Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/RLUjYpJEin7z12NOg80HQfsSvZg.roa
File:                     RLUjYpJEin7z12NOg80HQfsSvZg.roa (raw, json)
Hash identifier:          stGbPeIZ3Qjw5fgC/giiVDD8kINCNXc+cnLynCABA1I=
Subject key identifier:   44:B5:23:62:92:44:8A:7E:F3:D7:63:4E:83:CD:07:41:FB:12:BD:98
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01831DC2E3B30B0612364548179E1FD353DB
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/RLUjYpJEin7z12NOg80HQfsSvZg.roa
Signing time:             Thu 08 Sep 2022 15:40:54 +0000
ROA not before:           Thu 08 Sep 2022 15:40:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     142506
IP address blocks:        2a06:1287:3510::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:1d:c2:e3:b3:0b:06:12:36:45:48:17:9e:1f:d3:53:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep  8 15:40:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=44b5236292448a7ef3d7634e83cd0741fb12bd98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:46:3d:3a:1d:02:10:13:ab:28:c9:8c:58:58:
                    e7:8b:11:f9:d6:31:0c:67:d3:1b:75:22:92:f6:4b:
                    9c:dd:d5:d4:7b:2f:77:bd:e0:f9:cd:3f:14:37:56:
                    45:f8:88:8f:89:25:c7:bd:37:03:2b:65:45:46:cf:
                    a4:67:3e:0c:db:64:fb:41:79:b8:8c:ca:1a:c4:41:
                    f5:f8:77:f4:37:c5:dd:24:ef:ed:c4:b3:a5:d8:37:
                    65:8b:65:6c:54:fd:ef:d2:a2:a4:b0:cb:3c:7d:24:
                    8d:13:20:85:15:b9:25:56:64:a2:6e:e3:95:f2:e1:
                    8a:32:c6:29:8e:ef:a4:ea:78:52:02:eb:19:c1:e5:
                    ba:29:7f:46:df:40:bd:fb:d1:6a:57:da:26:10:49:
                    de:d1:cb:ae:b6:48:21:4b:e9:c0:39:38:3b:17:76:
                    53:1b:a9:83:10:24:bd:9f:8f:72:99:d6:aa:ac:53:
                    8f:aa:56:29:64:aa:c9:0e:fb:f0:31:eb:43:c7:d2:
                    8c:3c:a5:84:10:be:00:f0:73:50:81:cb:d8:35:60:
                    06:a7:f3:98:77:02:9e:ca:b7:29:31:71:9a:9d:9b:
                    62:5e:4a:f7:ae:6d:ac:44:75:b9:55:44:9e:68:c4:
                    3a:6b:a5:22:14:59:59:38:39:87:e3:1b:a1:2d:34:
                    11:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B5:23:62:92:44:8A:7E:F3:D7:63:4E:83:CD:07:41:FB:12:BD:98
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/RLUjYpJEin7z12NOg80HQfsSvZg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:3510::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:cf:b7:9c:9a:fb:95:ab:12:e1:ae:d0:5c:7f:2d:6f:ad:7f:
         8a:a3:b1:d1:08:cf:9b:a7:47:eb:27:3d:ad:55:65:99:b4:9a:
         15:bb:ad:07:ad:e9:8a:c0:26:7f:7a:19:f8:0a:5f:32:57:79:
         b8:3e:44:68:c7:31:02:02:71:6c:fb:90:bd:93:0e:4f:d1:ba:
         1a:fe:6d:b5:b1:8e:cf:61:34:92:16:ae:25:c2:c3:3c:a1:61:
         59:f1:ce:48:62:f1:e6:dc:05:99:0c:9f:34:15:70:5c:63:5d:
         bf:d4:08:b4:ef:8d:65:eb:b0:47:e5:39:8a:e0:26:49:b5:b5:
         8d:3f:2a:7e:2c:1c:65:5c:18:c1:a0:82:3b:e8:5c:b4:c3:c7:
         3a:40:a4:fc:eb:88:66:d7:c2:5f:7a:15:97:3b:92:5d:c2:3c:
         1b:0b:5f:f5:c4:d3:f5:1c:46:a9:f4:ae:2c:5d:49:68:b4:c9:
         f6:9b:bb:1c:ba:24:cf:3f:1a:d9:be:7c:87:ba:cd:7a:b6:0e:
         0a:20:5f:4b:d1:2c:06:51:1a:02:72:8b:6a:88:45:5b:89:5b:
         ec:04:93:83:80:9f:34:35:5c:6c:ca:46:69:45:aa:22:16:55:
         2e:00:cb:9a:d4:4c:51:b6:67:8d:d7:73:a2:92:3b:0a:9f:e9:
         ce:92:44:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----