9stDAWDyME3U16Ope4=
Subject key identifier:   30:16:06:11:C3:DF:6B:92:B3:EB:04:22:C1:33:6A:2B:E9:9E:76:CE
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       19F3DBAB
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/MBYGEcPfa5Kz6wQiwTNqK-meds4.roa
Signing time:             Fri 20 May 2022 05:56:29 +0000
ROA not before:           Fri 20 May 2022 05:56:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     395332
IP address blocks:        2a06:a005:5e1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435411883 (0x19f3dbab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May 20 05:56:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=30160611c3df6b92b3eb0422c1336a2be99e76ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:46:8d:80:17:08:a1:a6:f9:a6:f8:ec:c1:f4:
                    99:81:22:22:9f:25:1d:3f:c8:73:5b:10:e6:f8:f8:
                    ae:60:3e:33:fb:4a:5c:fe:e6:db:5c:86:f9:0e:f6:
                    4a:68:d1:57:64:0f:7d:74:b9:ad:4b:f2:44:0f:44:
                    1e:b5:aa:6c:6b:1e:27:26:46:8f:a6:ba:6b:b9:05:
                    73:7e:1e:ae:33:4b:0c:b0:69:56:03:c7:59:ec:aa:
                    e5:0f:07:a2:d1:e6:be:fa:c7:40:47:7b:7a:ab:bd:
                    7f:b9:91:13:5d:54:e0:80:8d:08:2e:1a:e4:a2:20:
                    de:60:37:4d:ce:94:65:ee:34:82:5f:97:07:12:5b:
                    e5:1a:8d:19:3f:23:28:af:83:d1:af:97:dd:0e:61:
                    56:03:91:de:6f:b0:78:3c:3b:5c:27:52:02:17:11:
                    c1:a1:42:0f:46:e8:d2:7b:33:82:45:0a:57:f6:38:
                    fe:8a:ad:18:e5:e7:7a:16:42:bb:d7:43:90:3a:ca:
                    8e:d4:93:48:b8:c7:48:55:93:c0:23:3d:05:97:56:
                    d2:81:9f:37:0d:9f:44:ce:0f:81:d9:1a:6a:c5:d6:
                    3c:fa:09:1f:f2:33:0c:55:b9:0f:78:33:35:ad:ab:
                    c2:c3:48:bb:f8:a6:6e:83:c3:77:a3:2e:9f:97:52:
                    9f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:16:06:11:C3:DF:6B:92:B3:EB:04:22:C1:33:6A:2B:E9:9E:76:CE
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/MBYGEcPfa5Kz6wQiwTNqK-meds4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5e1::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:90:48:1e:7d:51:1a:5d:4c:8d:b8:2f:c5:6e:e1:b4:15:2a:
         20:e2:d5:7f:06:e5:06:87:92:b4:9f:ef:42:8b:77:ba:0a:fd:
         ba:ea:67:ae:de:88:0b:ce:e6:13:e2:6c:31:44:72:a0:1e:17:
         c8:dc:15:62:c7:ec:5e:6d:ed:33:8a:09:3f:4b:c8:b8:4c:3e:
         b8:a3:98:92:24:a2:f5:74:a1:8a:ca:2e:ee:f4:77:6e:ac:29:
         20:4a:91:6d:e6:c8:69:68:00:51:29:23:9c:8c:35:cd:43:0a:
         63:ef:23:2d:16:9e:14:17:99:48:5f:be:7a:bc:ef:e1:a3:f7:
         f9:8d:37:f0:84:1f:35:cc:ad:cc:7d:17:01:d5:04:e9:da:be:
         2f:56:4e:e6:e4:fe:bf:fe:de:e0:6d:37:3f:10:af:2c:79:d1:
         ee:a8:04:66:a9:a3:9d:c5:6e:c0:bd:74:38:d8:c0:62:15:fe:
         fe:e3:89:59:b9:6c:ad:8f:d7:89:3b:90:25:60:af:ed:58:f6:
         9d:9c:12:a4:51:9a:f2:6d:2b:39:19:aa:2b:dd:65:a6:ac:1f:
         42:4a:b2:f9:17:8c:cf:da:6b:23:4e:83:cc:c6:36:a3:f3:c9:
         13:b8:74:a8:3a:1c:8e:b0:65:90:29:96:11:f6:14:bf:59:b3:
         ce:7d:8c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----