Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PklA-zu--DeMQlbLAjdz_H9vn_0.roa
File:                     PklA-zu--DeMQlbLAjdz_H9vn_0.roa (raw, json)
Hash identifier:          99joG6KCzJqpiiET38Z+SawPF4JDhuvIvQlOHJerF/M=
Subject key identifier:   3E:49:40:FB:3B:BE:F8:37:8C:42:56:CB:02:37:73:FC:7F:6F:9F:FD
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184B1C386F2F50FD3E5B17F8D746310B30E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PklA-zu--DeMQlbLAjdz_H9vn_0.roa
Signing time:             Sat 26 Nov 2022 02:28:12 +0000
ROA not before:           Sat 26 Nov 2022 02:28:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203453
IP address blocks:        2a06:a005:150d::/48 maxlen: 48
                          2a06:a005:108e::/48 maxlen: 48
                          2a05:dfc7:2300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:b1:c3:86:f2:f5:0f:d3:e5:b1:7f:8d:74:63:10:b3:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 26 02:28:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3e4940fb3bbef8378c4256cb023773fc7f6f9ffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c2:59:5b:e9:2a:8a:9e:75:8f:ad:33:ae:6c:
                    16:cd:de:c1:6e:57:f0:9f:ed:25:e7:0a:04:08:fc:
                    be:9a:1a:6d:7d:b1:bf:5c:74:bb:eb:c2:5e:95:31:
                    02:3f:ca:98:15:16:cd:24:ee:7a:3f:53:d0:0a:58:
                    87:a4:47:2c:aa:d8:fe:7f:8f:5a:e2:ff:1d:04:b9:
                    16:92:f5:7c:4c:d6:2e:ec:0a:6c:a9:87:14:7d:35:
                    69:19:75:00:23:68:1f:09:a5:54:4b:28:ee:55:30:
                    7f:9f:f5:28:7b:5b:2e:7a:6c:de:4a:c6:ff:19:04:
                    24:7b:07:34:20:10:45:d3:47:19:31:49:ce:ac:22:
                    7d:7d:23:3e:1b:ba:41:d9:83:22:a6:da:3d:9f:92:
                    7c:db:2f:69:0f:5e:ef:3a:cb:a5:95:4f:c8:72:28:
                    05:ce:27:c7:3c:d0:e5:2a:1a:88:b4:dd:be:ed:64:
                    b0:01:30:33:b6:8f:3f:8c:5f:4b:7f:7e:88:13:03:
                    f0:7d:63:37:1d:8f:1a:6a:b3:83:33:b8:4d:f4:9b:
                    9f:23:4c:63:46:9d:c6:26:bb:1e:37:83:8c:5b:99:
                    14:19:41:d0:c9:d1:db:03:ab:42:3a:fc:80:40:8f:
                    1c:d1:cd:a3:73:1f:a6:0e:c4:86:bf:31:b3:0e:c1:
                    05:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:49:40:FB:3B:BE:F8:37:8C:42:56:CB:02:37:73:FC:7F:6F:9F:FD
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PklA-zu--DeMQlbLAjdz_H9vn_0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:2300::/40
                  2a06:a005:108e::/48
                  2a06:a005:150d::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:4e:58:51:fc:60:af:25:80:d7:0f:1a:5c:86:df:1f:28:14:
         75:3a:eb:f0:a3:06:d7:80:8c:20:35:9a:30:9e:8a:56:ef:cf:
         24:b6:b1:8a:25:91:94:20:34:57:bd:f6:65:c2:9f:30:b1:3d:
         51:ad:35:8a:4d:56:0a:67:04:f9:55:ee:c6:37:a6:02:3b:d9:
         bb:0f:7a:06:41:27:5e:64:8b:f3:5a:94:f0:44:9c:2b:ac:50:
         69:c3:eb:67:68:f0:b6:99:9f:93:b6:cb:55:17:9f:73:82:65:
         06:30:a9:ef:cf:9c:d0:50:50:6d:a7:64:0c:98:fd:a5:75:0a:
         a1:1e:19:20:ae:6e:0d:a5:1a:43:7f:57:23:1b:98:9f:63:ec:
         2c:6f:09:9a:6c:0a:8b:06:3c:9b:e9:c2:69:59:4e:8f:10:f4:
         73:37:99:3a:18:c3:08:77:80:7d:2f:a6:27:ca:5b:71:ce:27:
         4b:60:b6:ad:85:8d:16:5b:70:4c:0d:f2:ed:5a:09:0a:a0:8c:
         5f:6f:08:2b:f5:61:e1:8e:a7:ff:7a:2e:8f:ba:9d:c2:70:39:
         8e:9d:51:4c:5b:12:f7:37:04:7b:db:49:3c:00:64:df:8c:38:
         79:0d:1e:6d:70:e5:bb:3b:07:78:9b:7b:b1:4d:34:de:d6:56:
         ef:d9:7d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----