Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PMym-5tE7F_g0xUX6jSPVIcc2F4.roa
File:                     PMym-5tE7F_g0xUX6jSPVIcc2F4.roa (raw, json)
Hash identifier:          E/OOov06Q3RbbgDlTUPE6JWowyDg8DvENJSKY0UVT2o=
Subject key identifier:   3C:CC:A6:FB:9B:44:EC:5F:E0:D3:15:17:EA:34:8F:54:87:1C:D8:5E
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183D7B836EB866481BEFAAB8D2CB6192FB2
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PMym-5tE7F_g0xUX6jSPVIcc2F4.roa
Signing time:             Fri 14 Oct 2022 18:18:37 +0000
ROA not before:           Fri 14 Oct 2022 18:18:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202340
IP address blocks:        2a06:a005:45c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:d7:b8:36:eb:86:64:81:be:fa:ab:8d:2c:b6:19:2f:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 14 18:18:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3ccca6fb9b44ec5fe0d31517ea348f54871cd85e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6a:07:b8:08:56:f2:85:97:e1:9f:e8:11:29:
                    89:31:67:03:aa:5c:c4:bf:c5:dd:be:84:61:fd:c8:
                    f9:9f:ee:fd:25:1a:f5:2c:1d:34:79:03:26:f6:00:
                    39:7b:aa:bd:42:f2:91:9e:a5:f7:cf:b2:8e:05:ad:
                    db:9b:b8:be:60:4b:92:b6:d3:6f:b1:2b:ed:0e:be:
                    14:ba:eb:35:18:58:06:65:6a:c6:60:a4:6c:56:ee:
                    7b:0c:33:70:fc:02:ba:1e:90:b0:bb:10:9c:71:e6:
                    54:ba:18:27:d4:ea:30:0d:2a:25:80:50:b0:3a:96:
                    0b:b6:49:36:9c:a4:f5:1f:02:11:15:90:1a:46:d3:
                    46:09:f6:06:04:02:d3:60:fb:68:c6:91:64:bf:30:
                    76:71:e7:8d:03:0b:2a:bc:74:dd:71:b8:d8:00:09:
                    df:0a:15:2e:9b:1e:00:e0:d9:bc:12:a0:fa:7d:e1:
                    ba:73:c8:5c:a7:c8:1e:4f:01:6a:c9:df:af:61:b1:
                    28:7d:36:86:cf:b5:86:60:a0:40:99:7b:0c:c6:6c:
                    d3:2d:5c:be:0a:91:c6:e1:f9:7d:c1:e0:ad:40:37:
                    44:fd:ec:e8:69:67:64:6c:83:75:98:8e:07:1a:88:
                    e6:65:d7:28:80:6d:f6:95:72:66:c8:bd:2b:e2:77:
                    37:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CC:A6:FB:9B:44:EC:5F:E0:D3:15:17:EA:34:8F:54:87:1C:D8:5E
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PMym-5tE7F_g0xUX6jSPVIcc2F4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:45c::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:75:93:e1:61:e9:c0:93:75:27:ed:e1:79:86:e8:7d:b5:f1:
         c3:f7:17:f2:a5:c6:20:6a:7f:9d:cb:e1:7b:8b:33:21:40:e6:
         44:f3:a5:37:c8:7c:2e:91:d0:be:9c:e1:2b:56:98:22:4a:fc:
         dc:16:99:83:53:1d:5d:ae:f0:96:2e:35:03:7e:69:15:37:20:
         27:11:37:1b:b2:4e:85:1d:5f:ec:87:50:2a:d0:4e:8a:c1:7b:
         70:01:3e:fd:da:eb:86:22:09:d2:a1:c4:c9:0f:1d:14:61:f5:
         b9:26:29:89:e2:8f:7a:52:4c:04:d9:8a:e3:4c:5a:a2:4b:e1:
         35:87:3e:21:c5:6d:af:bf:6e:d5:34:2b:e6:2d:fa:8a:84:8d:
         d0:b2:61:ba:63:42:aa:ea:f8:64:f6:a4:87:0d:5d:82:fe:40:
         6b:7f:3e:5a:2a:d5:75:1c:c8:87:b3:bc:35:33:0a:17:66:e5:
         64:53:bc:0f:d5:9c:4f:ce:60:46:73:36:7b:d4:d3:74:0a:85:
         dc:64:8c:31:0e:4a:c5:e9:5b:05:19:da:98:fb:45:29:34:05:
         20:dc:8b:b9:65:81:d5:e3:af:a1:78:c7:ea:2a:18:bb:7a:36:
         85:ec:ff:a3:0d:7e:6c:ee:9e:a1:89:24:ab:d3:81:6c:10:c0:
         f3:75:40:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----