Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/N9D_EH_SMVmSYMMLK3JKpRX9Jm8.roa
File:                     N9D_EH_SMVmSYMMLK3JKpRX9Jm8.roa (raw, json)
Hash identifier:          s8yBwhWR6N6Nem/75eglEescM+hrxc4RNPCq6zrl7J0=
Subject key identifier:   37:D0:FF:10:7F:D2:31:59:92:60:C3:0B:2B:72:4A:A5:15:FD:26:6F
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01841FA499976A09B221D4BDC2626621EC7D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/N9D_EH_SMVmSYMMLK3JKpRX9Jm8.roa
Signing time:             Fri 28 Oct 2022 17:29:51 +0000
ROA not before:           Fri 28 Oct 2022 17:29:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204186
IP address blocks:        2a06:a005:150c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:1f:a4:99:97:6a:09:b2:21:d4:bd:c2:62:66:21:ec:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 28 17:29:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=37d0ff107fd231599260c30b2b724aa515fd266f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:06:77:67:d7:d0:0c:45:1d:f8:d2:b3:a0:d6:
                    25:08:53:cb:d3:cf:e0:56:25:77:b4:dc:24:3c:73:
                    e2:25:a0:3d:cc:9a:1a:7e:83:d4:96:a9:24:d0:29:
                    c8:09:5a:f8:7c:ed:47:2f:48:c8:0a:2e:bc:fd:07:
                    2c:d2:23:de:b1:a2:c0:df:f4:ec:47:48:f2:bd:1a:
                    88:d6:f9:84:60:3f:3f:95:57:b6:25:53:32:a3:ba:
                    e7:9b:3e:bf:16:4f:1e:33:1c:4d:49:1b:dd:26:b5:
                    28:1f:b0:92:26:81:c0:73:18:8d:b7:ed:50:b9:a9:
                    d4:ea:4b:a2:c3:9c:60:1a:0f:6a:0f:40:88:29:e2:
                    d0:34:44:25:14:95:6f:15:d2:00:5b:41:bd:65:15:
                    de:4c:17:28:1e:4c:bd:66:d3:8b:b5:d2:69:1d:31:
                    7f:8b:1b:07:c6:00:2d:63:09:33:c8:11:0d:e3:2e:
                    d4:ea:f4:d9:8f:e1:5b:ca:c3:92:27:89:aa:04:80:
                    84:37:98:92:26:ee:2c:7f:60:e5:32:68:af:ca:83:
                    e4:59:4f:43:c0:83:d4:d4:65:d6:a4:66:a4:95:fc:
                    dc:1e:0a:b8:49:cf:d0:d3:e4:c0:f1:08:92:95:82:
                    31:96:4f:71:f6:d4:14:f3:93:37:bb:ce:f0:fa:37:
                    b0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D0:FF:10:7F:D2:31:59:92:60:C3:0B:2B:72:4A:A5:15:FD:26:6F
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/N9D_EH_SMVmSYMMLK3JKpRX9Jm8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:150c::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:3d:85:8f:08:e9:c9:1c:68:e8:01:a4:0f:2b:59:1e:09:da:
         90:f4:08:c2:f2:04:5a:d6:05:15:56:e9:05:5a:fb:a1:e4:9d:
         70:61:19:aa:41:70:d4:be:a2:35:22:4f:84:94:2a:ae:72:76:
         c6:f1:99:2d:ab:a0:30:62:2f:e2:32:3c:db:10:0a:9a:a5:d8:
         28:91:a7:42:b2:3b:7c:3b:64:e2:15:49:3b:e0:a8:31:ad:28:
         43:46:9a:e3:16:66:db:5d:29:42:f1:35:43:f7:cd:7a:4d:2f:
         45:c1:40:62:46:3a:93:5a:8c:ef:9b:1c:03:7e:1a:cb:38:6d:
         96:75:72:20:f5:af:1a:20:0b:92:71:f1:23:a7:77:83:ed:69:
         b8:b4:2f:0e:ac:ee:bb:c9:d1:41:c8:08:07:c6:93:1d:44:0c:
         03:83:bc:a5:86:76:28:55:da:24:df:93:02:b9:da:7f:8f:aa:
         90:85:c9:94:bb:5a:d5:69:09:60:74:02:5c:11:65:0f:13:65:
         5a:c5:39:fe:c3:fd:47:10:76:7a:a0:5e:38:fd:e8:8a:5d:aa:
         de:78:87:19:fc:d8:fc:21:91:64:c5:be:8e:10:28:16:16:40:
         2a:45:88:5f:9f:4f:df:db:0c:da:0b:2c:fc:21:e1:de:fd:3d:
         29:3a:eb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----