Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/R5mn2A_O0kJKRY_eCcIhBhFM3hE.roa
File:                     R5mn2A_O0kJKRY_eCcIhBhFM3hE.roa (raw, json)
Hash identifier:          nAKMoOM+cZ+nA1tIhkx+4awOw3Jv2RWnC+49pssd8yQ=
Subject key identifier:   47:99:A7:D8:0F:CE:D2:42:4A:45:8F:DE:09:C2:21:06:11:4C:DE:11
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1B8163A1
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/R5mn2A_O0kJKRY_eCcIhBhFM3hE.roa
Signing time:             Mon 27 Jun 2022 23:42:24 +0000
ROA not before:           Mon 27 Jun 2022 23:42:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204693
IP address blocks:        2a06:1287:1100::/43 maxlen: 48
                          2a06:a005:ce0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461464481 (0x1b8163a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun 27 23:42:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4799a7d80fced2424a458fde09c22106114cde11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2e:87:a4:79:1c:e3:39:d7:5d:d4:6f:99:e6:
                    8c:78:b2:1b:5b:77:38:bf:0c:0d:f0:3d:fc:69:00:
                    c3:13:65:36:8d:83:d9:a1:67:28:e9:e3:91:ae:21:
                    dd:66:13:fb:62:a7:b9:82:2f:cd:38:4a:90:e6:fe:
                    ce:ff:c5:68:d4:8e:94:c0:54:13:aa:c6:af:35:31:
                    c3:ae:a4:13:ef:5d:95:6d:df:91:07:ec:2e:31:4b:
                    71:e5:e8:75:95:b8:e3:69:6c:fc:a3:90:ad:b2:43:
                    f9:10:50:ab:f3:6c:79:9e:62:f8:29:1f:6a:04:6b:
                    7d:48:cf:ff:66:76:92:fe:30:14:97:59:70:06:a7:
                    c2:63:08:33:7f:90:87:80:d4:ac:97:66:e0:f1:7b:
                    aa:04:9f:ac:a7:79:c2:e4:ad:84:89:a5:a7:44:f3:
                    fc:8e:41:16:a4:3c:c7:46:cd:18:02:6e:31:22:80:
                    d8:b5:a6:e9:b4:01:7c:fb:11:b1:7f:4e:d0:9d:18:
                    a6:8e:cc:15:2e:01:eb:7c:af:1d:eb:78:c7:81:c0:
                    04:d2:0a:8b:8d:66:69:72:40:89:73:45:24:34:db:
                    00:4f:d2:06:43:f4:3f:fc:3b:6b:1a:4d:58:f4:f8:
                    25:bf:5f:e3:28:43:8f:0b:94:c8:0b:a4:5e:57:b2:
                    fb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:99:A7:D8:0F:CE:D2:42:4A:45:8F:DE:09:C2:21:06:11:4C:DE:11
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/R5mn2A_O0kJKRY_eCcIhBhFM3hE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:1100::/43
                  2a06:a005:ce0::/44

    Signature Algorithm: sha256WithRSAEncryption
         4a:94:e9:2f:03:98:74:d4:98:71:db:25:00:22:79:92:bf:e6:
         22:0d:85:db:82:4c:f1:ee:d2:2e:60:b2:55:b0:b3:0d:97:d0:
         db:14:30:3c:1e:36:86:f7:b5:08:9a:f9:4d:af:68:f9:b3:89:
         f1:ed:d9:a6:97:2b:38:fd:f6:09:0b:25:3b:6f:13:1b:0d:91:
         82:22:9c:81:5b:fe:5e:c8:7d:a7:b4:c5:73:3e:04:1f:7c:0b:
         a5:6e:0c:7a:d7:e2:37:48:8b:a9:67:aa:d0:18:1f:7a:02:0d:
         75:b5:c3:c6:4c:32:c0:91:a2:d6:12:1f:09:5c:2c:85:b9:5e:
         c4:43:e7:8f:10:35:94:13:20:70:f9:da:ea:7c:c8:68:16:3f:
         bc:df:af:89:43:25:8a:d4:4c:34:98:5b:35:41:d8:b3:1a:df:
         03:f6:52:e3:a3:1d:b8:b6:5e:b1:95:af:64:f4:69:f6:4b:99:
         3f:d3:83:34:33:36:37:9f:e4:ed:38:d2:1b:04:eb:52:29:23:
         08:67:8d:ab:75:ab:5b:bb:32:a2:71:b9:5c:c2:c6:53:91:83:
         d5:d9:94:a7:eb:67:78:bd:dd:38:56:41:7f:38:a2:ee:6a:74:
         4e:e8:24:b9:2b:08:34:e1:2a:d9:e6:c2:15:bd:c5:9c:0d:bb:
         96:c4:b8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----