Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/RMn38Ts9QlX0MgfPhUmeb-TGCoI.roa
File:                     RMn38Ts9QlX0MgfPhUmeb-TGCoI.roa (raw, json)
Hash identifier:          mhdxJKk0vV719GarOcM85SOeaKY9UjyTWu1InWz+2d4=
Subject key identifier:   44:C9:F7:F1:3B:3D:42:55:F4:32:07:CF:85:49:9E:6F:E4:C6:0A:82
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1AD45436
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/RMn38Ts9QlX0MgfPhUmeb-TGCoI.roa
Signing time:             Mon 13 Jun 2022 20:02:45 +0000
ROA not before:           Mon 13 Jun 2022 20:02:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213021
IP address blocks:        2a06:a005:cf0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 450122806 (0x1ad45436)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun 13 20:02:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=44c9f7f13b3d4255f43207cf85499e6fe4c60a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7c:56:4c:67:ac:9e:4d:96:aa:fe:02:8b:bc:
                    60:64:db:9e:f6:a3:82:19:1a:35:17:a7:7a:c8:48:
                    4d:bc:fb:10:01:ec:04:4c:80:23:e7:07:9a:08:21:
                    79:c7:87:93:f5:20:68:d1:55:82:62:b4:26:41:0b:
                    f9:0f:55:c1:6b:f1:4f:03:be:e7:ba:ac:04:e4:2a:
                    66:31:75:03:85:b6:55:3e:46:76:96:23:e4:2f:df:
                    cf:c9:00:ba:6f:f1:1b:21:0d:1e:81:a8:f7:41:66:
                    3c:7b:f9:9e:bc:8b:50:40:1d:e4:a2:21:51:98:cc:
                    8e:db:d7:46:e0:81:86:91:49:09:c0:9d:88:b0:18:
                    a7:e5:e1:22:80:aa:e0:cd:64:71:ee:92:cf:a2:75:
                    28:96:87:43:68:0e:85:2b:78:26:f5:04:59:c7:b9:
                    eb:5d:8d:db:ac:e5:36:48:bf:f8:78:1f:75:14:f7:
                    04:5b:82:15:d2:bb:2b:19:51:3b:86:1d:96:16:d5:
                    ba:4f:af:e4:dd:e4:e6:8f:e8:e4:19:54:65:96:d7:
                    e1:9b:20:00:22:20:78:77:ea:bb:d6:a5:fa:05:a7:
                    cb:48:13:c0:72:a0:9d:61:8f:bd:e1:fd:11:50:a5:
                    88:3d:d5:01:e7:5a:7f:f0:36:d8:1d:9b:bc:97:ca:
                    89:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C9:F7:F1:3B:3D:42:55:F4:32:07:CF:85:49:9E:6F:E4:C6:0A:82
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/RMn38Ts9QlX0MgfPhUmeb-TGCoI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:cf0::/44

    Signature Algorithm: sha256WithRSAEncryption
         6f:4c:00:50:03:4e:62:e9:1e:a4:56:7b:31:b9:f3:bd:93:eb:
         64:35:fd:b6:b2:9f:32:36:bf:ac:3a:dd:f2:a3:65:12:04:d5:
         02:0a:aa:07:08:45:ca:24:a2:f2:62:69:0e:62:e0:11:ed:86:
         98:54:13:c2:80:96:46:44:47:30:8d:f0:9f:78:99:63:0f:b2:
         04:18:4c:76:92:61:e8:3d:f4:2b:3d:c8:2d:1a:0a:a9:90:fc:
         a2:84:dc:f2:cf:38:ad:7e:bc:77:e3:df:a5:35:25:fa:bf:76:
         5f:6c:be:bb:1b:07:d7:92:b6:b1:8f:16:52:52:cc:c7:60:ba:
         60:4b:3a:ea:d2:ef:48:38:fb:37:7c:e8:06:57:a0:08:3d:0d:
         57:8a:8c:39:bf:3b:c3:22:0f:71:4a:ed:c2:7c:8b:b8:21:ba:
         74:e3:6d:c7:22:d5:b7:73:47:f8:56:7f:05:57:fa:8e:0a:10:
         a1:5d:09:c6:63:65:3f:96:ec:ae:9a:13:fa:74:4f:8e:44:5e:
         9b:30:b5:9b:2a:be:8a:0f:bc:62:ba:ad:69:1b:6e:08:bd:f7:
         84:06:8d:40:84:ff:71:bd:15:8b:1a:72:5d:ac:80:7c:7f:9a:
         ae:23:47:36:2b:9a:3a:ba:af:7a:e2:86:ac:eb:8d:30:a8:0a:
         f9:2e:39:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----