Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/OlMUdYD11OPwG5hk0YF_jTcJaLw.roa
File:                     OlMUdYD11OPwG5hk0YF_jTcJaLw.roa (raw, json)
Hash identifier:          E8JJ/05mfmrx6J6aD1VbImelkc7XjKqHA114K7bOOcw=
Subject key identifier:   3A:53:14:75:80:F5:D4:E3:F0:1B:98:64:D1:81:7F:8D:37:09:68:BC
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       18CBF859
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/OlMUdYD11OPwG5hk0YF_jTcJaLw.roa
Signing time:             Wed 27 Apr 2022 06:12:54 +0000
ROA not before:           Wed 27 Apr 2022 06:12:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200681
IP address blocks:        2a06:a005:18::/46 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416020569 (0x18cbf859)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 27 06:12:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3a53147580f5d4e3f01b9864d1817f8d370968bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:22:f6:d3:5c:44:62:cd:21:8c:b0:33:82:59:
                    8a:24:45:d4:ee:26:f7:2e:8b:9b:c1:cf:58:f0:84:
                    9f:d2:5b:3e:e3:55:7f:fa:4a:73:b2:f9:2a:0c:3b:
                    f7:68:70:35:7e:c9:07:ee:c0:f7:1a:78:10:e1:c0:
                    ff:41:c5:bf:bd:8a:d1:a0:1e:36:80:e9:5f:02:28:
                    bd:e1:56:0d:32:b8:2e:07:b2:bf:ee:e8:0a:bb:73:
                    a0:6f:00:a9:bb:99:30:1f:f3:b9:38:95:ca:aa:87:
                    60:a2:1f:88:5a:68:6a:cb:06:38:6f:7a:ce:44:eb:
                    67:70:66:a0:f2:9e:ed:50:57:11:6b:da:3c:3d:fb:
                    e3:bf:59:77:9c:4f:c2:1e:a3:66:60:4e:e6:a7:01:
                    64:a8:b6:09:3e:52:29:bb:e1:65:63:2f:69:d1:83:
                    c4:52:ce:ba:27:8d:a5:22:52:fa:4f:be:bd:6e:e7:
                    ef:10:32:89:79:6b:19:ed:e3:e0:af:84:4d:a5:1a:
                    72:7c:ef:b6:df:fb:71:a1:c9:7d:cc:b6:94:f1:52:
                    0f:d8:ce:eb:0b:83:d4:06:76:84:ec:10:b4:58:61:
                    2c:29:a3:c4:df:01:76:95:24:66:75:35:f1:27:53:
                    b5:be:dc:cf:7f:da:73:84:4b:09:dd:82:77:7d:ed:
                    8a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:53:14:75:80:F5:D4:E3:F0:1B:98:64:D1:81:7F:8D:37:09:68:BC
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/OlMUdYD11OPwG5hk0YF_jTcJaLw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:18::/46

    Signature Algorithm: sha256WithRSAEncryption
         12:b3:7d:eb:56:fd:5c:6d:9b:ea:de:24:f0:17:9a:9c:7d:e8:
         f9:30:b8:ed:96:48:f5:48:8c:6e:b1:29:52:aa:48:03:8a:3f:
         ab:35:83:99:b8:45:99:8f:77:d4:78:7b:6d:13:40:4a:43:d9:
         b0:25:e5:f6:54:18:0e:18:76:88:a8:79:57:57:bf:37:ee:4e:
         a5:96:9e:e7:c2:37:2b:58:99:a8:b6:aa:3f:77:3a:b1:11:d5:
         e1:b2:1a:c5:97:e3:1e:c3:9d:73:02:da:93:56:99:bc:44:5d:
         88:aa:b3:16:52:8f:56:58:9f:1c:5e:ec:36:b0:ad:35:a0:ed:
         c0:96:fe:43:ef:9a:90:ee:45:f4:00:87:fb:b2:28:bb:c3:82:
         be:59:fb:ed:14:65:71:a2:fe:bf:35:bb:37:db:22:58:78:8a:
         1b:fb:6b:99:a4:1a:0a:51:2e:bf:ab:7a:5a:85:8a:86:32:0e:
         c9:6c:6e:a0:c0:62:8b:59:7d:4e:e9:4f:b7:28:4a:ac:dd:6f:
         96:a8:cb:de:e2:c9:ac:0a:57:25:5b:5f:9e:c8:5c:1a:22:91:
         0e:e0:17:bc:8d:c7:b3:d2:dc:09:0b:1c:88:ce:ad:71:a9:00:
         f7:08:ae:2d:2a:a0:71:26:0f:5f:55:c3:c2:a6:b0:02:82:02:
         33:30:61:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----