Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Q7iwQ5n7IaVHaocH-ivDl12t7SQ.roa
File:                     Q7iwQ5n7IaVHaocH-ivDl12t7SQ.roa (raw, json)
Hash identifier:          J9c3un/EooICFEH238kI6Qwnkl5AQrl7wcxBgvETAlo=
Subject key identifier:   43:B8:B0:43:99:FB:21:A5:47:6A:87:07:FA:2B:C3:97:5D:AD:ED:24
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0181EDE18C27E32F00B08B7B9AF11CB6DAC4
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Q7iwQ5n7IaVHaocH-ivDl12t7SQ.roa
Signing time:             Mon 11 Jul 2022 15:29:50 +0000
ROA not before:           Mon 11 Jul 2022 15:29:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206271
IP address blocks:        2a06:a005:437::/48 maxlen: 48
                          2a06:a005:a15::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:ed:e1:8c:27:e3:2f:00:b0:8b:7b:9a:f1:1c:b6:da:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 11 15:29:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=43b8b04399fb21a5476a8707fa2bc3975daded24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:90:0f:97:f4:f9:14:8b:37:b4:92:40:7b:8c:
                    d9:61:78:cd:43:18:a5:e3:19:ff:38:e1:59:27:58:
                    7a:32:40:4b:31:0d:2b:af:01:02:a5:61:05:4a:fd:
                    c1:f2:7e:a5:5c:73:cc:26:1c:85:f5:25:13:d4:d2:
                    af:b1:2a:f1:af:4d:84:f8:24:0a:0e:5d:b4:93:24:
                    76:ef:77:b8:18:ac:4d:14:05:b2:ba:2c:21:28:9b:
                    75:ab:b2:9a:f0:51:24:fb:95:ba:73:45:b9:b9:21:
                    72:0b:5e:f7:a7:cb:50:69:ed:0c:17:6d:be:3e:16:
                    46:ad:a7:c5:d9:a6:ad:18:08:e2:ba:93:f5:c2:a6:
                    20:2e:36:39:cf:33:b1:6a:22:71:c8:ef:5f:dc:bd:
                    31:9c:ab:35:5c:71:a7:83:f0:6c:8e:d0:c2:f0:db:
                    82:51:7f:7f:bf:94:ec:3f:a0:7b:cb:7b:4c:9c:e9:
                    05:9a:de:ae:89:75:51:5c:16:b8:44:50:43:48:7d:
                    b9:c0:8e:28:42:a8:dc:88:1e:f3:5a:2d:b1:0a:b5:
                    66:fb:de:41:ed:73:10:8b:a8:d8:dd:c5:5a:2c:47:
                    37:97:9b:af:ca:94:0f:a8:c1:c3:e9:f3:de:c5:94:
                    e6:d5:d8:61:8e:48:57:c5:4f:36:ac:35:96:2b:a0:
                    22:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B8:B0:43:99:FB:21:A5:47:6A:87:07:FA:2B:C3:97:5D:AD:ED:24
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Q7iwQ5n7IaVHaocH-ivDl12t7SQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:437::/48
                  2a06:a005:a15::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:b1:db:83:ec:3f:70:02:71:89:4f:77:6c:b7:de:4f:a1:c7:
         ef:1c:8c:36:f0:4c:e5:36:4a:ff:6e:34:1a:18:06:7d:d2:76:
         c2:82:fe:57:b0:88:1d:25:e6:4c:d9:24:1b:66:4a:4c:dc:8b:
         c5:8d:37:ba:7a:aa:87:df:7d:bb:fe:9d:73:85:04:3c:ae:47:
         0c:11:3c:c3:77:4a:4b:fe:26:a6:68:60:61:ee:e1:86:bb:0c:
         d4:57:67:f3:b1:a8:61:d4:c1:52:fd:61:ed:4d:b9:18:f8:53:
         3d:0a:f0:47:98:f9:60:1a:c7:5b:cb:28:3c:40:d0:ba:47:d6:
         4e:39:76:5a:06:ad:8a:e8:08:28:cf:83:8b:19:e5:36:5f:76:
         59:44:a5:1f:b6:06:ce:f2:43:cb:e0:70:c5:1b:14:5f:04:a8:
         a6:45:bd:5c:99:2e:bf:43:45:73:0e:f9:e6:da:86:1c:c5:ce:
         ee:8d:32:d0:6f:84:fc:38:f5:d1:c1:da:20:fb:b5:50:8f:ed:
         76:12:e9:39:92:d8:3b:68:88:5f:c9:95:ac:95:51:33:73:24:
         c1:18:01:ae:ce:03:e4:50:b1:af:e4:c4:09:ed:90:5b:5e:8f:
         ca:32:b9:61:36:d5:cc:5a:82:92:72:59:51:a2:ae:21:e7:3f:
         f9:a5:5b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----