Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Q1ntzt-NLRaxiMWuyFyJ9ZDcqAg.roa
File:                     Q1ntzt-NLRaxiMWuyFyJ9ZDcqAg.roa (raw, json)
Hash identifier:          XKhOWeMQ5x4BSyLtcJrKyRvp/sDlI+mc2ph+2iPpDOc=
Subject key identifier:   43:59:ED:CE:DF:8D:2D:16:B1:88:C5:AE:C8:5C:89:F5:90:DC:A8:08
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       16B00EFB
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Q1ntzt-NLRaxiMWuyFyJ9ZDcqAg.roa
Signing time:             Fri 11 Mar 2022 04:35:59 +0000
ROA not before:           Fri 11 Mar 2022 04:35:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207941
IP address blocks:        2a06:a005:b0::/44 maxlen: 48
                          2a06:a005:c0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 380636923 (0x16b00efb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Mar 11 04:35:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4359edcedf8d2d16b188c5aec85c89f590dca808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:61:04:8b:a6:c5:ec:47:81:f6:aa:bb:e3:b5:
                    0b:b2:7f:ad:03:a0:af:9e:3b:07:d7:95:6d:57:3a:
                    42:29:8c:b4:ee:b9:81:67:94:8b:33:ba:aa:01:a9:
                    db:f2:a0:2d:f4:d3:64:e0:ae:eb:1e:e6:2a:45:1a:
                    97:4d:bb:f8:98:63:88:93:89:e7:e9:b3:04:6a:65:
                    94:04:33:be:c4:ed:24:59:3e:e3:64:5f:0b:82:b8:
                    ce:c5:a1:c8:ea:d8:f7:2c:31:ae:db:fe:56:1d:3a:
                    91:cf:61:f3:73:6e:ce:6d:a2:07:6b:43:6b:58:11:
                    37:11:d2:50:d5:7e:a0:fd:9a:bc:c0:5a:77:47:52:
                    d6:33:e8:c2:25:a2:c7:8e:d7:ef:e8:e6:dc:c9:dd:
                    a5:03:19:b9:60:7d:5e:67:2a:da:92:72:18:ac:3f:
                    0b:63:00:4f:54:22:62:9f:15:5d:77:cd:06:58:36:
                    8f:81:01:cd:05:36:b3:ad:c1:cc:b5:ca:21:cf:0d:
                    f6:dc:2b:0e:f0:e6:1a:59:6f:1c:84:8f:16:f0:02:
                    84:58:7d:8d:d3:1a:c0:1c:22:8e:ad:45:95:24:b6:
                    ca:90:34:72:88:96:01:b8:54:b1:2d:47:53:ad:86:
                    9c:ee:e4:1f:16:4a:e6:48:21:33:ed:dc:b1:9a:f2:
                    95:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:59:ED:CE:DF:8D:2D:16:B1:88:C5:AE:C8:5C:89:F5:90:DC:A8:08
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Q1ntzt-NLRaxiMWuyFyJ9ZDcqAg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:b0::-2a06:a005:cf:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         36:ef:a8:fc:f6:cc:c8:3f:9e:aa:55:6a:c8:c6:3b:28:4b:73:
         43:c4:c4:1f:59:74:28:b3:28:d9:84:22:e3:7c:f5:e2:80:33:
         60:0e:41:10:fe:e8:fd:00:26:55:e7:72:d5:54:2c:63:8f:65:
         d1:30:20:2d:29:7c:e3:4f:d5:72:b3:d1:2b:91:56:7b:24:17:
         37:86:f8:34:6a:8c:54:ff:18:96:ab:eb:0a:4f:12:1c:1d:f5:
         f3:37:06:44:45:10:7b:7f:43:12:f6:8a:9b:0c:c2:98:1c:06:
         cb:61:7b:91:e9:e2:e8:d9:ce:b4:9f:51:ae:d1:1f:a8:31:99:
         ec:5c:2f:4b:66:51:7a:5d:75:a0:e0:f1:61:61:6f:f2:64:b3:
         1b:d7:2a:17:32:86:49:4b:d3:8c:21:18:61:45:2d:ab:ad:5a:
         37:eb:01:f6:70:de:bf:c7:e8:f1:55:72:a5:71:10:23:66:85:
         71:14:5f:e3:96:57:5f:93:ac:e8:1e:f2:aa:24:0f:29:b7:e1:
         5c:61:eb:bd:e6:4c:f5:07:6f:b8:9e:c6:3e:dc:94:a3:45:73:
         00:2d:64:cf:5c:a3:a9:3d:79:d8:e7:f8:2e:83:b4:ef:d1:db:
         12:96:6e:3d:17:7f:05:ac:7f:19:ce:9a:b2:a7:14:b6:fd:f0:
         23:89:b7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----