Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Mc50SELtYqNZjyTLm9anivzLl-0.roa
File:                     Mc50SELtYqNZjyTLm9anivzLl-0.roa (raw, json)
Hash identifier:          PC87eXVwsW3Qsd8VIutUNydA+8bx7cpzOWzC2npuR3Y=
Subject key identifier:   31:CE:74:48:42:ED:62:A3:59:8F:24:CB:9B:D6:A7:8A:FC:CB:97:ED
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184F50ED88463E6E9B441094502F867612E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Mc50SELtYqNZjyTLm9anivzLl-0.roa
Signing time:             Fri 09 Dec 2022 04:05:01 +0000
ROA not before:           Fri 09 Dec 2022 04:05:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200754
IP address blocks:        2a0a:6040:c300::/40 maxlen: 48
                          2a06:a005:24a0::/44 maxlen: 48
                          2a06:a005:116d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:f5:0e:d8:84:63:e6:e9:b4:41:09:45:02:f8:67:61:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  9 04:05:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=31ce744842ed62a3598f24cb9bd6a78afccb97ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c8:31:35:1d:f3:8e:0b:fa:89:ad:10:d8:65:
                    02:f5:9f:6b:d6:7a:df:01:87:98:a5:ac:bf:fe:1f:
                    2d:c0:9d:d3:62:f9:5e:f2:15:dc:9d:ad:79:59:ce:
                    a4:e0:a0:6b:d5:cc:e4:58:c3:4d:3c:62:02:34:c2:
                    58:09:da:27:64:74:c0:49:73:66:a6:3a:aa:3d:2b:
                    d9:9b:70:75:0c:87:26:3d:9e:7b:21:92:43:1a:5a:
                    fa:a9:90:1d:ec:09:fc:76:49:22:95:02:bc:bf:6e:
                    24:96:ef:47:3d:47:52:49:6e:8b:d5:23:4a:ed:2a:
                    0f:62:9f:58:ce:89:01:27:b4:cc:98:b1:34:55:a2:
                    01:65:e1:71:f5:68:db:84:40:c7:bb:24:94:5e:48:
                    1f:90:f5:3b:9f:60:68:c3:17:5c:1c:66:b5:93:ae:
                    9c:df:bb:3f:b6:c3:47:be:6b:72:3d:96:8f:84:d0:
                    b1:eb:e4:46:6c:0f:b9:73:f0:d2:da:0c:c4:ed:e3:
                    98:18:45:4a:1b:de:fa:dc:fd:99:b1:6c:f1:ee:6b:
                    91:71:9a:4c:09:52:92:77:20:3e:ce:22:cc:72:80:
                    1b:aa:43:86:08:7c:d1:9f:d6:5a:ec:51:34:7a:10:
                    e8:47:9d:7c:94:cd:ac:00:db:5c:d3:f9:98:27:99:
                    c6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CE:74:48:42:ED:62:A3:59:8F:24:CB:9B:D6:A7:8A:FC:CB:97:ED
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Mc50SELtYqNZjyTLm9anivzLl-0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:116d::/48
                  2a06:a005:24a0::/44
                  2a0a:6040:c300::/40

    Signature Algorithm: sha256WithRSAEncryption
         26:c8:98:29:cb:ee:93:b4:5e:5c:30:46:0e:df:72:b0:64:3f:
         14:cc:64:93:f6:0e:63:4d:8e:0d:c4:1b:22:b5:f7:2a:91:3e:
         cc:92:d3:52:1c:8f:cd:8f:41:80:06:56:6e:a6:66:43:12:4a:
         e0:5f:4a:7e:33:11:cb:16:6c:fe:85:25:a7:60:d3:a5:60:41:
         4d:03:1c:61:d9:b9:bb:f3:3d:92:99:a2:d3:7a:cc:94:21:47:
         0b:80:c2:40:5b:7a:49:4f:db:5b:20:27:56:ae:e2:ad:df:bf:
         3c:5e:aa:50:3d:f1:33:dd:5f:71:cf:f7:79:e1:dc:c3:96:0a:
         a1:5b:18:4d:5f:a5:9b:05:6e:b5:b2:51:be:bf:19:b1:43:bb:
         da:45:cd:41:26:d8:6f:9e:04:da:35:14:5a:b1:00:41:98:9e:
         4f:41:d2:cc:a2:47:f3:85:46:41:47:7b:b7:15:1f:d5:e3:a0:
         90:63:b4:b7:58:8d:e0:f0:67:fc:25:a4:5a:0b:6b:bf:9c:a5:
         1e:cd:6b:f1:86:a7:89:52:1e:5b:e1:02:76:aa:fb:50:68:2f:
         01:55:96:ae:92:c3:6e:42:34:4a:43:85:bc:d8:cc:e1:cd:0c:
         89:fa:00:a9:95:91:27:3c:d1:91:5e:e2:62:f3:d0:bf:c3:7a:
         30:a1:06:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----