Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ReOCQldSWncNTI6iOvcuFX85Zs4.roa
File:                     ReOCQldSWncNTI6iOvcuFX85Zs4.roa (raw, json)
Hash identifier:          GK7dM8q3g0wf/Clid4SXS96P/ESqLL2bahXnoyX0AKA=
Subject key identifier:   45:E3:82:42:57:52:5A:77:0D:4C:8E:A2:3A:F7:2E:15:7F:39:66:CE
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       19F03278
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ReOCQldSWncNTI6iOvcuFX85Zs4.roa
Signing time:             Thu 19 May 2022 14:16:29 +0000
ROA not before:           Thu 19 May 2022 14:16:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213326
IP address blocks:        2a06:a005:6f0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435171960 (0x19f03278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May 19 14:16:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=45e3824257525a770d4c8ea23af72e157f3966ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d1:af:a9:12:e8:00:23:16:b9:4f:a7:7a:8e:
                    6f:3a:7a:76:09:42:d4:14:e2:48:ef:61:6a:b9:4a:
                    93:e8:a4:97:d0:c8:21:47:8b:56:d4:ce:53:fc:92:
                    4f:fd:9a:52:21:5c:12:37:8f:22:fa:91:27:f2:e3:
                    65:2b:a7:ba:eb:90:44:69:7e:b2:cd:8a:eb:bc:9f:
                    6b:66:4f:35:a8:af:ff:e0:94:eb:c9:17:e1:0c:1c:
                    3a:aa:1d:60:27:75:35:37:c1:ba:fa:bd:87:8c:ad:
                    8a:9e:11:9d:56:8c:f8:f9:35:f8:4c:fc:08:cb:a2:
                    ac:44:ee:12:d2:60:4c:91:94:2f:f5:7a:ac:5e:78:
                    91:20:42:e8:cc:54:c1:5f:70:d0:43:2f:a2:9b:56:
                    9c:94:8d:4b:c8:d8:67:c8:79:5b:0a:02:56:6a:e1:
                    08:e2:a4:e1:ee:fc:8f:a5:77:62:25:25:d5:b2:ee:
                    06:db:8b:de:88:c4:94:c7:63:fb:ce:c3:a8:67:a8:
                    71:52:8e:48:ff:2d:f1:5c:ad:82:8c:e9:32:4a:68:
                    88:5b:48:94:aa:67:a4:c3:e7:4b:ab:fb:d8:b0:45:
                    70:c0:89:09:f3:bc:e6:78:6d:c5:b8:88:ab:db:4c:
                    98:68:59:5c:8c:89:93:b7:ee:95:b4:7f:6d:e0:d5:
                    63:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E3:82:42:57:52:5A:77:0D:4C:8E:A2:3A:F7:2E:15:7F:39:66:CE
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ReOCQldSWncNTI6iOvcuFX85Zs4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:6f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         14:e9:f1:6b:13:14:2d:ab:00:36:cc:b1:9a:7a:1c:cd:1f:ee:
         06:e6:2c:e6:31:67:2d:0b:28:e0:b1:95:61:7b:0e:a9:73:28:
         69:3d:b3:31:fe:1a:bc:d2:27:62:b6:57:fd:61:92:24:59:f1:
         ff:a5:7e:06:bc:89:94:6f:e4:6b:14:c3:24:a5:c5:92:d5:7a:
         03:af:74:71:44:17:cb:30:03:11:94:f4:70:d0:c3:e9:df:52:
         bb:0b:4b:45:f1:a8:d0:67:cb:de:43:57:b5:07:f0:cf:04:72:
         f9:bf:92:35:d8:93:23:12:16:e6:8c:7a:c8:c3:bd:2f:fb:9c:
         c2:c5:e5:30:bc:d2:d1:aa:24:4c:98:af:e3:05:fd:2b:16:fc:
         cc:3a:3e:69:1f:ab:dd:5e:8d:74:1a:cd:a6:58:04:2a:4c:ed:
         5e:b2:0f:46:90:61:c5:09:39:de:68:5b:20:3a:cd:43:9c:52:
         37:5e:50:9f:d7:92:97:ba:e6:9b:c6:2c:74:89:f7:ba:26:70:
         a1:ef:e9:2f:dd:0e:d3:32:a7:60:f9:29:bb:fb:2c:5c:4b:77:
         c4:54:7c:5e:5f:36:ff:02:51:c3:74:04:4a:39:21:c0:5f:ac:
         60:b1:ba:df:74:4b:a0:52:68:b4:43:63:32:50:ea:98:e3:7d:
         5e:ca:ff:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----