Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/SCLBz_01THCyrgu2Kjsl2Sn-51k.roa
File:                     SCLBz_01THCyrgu2Kjsl2Sn-51k.roa (raw, json)
Hash identifier:          UuU3S7jnLn3H62ZKN5xSW0Se5FUFXo5nvOCfbpZHQ9s=
Subject key identifier:   48:22:C1:CF:FD:35:4C:70:B2:AE:0B:B6:2A:3B:25:D9:29:FE:E7:59
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018256EB19A99A18057AC16C26741D5A0683
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/SCLBz_01THCyrgu2Kjsl2Sn-51k.roa
Signing time:             Mon 01 Aug 2022 01:00:24 +0000
ROA not before:           Mon 01 Aug 2022 01:00:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203868
IP address blocks:        2a06:a005:d2a::/48 maxlen: 48
                          2a06:a005:15d0::/44 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:56:eb:19:a9:9a:18:05:7a:c1:6c:26:74:1d:5a:06:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug  1 01:00:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4822c1cffd354c70b2ae0bb62a3b25d929fee759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:34:57:62:87:68:f3:b7:7e:77:11:20:c1:a5:
                    2e:5a:8d:0e:89:a2:71:94:50:5a:e6:1d:a0:e4:7a:
                    de:fe:b7:95:26:1e:37:83:a8:c4:4b:46:eb:8d:5c:
                    85:0e:00:29:1c:da:27:1c:3b:06:67:9c:cb:5c:8e:
                    f5:27:c8:33:99:a5:1c:ed:8d:a4:70:d5:df:e2:ec:
                    7b:50:8e:fe:6b:57:7f:2f:d4:db:b8:c3:61:cb:cb:
                    55:e6:19:12:7c:44:73:53:d6:94:9a:29:6c:86:e4:
                    e8:e0:8f:eb:08:ab:a0:b8:03:c7:20:c1:a8:ba:55:
                    b6:62:2a:08:30:7e:81:f0:37:01:78:3b:04:f2:9a:
                    84:b7:f7:d9:97:7f:87:28:c3:dc:70:5e:fd:48:96:
                    f1:9f:8e:78:40:6e:3f:8e:9e:ff:05:bc:95:48:81:
                    99:40:80:cd:4a:24:46:fd:4c:f4:c0:99:58:20:ca:
                    79:e3:9f:fd:58:b2:8c:bf:6d:84:08:a5:29:0b:01:
                    a3:2f:2b:51:80:6b:88:5a:bb:68:6f:30:36:88:94:
                    27:ff:a6:eb:f8:29:99:dd:44:74:00:8c:5b:a5:13:
                    0a:80:3f:1f:26:85:d8:67:a8:88:65:e4:07:35:fc:
                    89:20:13:c2:70:bf:96:48:92:e1:74:c1:2e:ca:b2:
                    42:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:22:C1:CF:FD:35:4C:70:B2:AE:0B:B6:2A:3B:25:D9:29:FE:E7:59
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/SCLBz_01THCyrgu2Kjsl2Sn-51k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d2a::/48
                  2a06:a005:15d0::/44
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:54:df:0e:e8:a4:7c:25:fc:1d:41:f6:c4:3e:b5:3c:5d:49:
         1b:f1:c2:a6:2c:53:76:79:11:96:07:7c:5c:08:b2:67:de:5b:
         11:8e:59:d2:5b:6b:b7:6e:88:9f:8c:dd:3f:01:be:a4:92:b3:
         46:82:b5:93:98:88:2d:07:6b:37:ad:2c:dc:a2:a9:df:e3:3c:
         30:1c:f0:a3:90:1a:04:4b:8a:81:af:2a:08:60:93:8a:1f:0d:
         a6:57:82:f5:54:8a:97:74:0d:6e:eb:7f:89:ab:b9:ff:5a:6f:
         63:e2:99:4f:be:b6:e1:bc:c5:04:18:81:0f:9b:a1:6b:2e:ae:
         6d:c2:38:ab:86:64:bf:f1:0c:43:c5:2b:00:f7:3d:d8:da:87:
         ba:21:9d:58:b8:13:18:3a:9c:62:a9:a7:ec:76:29:a7:5e:fd:
         0a:08:c4:84:0c:76:ef:b5:39:ff:00:20:27:36:09:90:69:9f:
         bd:9c:13:4e:4a:af:0d:2b:df:13:03:b7:bb:1f:59:76:9d:8c:
         15:c7:5d:38:8c:99:eb:92:36:00:95:29:ac:99:1f:15:31:9d:
         cb:3f:39:da:79:53:88:a7:60:78:88:23:0e:82:70:40:6e:6a:
         c9:12:7d:c1:88:d9:b2:a9:c0:a1:18:aa:a2:64:37:b3:da:11:
         e7:b1:73:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----