Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Ri4QXNtZn6cShlRMPg8A6AVtVcg.roa
File:                     Ri4QXNtZn6cShlRMPg8A6AVtVcg.roa (raw, json)
Hash identifier:          z16qTSUmxXJVDQ+SDSrCfuPHqnxZu8MOcaWNqtcdJUg=
Subject key identifier:   46:2E:10:5C:DB:59:9F:A7:12:86:54:4C:3E:0F:00:E8:05:6D:55:C8
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018243B222499D1E01381E97C41513391402
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Ri4QXNtZn6cShlRMPg8A6AVtVcg.roa
Signing time:             Thu 28 Jul 2022 07:25:23 +0000
ROA not before:           Thu 28 Jul 2022 07:25:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203804
IP address blocks:        2a06:a005:13b0::/44 maxlen: 48
                          2a06:a005:1340::/44 maxlen: 48
                          2a06:a005:13d0::/44 maxlen: 48
                          2a06:a005:1350::/44 maxlen: 48
                          2a06:a005:13c0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:43:b2:22:49:9d:1e:01:38:1e:97:c4:15:13:39:14:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 28 07:25:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=462e105cdb599fa71286544c3e0f00e8056d55c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:58:2a:c3:d2:b0:36:c4:17:54:e2:b9:1d:e9:
                    86:63:94:46:9b:17:49:12:53:75:d2:ca:4c:9f:12:
                    b3:33:f8:72:b1:10:59:14:1b:52:af:e0:be:c5:30:
                    85:87:ec:f2:49:9f:9b:79:c8:59:18:89:f3:78:16:
                    03:25:3f:b0:ca:b9:59:fd:ee:73:ff:ea:fe:0d:e5:
                    63:61:61:29:cb:a3:57:6b:d6:be:3c:ed:ea:b5:fe:
                    c6:97:48:10:0c:40:b7:a4:c4:e2:3f:95:8e:1e:2d:
                    1a:a2:a0:12:86:84:9c:59:dd:ca:52:80:e6:ea:47:
                    a5:ec:3c:94:cb:e4:c6:4b:44:d3:38:18:7d:70:83:
                    7c:e2:b3:cb:5f:9a:9a:a9:30:b2:0c:1d:b6:f9:8e:
                    0d:3d:bb:90:a4:79:ef:28:57:05:cb:b3:b6:cf:0e:
                    dd:e8:7e:ec:d6:c2:28:0b:30:ed:a5:55:05:d1:27:
                    ba:e4:30:1a:f7:36:c5:d5:9e:e0:73:40:68:65:81:
                    cd:fd:dc:0c:93:63:1c:ae:7b:8f:08:58:1b:f4:13:
                    b6:1b:b0:da:92:1a:f0:c0:75:e8:44:35:07:2e:5a:
                    b7:71:17:b5:1a:c4:e5:35:14:cf:bf:ec:58:41:d7:
                    23:86:2b:a5:71:3d:f2:d8:92:44:db:ca:35:db:13:
                    a4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2E:10:5C:DB:59:9F:A7:12:86:54:4C:3E:0F:00:E8:05:6D:55:C8
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Ri4QXNtZn6cShlRMPg8A6AVtVcg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1340::/43
                  2a06:a005:13b0::-2a06:a005:13df:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         6f:2d:d1:01:40:c0:e9:e4:a9:81:f0:89:9d:7b:8e:1e:ed:d9:
         6f:2a:a5:a4:fb:10:bf:2b:df:6a:26:fd:2d:2e:d4:c9:f2:99:
         cb:ae:ab:aa:74:80:80:85:54:9a:8b:5d:10:47:53:29:c6:54:
         b8:b5:2b:24:4a:9d:3f:76:9b:88:94:8a:be:88:0c:7f:ec:c5:
         62:d6:0d:b8:b6:f5:ee:d1:34:22:6d:b1:20:e5:c0:79:16:ff:
         e7:c6:b5:d0:88:bd:44:8b:8c:39:5f:39:ab:56:2f:e0:6f:01:
         22:33:bb:e4:43:58:30:72:82:2c:75:c1:e7:d4:17:b2:83:59:
         85:08:f3:a6:55:c0:d5:ab:72:4d:60:59:67:71:16:67:de:7e:
         81:1a:a9:3c:0a:a6:9d:47:80:9b:42:3c:a8:64:74:17:43:2f:
         92:55:19:59:a0:f4:ef:1c:95:c4:2a:e0:84:f7:93:51:2e:42:
         19:ad:99:56:bc:22:22:2a:93:3e:36:87:a2:b9:0f:50:44:b9:
         25:0b:2b:8d:0b:4a:49:06:54:af:fd:93:0a:f9:f6:98:ea:21:
         0d:c8:85:57:0e:26:ff:a8:80:9b:63:a7:3b:83:aa:e4:85:4b:
         ab:2d:de:8e:62:7f:16:51:0d:c1:51:58:7d:d4:6c:ed:56:8b:
         51:f3:89:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----