Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/TQNAIVfov7-cBzYOL7jF-Yjafqk.roa
File:                     TQNAIVfov7-cBzYOL7jF-Yjafqk.roa (raw, json)
Hash identifier:          Vhl2TtAiBNjTHCpAX+3JK4SmLFuJSoigC+Bp4jUwfsk=
Subject key identifier:   4D:03:40:21:57:E8:BF:BF:9C:07:36:0E:2F:B8:C5:F9:88:DA:7E:A9
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184EE8D80A6DE3C44619F06FF65C9D4C97D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/TQNAIVfov7-cBzYOL7jF-Yjafqk.roa
Signing time:             Wed 07 Dec 2022 21:46:01 +0000
ROA not before:           Wed 07 Dec 2022 21:46:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200754
IP address blocks:        2a0a:6040:c300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:ee:8d:80:a6:de:3c:44:61:9f:06:ff:65:c9:d4:c9:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  7 21:46:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4d03402157e8bfbf9c07360e2fb8c5f988da7ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5a:c0:63:87:ab:aa:32:a1:d4:a6:3d:a6:bc:
                    88:38:31:f8:69:17:29:21:18:39:f4:95:aa:86:fc:
                    ea:e2:9b:5f:82:37:9f:41:fe:df:1d:89:59:c6:7d:
                    c2:f2:3e:9a:93:db:9c:e6:62:da:97:a2:80:47:00:
                    54:e8:4e:fd:d4:78:ce:7b:24:bb:12:c9:d7:fc:ae:
                    8c:bb:7b:e8:f6:8a:37:6b:3a:a8:7b:86:10:a3:7b:
                    8c:7c:cd:81:32:f6:e0:0c:04:54:c7:62:af:50:1c:
                    8c:52:8f:62:c3:73:cd:a0:a4:0e:1a:6e:5f:08:44:
                    53:20:fc:b0:43:4d:d3:7e:c9:3a:62:12:cc:e2:49:
                    f8:c4:11:54:89:03:43:5c:ef:54:b9:bf:bd:c6:79:
                    72:18:ba:2b:4b:8b:bf:f6:11:49:d6:f1:88:8f:ae:
                    3d:77:7e:80:63:bb:62:c1:57:43:49:da:fe:d7:8c:
                    06:5f:4a:dd:7d:a4:ad:95:83:ee:0e:e1:f1:aa:46:
                    80:2c:04:dc:40:d5:83:07:62:61:b6:96:15:09:1e:
                    fc:50:50:53:59:4a:76:44:c4:d2:9e:b0:6f:ae:ff:
                    ad:1c:0e:bc:d2:52:07:e8:9a:a5:5c:20:c7:18:4f:
                    2e:41:30:88:ad:1a:d4:e2:4e:36:c2:72:b8:b3:9c:
                    d8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:03:40:21:57:E8:BF:BF:9C:07:36:0E:2F:B8:C5:F9:88:DA:7E:A9
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/TQNAIVfov7-cBzYOL7jF-Yjafqk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:c300::/40

    Signature Algorithm: sha256WithRSAEncryption
         7a:ff:89:68:d8:49:44:07:80:0b:48:86:44:22:a5:b1:a3:47:
         79:b2:4b:3c:e1:4b:be:80:44:d0:3e:a9:86:24:b9:12:ce:03:
         46:a4:c0:39:a1:f7:f5:dd:89:f7:bc:67:b8:31:b1:83:ad:8c:
         4a:90:7c:fc:a2:62:30:a3:68:d0:51:9c:1c:11:a3:24:29:db:
         1b:36:f0:ad:50:23:e6:ea:1a:6a:70:f8:e0:ba:bb:e9:9e:f8:
         13:8f:1e:b9:df:c1:45:6a:25:ba:57:a8:28:45:17:cd:7b:94:
         60:52:d9:1e:c4:f5:7f:81:de:de:59:57:c5:68:4b:a1:9a:93:
         ab:b1:c8:90:62:3b:fc:6b:c2:2d:f5:34:22:5d:47:07:57:c6:
         c6:2f:a4:cc:86:7b:a2:5b:7f:29:58:0d:2f:a0:d2:d5:33:81:
         64:8b:ea:2e:cc:4b:90:19:8f:09:aa:22:16:65:fb:0a:22:76:
         f2:c4:2c:87:6b:dd:21:25:82:24:7e:75:05:ce:d1:9c:0a:54:
         8e:ac:ea:40:fd:d8:bb:21:89:36:23:b8:46:47:70:a3:07:88:
         7c:ed:cc:83:01:f1:0a:7d:70:62:96:e8:80:90:23:5b:23:6d:
         4a:a0:f4:1e:c9:9c:de:75:93:b8:6e:6a:21:fd:1a:18:73:cb:
         50:78:6a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----