Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Sf73OPJt9FMPWMJIj7RG1PbvKWI.roa
File:                     Sf73OPJt9FMPWMJIj7RG1PbvKWI.roa (raw, json)
Hash identifier:          F4SOVejsOq5XpiAnaFR+HbiPTnrOT+fZFIp+Ii9yifI=
Subject key identifier:   49:FE:F7:38:F2:6D:F4:53:0F:58:C2:48:8F:B4:46:D4:F6:EF:29:62
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       187A845C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Sf73OPJt9FMPWMJIj7RG1PbvKWI.roa
Signing time:             Thu 21 Apr 2022 06:46:16 +0000
ROA not before:           Thu 21 Apr 2022 06:46:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210932
IP address blocks:        2a06:a005:570::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410682460 (0x187a845c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 21 06:46:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=49fef738f26df4530f58c2488fb446d4f6ef2962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:91:40:70:17:2a:46:80:35:9a:6e:72:03:3c:
                    45:df:4e:94:29:c8:fa:0b:ce:09:4c:1b:8f:c5:c6:
                    cb:9c:3a:e3:7b:cc:1c:28:96:f2:bd:61:72:3d:39:
                    4a:da:a9:79:0c:d3:27:22:a9:44:d7:25:3a:f4:6c:
                    6c:74:05:bb:05:0a:e7:32:0b:23:07:8a:e9:66:26:
                    ab:25:2f:17:86:54:dc:d4:c9:6d:48:a0:1c:b4:9b:
                    ef:39:0d:b1:12:14:18:32:db:ed:88:93:b5:47:f9:
                    fe:51:1a:53:9c:0b:62:00:bd:ed:2b:c7:78:aa:ec:
                    be:52:c8:7f:cc:94:fa:6d:26:d3:08:7a:bb:de:a9:
                    16:6e:ae:44:dc:f8:88:f0:7f:46:1c:a0:e6:3f:41:
                    70:57:42:a7:7c:31:d1:4d:42:ef:80:f5:77:27:02:
                    7b:48:c9:8f:b0:75:8f:84:ab:06:c3:b4:24:1d:87:
                    96:76:8d:c9:fc:bd:1e:80:85:2a:95:3b:66:2a:a0:
                    72:fb:04:34:34:4d:f4:96:49:3a:71:48:03:43:28:
                    60:d4:1d:99:c8:7f:58:db:12:ed:2b:50:27:5c:70:
                    42:a7:eb:b8:92:db:ad:9a:ae:78:0f:53:2e:02:a9:
                    46:2d:5e:40:aa:15:52:3f:0f:66:c0:a6:e1:55:79:
                    ad:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:FE:F7:38:F2:6D:F4:53:0F:58:C2:48:8F:B4:46:D4:F6:EF:29:62
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Sf73OPJt9FMPWMJIj7RG1PbvKWI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:570::/44

    Signature Algorithm: sha256WithRSAEncryption
         8f:80:40:8b:86:74:9a:61:55:d7:7e:20:3d:7b:98:91:ee:e8:
         8d:ff:ac:82:18:b2:37:7e:42:6f:5d:17:7c:04:22:58:74:5e:
         f2:19:af:ef:55:88:c9:c2:ff:79:c9:fc:23:65:58:2a:0d:80:
         67:cc:75:cc:88:cc:a7:74:d0:81:4e:22:e2:26:ad:d7:c5:86:
         cc:90:52:71:06:93:ac:e6:32:ae:0c:e0:75:d8:47:64:ca:32:
         55:2b:d4:83:c5:45:9c:f6:bc:15:4d:03:8f:00:b6:ad:b3:93:
         35:b5:2d:20:a8:2f:47:a9:55:26:d1:b1:36:49:a9:de:bb:3f:
         cb:37:0d:54:f9:3f:ec:13:16:75:3b:46:a8:11:9d:69:25:64:
         d0:82:51:53:b8:a5:81:19:e4:70:d7:5f:ec:dd:25:f0:af:93:
         73:e8:db:e0:42:4c:36:34:c8:8a:32:5d:59:5b:98:71:9c:af:
         e7:e9:14:fa:17:3c:0e:87:04:c3:b7:92:28:b2:d3:d5:e9:9b:
         c7:63:6a:55:36:3f:40:d5:33:46:b5:87:21:d5:d6:8a:33:ab:
         18:1d:15:61:11:0c:32:2a:73:aa:95:5e:76:b9:20:3d:27:c9:
         71:6b:fb:1c:4d:c9:ab:aa:85:31:8c:3d:bc:3d:d5:ee:99:aa:
         32:bc:7b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----