Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Stq1Isee7aT3r68Lwh9MZV0pFR0.roa
File:                     Stq1Isee7aT3r68Lwh9MZV0pFR0.roa (raw, json)
Hash identifier:          1cglC+vzZRvoNwM3zBfAefHAot580CxtItGY6GqAQPo=
Subject key identifier:   4A:DA:B5:22:C7:9E:ED:A4:F7:AF:AF:0B:C2:1F:4C:65:5D:29:15:1D
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1B5CEB3C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Stq1Isee7aT3r68Lwh9MZV0pFR0.roa
Signing time:             Sat 25 Jun 2022 16:07:11 +0000
ROA not before:           Sat 25 Jun 2022 16:07:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204508
IP address blocks:        2a06:a005:d29::/48 maxlen: 48
                          2a06:a005:f50::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459074364 (0x1b5ceb3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun 25 16:07:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4adab522c79eeda4f7afaf0bc21f4c655d29151d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0b:c3:84:49:1c:37:07:e3:6a:b9:a5:a0:34:
                    a1:e0:48:31:09:98:87:40:67:ea:ea:a2:35:21:75:
                    2d:24:90:3c:0d:0e:fe:a7:11:c4:02:f0:45:f5:2f:
                    99:1f:43:4c:cf:b6:44:d9:98:03:7b:6d:19:40:64:
                    05:72:50:fc:fb:99:84:4b:89:83:2e:39:b3:25:8f:
                    2e:95:3e:47:af:50:01:77:eb:ac:cc:42:55:f4:e3:
                    9f:7e:cb:e0:63:f3:71:19:d1:5c:83:52:3a:38:b2:
                    fc:86:19:fe:14:d2:dc:88:c3:d4:60:f8:5f:98:5f:
                    d1:54:8c:34:c3:db:ef:5e:fd:ae:ee:a5:51:e7:2d:
                    64:5d:dd:07:05:3d:6a:a2:df:97:45:8a:88:2d:2c:
                    5f:0a:6b:7b:6c:c9:a5:39:e3:01:36:2f:82:44:79:
                    bb:b7:c1:34:ca:f8:66:16:e0:5b:1f:37:43:22:cf:
                    f5:d9:77:ad:59:1c:47:25:09:96:a3:1c:cb:4a:4d:
                    e4:e8:c6:4d:c4:38:91:92:2d:db:42:fa:67:8e:cd:
                    71:1a:62:fd:57:ee:ae:94:07:57:af:da:6e:85:f4:
                    70:33:ea:f2:a7:d1:7a:65:63:7b:27:29:57:c0:f1:
                    9a:af:05:40:91:31:de:12:9f:9c:20:c1:8d:d3:d5:
                    cc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DA:B5:22:C7:9E:ED:A4:F7:AF:AF:0B:C2:1F:4C:65:5D:29:15:1D
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Stq1Isee7aT3r68Lwh9MZV0pFR0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d29::/48
                  2a06:a005:f50::/44

    Signature Algorithm: sha256WithRSAEncryption
         4e:7a:70:e9:74:01:77:bb:17:ac:d2:f2:c8:5d:b9:3a:52:5d:
         3d:43:67:15:1b:0b:ab:40:ed:db:d6:59:be:70:c6:41:cd:0c:
         c8:87:cc:e8:ea:63:3c:4a:6e:f7:51:ad:8c:99:08:f2:18:39:
         99:76:39:fc:dc:08:7a:ce:aa:f9:ec:66:8c:ca:4c:20:be:93:
         c2:15:3a:41:c8:e0:56:84:87:ec:4e:ed:8a:fa:49:27:33:08:
         83:bd:22:22:f2:bd:31:cc:16:56:7e:1c:66:64:fe:38:68:a0:
         30:eb:a7:20:23:3f:c3:b5:73:31:4f:77:eb:4d:4f:3f:6b:1f:
         ce:a4:59:a1:39:e6:2d:d3:f1:ce:75:36:52:18:75:4b:47:88:
         57:a1:6e:35:32:7a:b8:b6:dd:14:63:f5:8f:a4:66:b6:03:a0:
         1c:70:05:2d:b5:47:f4:4d:1c:04:d3:f5:de:93:9f:b1:d3:8c:
         bc:df:f8:6b:32:7a:70:ac:5c:2b:62:81:1e:ae:6e:13:11:d4:
         68:4e:93:ab:0f:71:ff:b6:cc:a4:ff:50:f0:4c:e3:10:3b:bc:
         91:34:12:b3:7e:8f:65:00:2a:68:27:b2:ed:35:42:78:7e:61:
         6b:1c:09:18:48:09:ea:c6:13:38:79:f6:2f:f6:a0:4c:78:0e:
         f5:c5:e7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----