Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/QW_e5DqTi_xtbBHd8YnCfBvdkuc.roa
File:                     QW_e5DqTi_xtbBHd8YnCfBvdkuc.roa (raw, json)
Hash identifier:          9PloomNrO2gfx0BFX6LnMhMPcc8rumYGIeEnpP1FK04=
Subject key identifier:   41:6F:DE:E4:3A:93:8B:FC:6D:6C:11:DD:F1:89:C2:7C:1B:DD:92:E7
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182188414D543739549099C0ADB16CBAA88
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/QW_e5DqTi_xtbBHd8YnCfBvdkuc.roa
Signing time:             Tue 19 Jul 2022 22:11:25 +0000
ROA not before:           Tue 19 Jul 2022 22:11:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211604
IP address blocks:        2a06:a005:434::/48 maxlen: 48
                          2a06:a005:5e1::/48 maxlen: 48
                          2a06:a005:857::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:18:84:14:d5:43:73:95:49:09:9c:0a:db:16:cb:aa:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 19 22:11:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=416fdee43a938bfc6d6c11ddf189c27c1bdd92e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f1:6f:a5:69:8f:1b:a2:76:e3:84:ec:58:ff:
                    35:de:1e:3d:e2:c9:64:52:5d:eb:62:4e:6e:8f:06:
                    1a:e7:e4:a7:91:7a:e8:d3:be:cb:db:18:cb:62:56:
                    6c:ea:8d:c1:5a:fc:c5:29:fa:c1:0a:50:ac:ba:fb:
                    a3:c2:9d:1f:eb:ab:ee:eb:73:b2:bb:d0:c6:24:62:
                    00:70:d0:b7:66:61:f9:2c:c1:43:4b:7f:7d:ec:d8:
                    5d:30:f2:80:49:94:92:02:53:10:cd:ed:6b:74:29:
                    6b:3a:af:2e:89:fc:e6:53:ec:ea:9e:e4:0f:bb:93:
                    75:83:a1:85:ca:b9:96:b3:b1:83:9a:33:0a:a8:27:
                    98:a9:27:30:e1:cc:d3:33:9b:36:2f:39:ab:62:4d:
                    96:e4:63:f4:fd:94:6c:bb:2e:c8:e4:05:76:c6:38:
                    98:93:9f:2a:53:22:3a:eb:2d:56:ab:71:7e:98:8c:
                    c8:4a:f3:0d:9a:14:e9:f7:89:59:5b:4e:66:bd:3d:
                    a3:47:c3:22:be:13:4e:95:bf:14:e4:e9:d8:91:53:
                    12:66:eb:7b:84:93:56:a0:8d:39:8b:47:24:cf:6c:
                    63:f5:f8:a8:ee:da:93:2d:d0:db:af:8b:8f:31:be:
                    3f:f6:00:97:0f:09:27:ba:6e:e1:90:6b:17:b4:d6:
                    f6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6F:DE:E4:3A:93:8B:FC:6D:6C:11:DD:F1:89:C2:7C:1B:DD:92:E7
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/QW_e5DqTi_xtbBHd8YnCfBvdkuc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:434::/48
                  2a06:a005:5e1::/48
                  2a06:a005:857::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:c8:ff:ef:d8:44:d9:9d:ca:35:28:bb:89:0b:4a:96:20:b9:
         36:7b:fe:ad:b3:de:60:84:06:e6:9e:2a:99:b0:38:d3:ce:4a:
         cd:1f:e0:a6:db:7c:63:b6:6c:50:8c:52:d3:3f:cc:a8:0f:70:
         7a:7b:03:8a:35:ac:e9:02:5e:e7:7e:23:0f:f3:7a:52:c1:99:
         9a:ed:af:4f:7f:5d:7f:ee:bc:3a:02:eb:83:e4:e0:29:75:33:
         54:71:c2:4c:d6:da:7a:93:43:a9:12:58:6d:1e:93:77:ad:24:
         cc:b0:41:d0:8a:01:a0:93:0f:a0:7f:83:5e:32:f0:d3:71:d5:
         c0:07:2c:d9:2d:38:f3:e4:57:47:a5:e0:14:7f:49:74:97:96:
         b9:64:07:22:63:41:ae:ef:e8:73:41:de:63:f0:ea:02:a1:ef:
         b6:6c:40:4b:51:92:c5:d3:14:3f:8b:64:90:63:8c:bb:d4:2a:
         88:ec:fc:2d:a7:c4:5f:04:e2:37:f4:99:14:01:1d:b8:4e:98:
         e3:e6:6d:1f:f3:c6:33:aa:26:b4:7b:8d:d9:26:c1:ce:80:20:
         8a:7d:b1:e5:a5:f7:88:f0:39:b5:f6:36:b9:50:dd:77:67:14:
         b3:bd:41:dd:47:7c:df:32:ff:ad:f4:ee:c0:0e:c5:2f:9d:cf:
         ce:5a:d1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----