Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Oz_buIgg_1CQFIn8T2VcRRR4SDc.roa
File:                     Oz_buIgg_1CQFIn8T2VcRRR4SDc.roa (raw, json)
Hash identifier:          QRLDot4UQJB0e74VUjGB9tQNzTRvyeGd6CkssBlwo78=
Subject key identifier:   3B:3F:DB:B8:88:20:FF:50:90:14:89:FC:4F:65:5C:45:14:78:48:37
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01825AE09916ED125843706F08CD9F89CFA0
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Oz_buIgg_1CQFIn8T2VcRRR4SDc.roa
Signing time:             Mon 01 Aug 2022 19:27:24 +0000
ROA not before:           Mon 01 Aug 2022 19:27:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209870
IP address blocks:        2a0a:6040::/32 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:5a:e0:99:16:ed:12:58:43:70:6f:08:cd:9f:89:cf:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug  1 19:27:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3b3fdbb88820ff50901489fc4f655c4514784837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:71:37:51:84:0f:1b:24:e3:90:c0:fc:ab:97:
                    4d:a0:02:a0:f1:1f:ff:ec:e1:eb:8d:9a:a4:21:e6:
                    75:b1:dd:41:c8:b0:0f:7b:c9:12:e6:58:4f:d9:15:
                    a1:44:61:b3:dd:7b:41:67:13:36:24:ee:78:b6:9a:
                    ce:31:24:90:cb:8e:54:5e:51:c2:99:03:dd:8d:94:
                    c3:32:be:5a:74:35:f8:25:e8:82:1c:73:c8:16:26:
                    4a:11:6c:38:d9:bd:57:f9:3a:d6:82:dd:95:22:ab:
                    17:a6:eb:f0:79:3d:e5:42:56:6b:ba:6c:73:19:79:
                    0f:4b:12:a7:4d:af:60:da:2e:59:a7:c1:2c:f8:b4:
                    9d:aa:66:94:cc:f2:a6:0a:da:1d:5d:13:c2:c3:e0:
                    b4:e7:f3:36:1d:9c:f5:d0:f9:49:b2:72:e5:f5:72:
                    2d:1a:c9:cb:59:49:9d:a3:40:07:f8:ac:b2:ce:88:
                    c8:33:be:91:25:7f:45:d4:85:78:8a:e8:eb:a3:88:
                    62:33:19:9e:c3:b5:b2:f0:e5:b1:90:c3:f6:1c:3e:
                    d4:d0:b0:84:81:41:11:00:65:c8:3a:ee:23:a7:25:
                    4e:97:8a:fd:6d:72:00:59:e6:7d:7e:ac:e9:34:6f:
                    16:bf:da:02:cd:12:fb:df:d0:f0:36:56:67:a7:98:
                    21:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:3F:DB:B8:88:20:FF:50:90:14:89:FC:4F:65:5C:45:14:78:48:37
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Oz_buIgg_1CQFIn8T2VcRRR4SDc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48
                  2a0a:6040::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:5d:6b:69:f4:cb:10:c0:27:3d:2f:8a:87:98:44:7b:d7:c2:
         10:ae:58:12:94:76:54:bb:46:24:ce:e7:43:1f:39:38:ed:df:
         e6:13:b9:37:3a:6a:0c:2c:db:c1:81:4c:7e:2d:9f:ad:cf:8e:
         48:2f:75:39:4c:98:d5:55:a2:d2:f3:a6:4d:2f:63:7e:14:22:
         67:29:cd:26:89:3b:da:64:4d:61:30:1a:e0:95:c6:8d:8f:08:
         b4:86:57:c2:0a:56:7e:c8:aa:e7:3f:87:80:0a:db:80:1b:aa:
         a2:94:25:81:6a:e8:2c:2b:f8:12:3f:57:51:14:52:22:2b:0f:
         e6:36:62:dc:6f:05:33:be:7b:07:e5:41:55:26:33:74:01:4a:
         63:5a:aa:e6:3b:a6:93:d8:f7:7e:42:8c:2d:dd:9f:93:d5:8d:
         db:bd:13:be:64:ce:73:03:2a:c2:c3:63:a6:c6:bf:6e:29:db:
         3d:37:6a:ec:b5:f9:f6:04:5b:4a:63:45:35:88:43:59:f8:40:
         88:db:69:7e:b2:0e:9a:c0:85:11:bf:8e:2d:d1:ed:d7:09:30:
         ae:e3:6e:19:0a:23:6d:6e:11:87:a4:45:2e:6e:c6:a9:dd:fa:
         bd:8b:76:fd:5f:f6:7c:d8:c9:71:ae:e9:ce:f0:22:75:2f:78:
         39:2d:52:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----