Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/MqwV5VeUl29syXs9ciqLDVT2xjA.roa
File:                     MqwV5VeUl29syXs9ciqLDVT2xjA.roa (raw, json)
Hash identifier:          Mo28LS3yI9+8tEuSDSkDPUrFZaIdqqq34HapDCGM0+M=
Subject key identifier:   32:AC:15:E5:57:94:97:6F:6C:C9:7B:3D:72:2A:8B:0D:54:F6:C6:30
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       15BB0791
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/MqwV5VeUl29syXs9ciqLDVT2xjA.roa
Signing time:             Sat 01 Jan 2022 05:59:06 +0000
ROA not before:           Sat 01 Jan 2022 05:59:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200897
IP address blocks:        2a05:dfc7:8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364578705 (0x15bb0791)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jan  1 05:59:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=32ac15e55794976f6cc97b3d722a8b0d54f6c630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ed:85:97:49:c5:6d:3d:74:60:47:a4:93:db:
                    73:11:27:32:38:a9:62:33:4d:98:6e:57:15:18:d2:
                    5f:83:02:25:ea:32:9c:72:65:ce:b0:e2:8a:a2:e2:
                    1e:16:7e:b6:81:f8:b5:f8:de:6d:52:58:6f:6a:7d:
                    07:dc:82:05:f1:2b:ed:62:79:80:84:dc:60:63:ea:
                    e2:f3:d4:b1:a3:5c:3e:9f:09:5b:6d:e4:e0:62:e0:
                    4c:94:bb:eb:99:b4:73:ec:fe:23:85:f8:1a:56:70:
                    5a:50:7c:97:9c:2f:6a:c1:66:96:98:79:42:5b:0f:
                    89:eb:6f:c4:75:46:c1:bf:1e:b6:2b:b5:31:c5:3f:
                    e4:55:b7:4a:0a:55:62:56:26:45:50:b2:f5:ab:ca:
                    fa:8b:09:e9:cc:d3:cc:09:c8:00:4e:62:f5:df:6b:
                    84:c2:d9:02:58:50:0c:6e:7f:6e:f1:00:33:8a:43:
                    98:fd:6a:bf:72:d3:f2:1d:27:6d:1f:13:89:7a:e2:
                    19:c3:42:e4:3a:ac:63:f7:e4:58:96:97:39:87:b0:
                    08:eb:7a:ee:d0:97:11:7d:a9:93:c8:d0:ee:f5:84:
                    f5:81:41:7d:19:b9:32:c5:42:ff:65:85:d3:3b:fb:
                    f0:de:25:65:38:0e:29:fb:bb:3b:45:00:bb:59:56:
                    25:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:AC:15:E5:57:94:97:6F:6C:C9:7B:3D:72:2A:8B:0D:54:F6:C6:30
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/MqwV5VeUl29syXs9ciqLDVT2xjA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:35:46:2a:34:53:7c:82:98:02:f6:6b:98:31:8c:5f:c6:07:
         fe:dd:f4:5b:da:f6:d1:35:cc:66:9d:ca:a8:47:b5:ed:e1:29:
         fc:0b:db:8d:77:0b:26:87:53:aa:68:2e:73:1f:b2:44:6b:26:
         00:95:32:5e:1f:5d:06:27:93:35:54:e4:94:d7:47:a5:65:6c:
         23:e8:f1:07:18:9c:e7:c6:52:2d:91:b7:93:3d:e5:41:0a:45:
         bb:f6:65:09:a8:05:04:c7:cb:d8:5c:44:bb:fb:ba:ba:f5:b5:
         b9:a0:5b:a0:e5:e6:1a:21:f4:b5:e1:f4:38:a5:08:28:b4:c8:
         6d:b2:f5:3e:83:ff:5e:1c:38:93:f7:26:7a:a6:41:0a:53:f2:
         be:ec:55:20:cb:a6:9c:dc:1e:f5:ca:9e:d7:95:87:00:21:d0:
         76:f4:65:83:43:55:36:6f:17:04:75:07:0a:07:69:72:e8:77:
         e4:f3:f2:20:f3:cf:5d:fd:1e:37:75:2a:b7:7c:43:cb:93:87:
         c8:2e:68:e9:38:ea:9f:d8:8e:ef:d8:e4:78:1c:fe:5c:90:b3:
         a8:a7:fa:ad:62:2e:0c:41:4f:29:90:24:01:76:b6:f8:3b:a1:
         b2:d3:15:c2:a9:1d:e0:b3:c4:67:f5:11:4a:8c:5a:c7:31:f1:
         ab:27:79:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----