Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/S6_rdZ9SN2OHJV1FOCjIn6Xfo3U.roa
File:                     S6_rdZ9SN2OHJV1FOCjIn6Xfo3U.roa (raw, json)
Hash identifier:          V9xCy1RdcvIWuRjCS/gEONyqOvoiazryhUaAYkCmVtU=
Subject key identifier:   4B:AF:EB:75:9F:52:37:63:87:25:5D:45:38:28:C8:9F:A5:DF:A3:75
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018425980B567549F728EF5208454B6812F7
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/S6_rdZ9SN2OHJV1FOCjIn6Xfo3U.roa
Signing time:             Sat 29 Oct 2022 21:13:52 +0000
ROA not before:           Sat 29 Oct 2022 21:13:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210490
IP address blocks:        2a06:a005:2190::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:25:98:0b:56:75:49:f7:28:ef:52:08:45:4b:68:12:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 29 21:13:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4bafeb759f52376387255d453828c89fa5dfa375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:de:8d:8f:04:40:2c:aa:da:60:64:db:0e:f7:
                    4a:1c:1e:2c:ed:58:33:3a:19:67:ac:da:7e:69:04:
                    5c:7f:02:4e:a8:88:cb:f7:9b:e3:7b:04:37:07:29:
                    40:e9:cc:4b:db:7d:91:2e:78:22:c6:0d:f3:72:8d:
                    c5:c9:41:0d:1d:20:11:d4:0d:18:8b:25:60:68:85:
                    1f:5a:fa:99:7f:21:0b:b5:2d:68:a4:9c:ff:92:d4:
                    79:21:cd:93:58:df:dc:91:15:0d:20:1a:b8:e7:38:
                    2c:1e:81:81:ac:a1:4b:a2:fa:71:cd:ea:46:2b:5f:
                    27:f6:24:b9:fc:b0:de:8e:1c:00:04:bd:a4:ff:4a:
                    f7:b7:ba:43:c6:97:e2:49:fd:e5:56:9f:04:f4:aa:
                    a5:d2:6e:c8:4d:ac:9a:92:fb:6d:8b:65:b2:58:63:
                    dd:3a:83:74:90:0f:ad:a0:ba:79:01:09:ec:29:09:
                    29:17:f8:89:23:a7:cb:e3:da:57:2c:6d:6d:d4:e8:
                    44:e5:c2:0e:68:e6:36:05:5b:6f:06:ed:b6:34:db:
                    06:48:cb:8e:06:1d:28:80:e7:16:c8:c7:a4:73:05:
                    cb:1c:91:4c:b6:4a:32:03:59:9b:03:87:f5:99:79:
                    82:ab:96:df:a8:ce:f8:72:89:b3:41:13:cb:05:ee:
                    00:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AF:EB:75:9F:52:37:63:87:25:5D:45:38:28:C8:9F:A5:DF:A3:75
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/S6_rdZ9SN2OHJV1FOCjIn6Xfo3U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2190::/44

    Signature Algorithm: sha256WithRSAEncryption
         8e:87:52:4e:5d:ae:71:6f:c8:29:4f:78:6a:76:32:90:8d:7b:
         c6:5f:75:ea:47:df:04:9b:56:a2:5c:3b:65:39:be:fe:af:79:
         35:c4:dc:8a:16:42:56:31:83:68:ab:74:cc:61:26:18:b6:e6:
         8b:7b:df:98:ec:35:85:c5:a3:f1:d6:1d:c7:e0:8e:ca:8e:89:
         35:6e:bb:aa:68:91:8b:d2:c1:4f:61:75:37:cd:b3:dd:ce:dd:
         4c:88:e4:9a:1d:a4:86:4d:ed:07:b5:c9:de:44:48:e5:40:90:
         d4:fd:53:bc:ed:81:91:0a:f2:31:01:cf:95:5e:0c:98:5a:81:
         f9:51:f0:1b:f8:0b:65:34:74:2e:ee:8f:cd:c9:46:b4:d9:76:
         f9:58:e2:bf:dc:52:d3:de:d2:0b:12:ee:41:03:39:b2:7b:31:
         f9:6e:3b:aa:9c:b4:ea:99:5e:29:7b:61:0b:2d:ea:ac:9f:b8:
         df:73:c5:d4:b2:39:4f:7c:ae:60:e2:a5:4b:f5:b7:1e:18:8c:
         6f:d7:d7:ab:42:12:62:ac:c2:f5:1a:44:71:48:44:79:4d:94:
         3c:37:45:a3:99:33:4f:41:67:36:39:15:8a:e6:26:80:93:bd:
         f9:ab:34:1b:88:a4:da:d9:48:54:51:f5:57:f5:60:4e:6d:89:
         02:b5:83:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----