Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/N26rq6cq-xfI7yNA-VfkJ0uOQ6Q.roa
File:                     N26rq6cq-xfI7yNA-VfkJ0uOQ6Q.roa (raw, json)
Hash identifier:          y19+WO/fYA1nCJgR/stdAuTTT7LOteLESrmKmn2/RNg=
Subject key identifier:   37:6E:AB:AB:A7:2A:FB:17:C8:EF:23:40:F9:57:E4:27:4B:8E:43:A4
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1841EAE7
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/N26rq6cq-xfI7yNA-VfkJ0uOQ6Q.roa
Signing time:             Sun 17 Apr 2022 22:21:34 +0000
ROA not before:           Sun 17 Apr 2022 22:21:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206946
IP address blocks:        2a06:a005:4da::/48 maxlen: 48
                          2a06:a005:4db::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406973159 (0x1841eae7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 17 22:21:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=376eababa72afb17c8ef2340f957e4274b8e43a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:06:f1:8f:75:f8:7b:d2:ab:0e:33:f3:8a:32:
                    45:3e:e4:e7:5d:3c:70:ae:d5:98:be:e7:71:46:ff:
                    d7:88:cc:1f:94:09:d4:83:a8:c4:38:34:b7:b9:48:
                    c3:35:06:89:85:38:8e:4b:7e:77:c1:4e:b4:49:96:
                    db:b5:26:84:91:10:01:b5:0e:b6:ce:bc:77:7b:d3:
                    7a:93:a4:63:e4:f0:1c:fb:94:ac:19:7d:9b:f2:b7:
                    31:54:9d:c3:ce:1a:b6:5a:79:d2:a0:fb:ba:1d:2c:
                    ce:98:4b:7d:0b:85:82:12:7e:49:1c:78:b9:a8:f4:
                    d0:9a:6b:bd:07:8a:2b:d6:f8:a6:dc:94:e2:ab:8d:
                    1e:87:b7:cf:86:a6:9e:80:09:b8:9c:5e:b9:fb:1a:
                    2c:84:5e:3d:23:ed:f5:d9:e4:e9:48:00:d7:eb:e2:
                    96:71:ea:da:47:7a:f8:74:3c:37:49:50:4b:20:a8:
                    f7:26:3c:19:8f:c8:8c:a9:36:62:fe:d7:47:cb:6a:
                    b8:36:c1:91:13:49:eb:86:87:18:be:85:44:a2:61:
                    a3:a7:fc:64:f6:f1:7e:53:0d:00:65:41:ef:89:b6:
                    0b:52:78:39:09:bc:1c:8e:4a:b3:2b:19:a5:76:d9:
                    c8:48:27:1a:64:54:df:73:f0:78:02:64:71:2b:e2:
                    2c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6E:AB:AB:A7:2A:FB:17:C8:EF:23:40:F9:57:E4:27:4B:8E:43:A4
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/N26rq6cq-xfI7yNA-VfkJ0uOQ6Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:4da::/47

    Signature Algorithm: sha256WithRSAEncryption
         35:c4:16:3a:6f:0b:05:b9:2c:9f:6e:e2:b5:a7:75:8e:a7:52:
         04:6b:a5:88:25:bf:65:a7:13:38:7b:45:00:a4:71:df:32:ea:
         ed:16:d3:89:0e:90:c8:e7:f3:04:17:37:f9:57:28:a6:44:7d:
         52:9c:a8:0c:7f:1f:ac:27:84:b5:45:ca:c9:87:3d:74:85:f1:
         95:b3:0d:87:ef:3f:86:57:53:a2:ca:2d:9b:f3:33:b1:ef:31:
         e6:45:49:33:82:af:c6:23:a4:ec:23:55:1f:2b:71:2c:da:d0:
         a2:37:36:41:a8:c8:84:22:2c:db:9b:71:aa:40:7b:b0:8e:71:
         ac:06:6f:57:68:7e:7f:60:fb:d6:ec:1e:53:5b:58:5f:7f:b9:
         4e:cc:20:22:23:ad:49:76:ad:e2:7e:07:f5:4c:10:b0:f2:00:
         83:77:ba:2f:8d:6b:38:96:c8:f7:64:c3:8c:35:ef:33:af:86:
         e8:b6:c5:53:cb:6e:db:6d:6e:f1:66:5e:4d:7c:f3:27:c4:aa:
         f9:30:0c:b3:3a:e2:50:db:c0:8d:64:a6:b3:9c:b0:6a:8e:06:
         62:0c:dc:06:f5:ef:c6:c8:3f:c4:bd:86:59:52:f0:0b:72:dc:
         cb:bc:74:2a:0d:46:89:00:e2:2e:1a:c8:97:fb:dd:ad:17:35:
         3d:17:7f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----