Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/RRSYAGl0Z4WVSDUG219XWbMGyho.roa
File:                     RRSYAGl0Z4WVSDUG219XWbMGyho.roa (raw, json)
Hash identifier:          gcdjdHIZgCHr0ryVT7IuMTOq7fGAggficHX2CtHVd1A=
Subject key identifier:   45:14:98:00:69:74:67:85:95:48:35:06:DB:5F:57:59:B3:06:CA:1A
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       17BB58B6
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/RRSYAGl0Z4WVSDUG219XWbMGyho.roa
Signing time:             Tue 05 Apr 2022 10:32:44 +0000
ROA not before:           Tue 05 Apr 2022 10:32:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     149296
IP address blocks:        2a06:a005:3f0::/44 maxlen: 48
                          2a06:a005:3d0::/44 maxlen: 48
                          2a06:a005:3e0::/44 maxlen: 48
                          2a06:a005:3c0::/44 maxlen: 48
                          2a06:a001:a110::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398153910 (0x17bb58b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr  5 10:32:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=451498006974678595483506db5f5759b306ca1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:82:86:ce:ef:40:5e:1e:7d:12:31:ec:14:f9:
                    97:ee:ae:eb:a7:f3:fb:a6:aa:9a:83:ac:54:7b:b3:
                    4a:4e:77:d0:18:c4:cb:bf:2d:a7:25:05:51:c5:a7:
                    1c:15:9d:cb:55:b2:b3:8f:59:4c:02:f4:88:46:7b:
                    19:ef:3a:d3:66:8a:66:1e:5d:da:b7:2e:2a:52:f1:
                    fa:45:56:7c:8b:49:e4:1e:13:1e:a9:29:bd:b4:09:
                    b5:80:c1:b9:6c:91:c4:57:e0:53:d6:06:01:cd:5e:
                    7f:1c:2c:c2:fd:9e:ee:b1:f5:6f:e1:26:1e:1a:b2:
                    fc:b4:c3:e6:af:6c:72:1a:fa:28:81:53:69:c3:e3:
                    d5:23:14:d7:21:65:41:ac:0f:b0:d3:23:8c:f6:cb:
                    8d:e4:f8:7c:78:dc:d1:ca:e0:5d:2d:a0:3a:d4:a0:
                    ec:57:0f:cc:38:9f:c6:65:f1:c2:4a:38:d4:9e:c0:
                    41:17:a6:ae:b4:6b:20:97:dc:f6:00:e6:6b:82:c8:
                    10:dc:bf:e0:7a:49:96:ee:ee:75:22:00:6a:bd:f6:
                    95:8d:cf:a9:f8:8d:4d:82:89:87:59:66:2b:75:92:
                    66:0c:4f:9d:84:d9:94:35:6d:be:69:9f:e6:c1:86:
                    ff:43:17:03:c2:6c:00:76:eb:68:54:92:cb:ab:6a:
                    3e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:14:98:00:69:74:67:85:95:48:35:06:DB:5F:57:59:B3:06:CA:1A
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/RRSYAGl0Z4WVSDUG219XWbMGyho.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a001:a110::/44
                  2a06:a005:3c0::/42

    Signature Algorithm: sha256WithRSAEncryption
         7d:13:40:c8:e9:41:ac:51:b9:eb:a0:b6:d0:86:f7:f0:25:62:
         89:bc:46:34:b0:60:1a:aa:70:9c:23:eb:ae:f0:a7:76:fb:08:
         f1:ee:20:75:6c:78:89:ae:b4:42:e6:15:6b:1b:b7:7d:8e:0b:
         58:7e:c4:c9:ec:dc:29:1a:70:fc:e4:67:fe:7f:56:bf:dc:0c:
         5f:6c:19:0d:a5:67:8d:c9:42:ab:4f:62:34:d4:c8:54:17:dd:
         2c:72:37:5a:4b:a3:5f:82:0b:52:60:d1:c5:49:7e:c0:77:48:
         bb:93:53:cb:03:03:c6:2c:98:5f:1a:b7:60:1a:a2:38:7e:fe:
         84:57:84:a4:7a:88:54:a2:60:23:bf:42:87:19:6c:1b:c2:3d:
         aa:97:2e:47:72:d4:3c:42:f6:76:10:79:b1:20:bf:9f:08:46:
         c7:13:fd:3c:77:60:09:0f:aa:46:ac:4d:5e:2c:30:5d:d9:86:
         f7:25:e4:eb:b9:f1:5e:27:4c:29:2d:0f:26:b6:2d:db:8b:1a:
         92:f4:e4:a3:6a:0b:ba:0a:69:d9:65:ad:5d:ee:8b:4a:bc:b4:
         ed:d9:6f:63:e2:77:59:ba:33:41:82:c6:a6:37:0a:46:49:3e:
         8d:fe:dd:51:77:9b:96:aa:49:a2:5f:48:07:b9:61:06:ae:51:
         1c:ff:cd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----