Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Q8oKU5jgefaksy2jyGdWcAqjgQQ.roa
File:                     Q8oKU5jgefaksy2jyGdWcAqjgQQ.roa (raw, json)
Hash identifier:          mIbLVfhqlhyrW2Y90ykttczW6oAO76ThjFGjMY+WqRU=
Subject key identifier:   43:CA:0A:53:98:E0:79:F6:A4:B3:2D:A3:C8:67:56:70:0A:A3:81:04
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0181E57428D48976A386DB900FA52E2BF1E8
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Q8oKU5jgefaksy2jyGdWcAqjgQQ.roa
Signing time:             Sun 10 Jul 2022 00:13:23 +0000
ROA not before:           Sun 10 Jul 2022 00:13:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207740
IP address blocks:        2a06:a005:7::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:e5:74:28:d4:89:76:a3:86:db:90:0f:a5:2e:2b:f1:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 10 00:13:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=43ca0a5398e079f6a4b32da3c86756700aa38104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:70:bc:5c:9e:17:75:17:09:f8:18:9d:22:38:
                    da:09:20:08:9a:1c:66:74:8c:7d:76:4f:13:2d:8c:
                    3f:a1:0e:f4:ec:fb:b5:04:34:1e:4f:f8:6e:a3:0f:
                    21:d5:aa:1e:d6:a4:ac:67:ef:9d:f5:3d:ba:e3:a0:
                    37:4b:44:d2:32:04:ac:4e:ac:1c:28:50:55:62:d6:
                    df:46:87:f0:2d:09:f3:6f:ac:4c:12:63:a0:00:e1:
                    d7:a1:a6:4a:2f:aa:ff:38:34:8c:0b:f3:b1:62:e7:
                    34:08:e9:f3:86:f6:9b:d1:5b:b5:10:c1:a7:04:2c:
                    e9:10:45:fd:4a:d5:58:8b:f5:f1:3b:ec:5e:5e:77:
                    9e:02:80:8f:cd:3d:24:de:2e:25:0b:1a:c2:cd:7b:
                    4e:62:78:bc:60:23:8c:0e:a8:1e:57:51:ce:e6:c7:
                    12:13:3c:b3:96:41:07:0a:a0:08:7e:22:e3:ac:8c:
                    ec:3c:71:95:89:0b:b8:a0:07:97:e3:68:8b:ed:58:
                    df:e4:8c:ce:0c:82:83:51:07:2a:4f:ae:40:94:16:
                    a7:e9:3f:53:82:f9:82:a5:d5:a8:db:f1:1e:23:67:
                    2a:83:41:d1:40:fe:8f:fc:38:e3:ba:bc:e6:6b:22:
                    b3:3a:07:8b:1f:c1:d6:e0:51:f1:4c:b1:b5:ed:a9:
                    a6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:CA:0A:53:98:E0:79:F6:A4:B3:2D:A3:C8:67:56:70:0A:A3:81:04
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Q8oKU5jgefaksy2jyGdWcAqjgQQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:f1:db:d7:95:78:81:ad:83:36:cc:7e:19:6d:4a:59:a5:c1:
         95:d4:63:ee:e8:fc:75:53:d3:aa:ac:f3:f9:39:c4:a2:6b:84:
         fd:75:39:8d:a3:6c:ca:a3:1c:8b:9e:2b:16:67:ac:95:c5:85:
         f1:5f:af:f0:33:4a:bd:bd:54:a2:10:3f:f0:16:09:b5:05:34:
         f9:0b:9b:7e:70:2d:b7:c4:93:9d:8f:8e:e9:7b:e2:05:4c:80:
         33:35:48:9f:c4:b4:d2:57:48:c4:b2:fb:99:ab:45:c6:7a:d7:
         16:7a:05:9e:0f:1f:7a:b8:56:a4:97:74:a8:db:31:05:fd:67:
         85:b4:22:fa:16:e1:34:be:71:67:ae:a7:9c:38:e2:5e:c9:10:
         0c:0e:c1:c3:a2:fa:52:89:b7:b5:d2:50:d8:90:48:08:8f:07:
         c8:55:d3:40:c3:f5:01:fa:76:82:e6:b3:ce:00:c2:ba:9e:ad:
         19:5d:73:87:a3:8c:24:e9:5a:49:50:b3:43:68:db:5b:5f:48:
         33:4f:ca:42:ed:e8:fa:97:fc:f8:47:8b:88:27:13:97:c4:cc:
         fa:71:da:98:0a:a9:1f:06:84:e8:57:bf:e9:54:97:b0:5e:ad:
         72:5e:58:82:1d:a6:c0:d0:72:84:87:06:4c:ee:fa:f1:ae:a7:
         42:9e:ae:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----