Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/To4G_-EpXJKgRtSSCABmYydlHo0.roa
File:                     To4G_-EpXJKgRtSSCABmYydlHo0.roa (raw, json)
Hash identifier:          kvvufmUL4rNaJ9xGpx29guOp0t+vpQQyK8nOMy84nYk=
Subject key identifier:   4E:8E:06:FF:E1:29:5C:92:A0:46:D4:92:08:00:66:63:27:65:1E:8D
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01828DFCAB14673E1B7101C5651381154F64
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/To4G_-EpXJKgRtSSCABmYydlHo0.roa
Signing time:             Thu 11 Aug 2022 17:38:42 +0000
ROA not before:           Thu 11 Aug 2022 17:38:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203867
IP address blocks:        2a06:a005:12a0::/44 maxlen: 48
                          2a06:a005:e50::/44 maxlen: 48
                          2a06:a005:1710::/44 maxlen: 48
                          2a06:a005:e70::/44 maxlen: 48
                          2a06:a005:1010::/44 maxlen: 48
                          2a06:a005:dc0::/44 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:8d:fc:ab:14:67:3e:1b:71:01:c5:65:13:81:15:4f:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug 11 17:38:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4e8e06ffe1295c92a046d4920800666327651e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f5:fb:89:c9:cd:e3:ae:f6:a9:93:9e:3f:51:
                    eb:c1:da:a7:ea:eb:b6:2f:81:f6:c2:7f:48:de:2f:
                    7e:b1:de:04:1b:bc:95:89:82:de:21:75:81:4e:c4:
                    43:58:44:87:30:ae:0a:8e:0e:70:27:25:62:38:f7:
                    d1:70:1d:ca:0f:be:9b:c1:e1:0c:31:1b:3e:eb:a0:
                    cd:b0:d7:fa:06:e3:4d:9f:f5:17:85:b0:29:38:dd:
                    f4:06:8c:e5:d9:d4:87:eb:a6:3c:f1:e6:1e:49:fb:
                    e1:70:26:83:bf:65:02:4a:5e:c2:52:f7:fc:fb:48:
                    3e:fd:ae:8b:c3:21:37:af:a8:16:3a:41:46:d3:59:
                    b4:3b:da:7a:d2:f2:11:7c:55:44:6a:67:b1:94:77:
                    5c:93:b9:63:c0:42:2b:61:a7:93:a1:55:cc:05:0f:
                    62:f1:11:8e:a8:39:c9:0a:27:5c:d9:3e:08:1f:ff:
                    fb:52:ba:a0:65:f5:98:a8:6a:d9:fe:26:67:75:36:
                    ea:89:43:82:f3:a6:03:96:43:b8:95:ab:d9:43:1f:
                    54:e4:46:9e:7c:12:b6:ef:e8:52:cb:dd:92:a2:b5:
                    01:bc:aa:e8:65:93:63:0d:52:5f:17:26:09:7d:d6:
                    dd:16:48:a9:2c:66:37:a8:7d:6e:d9:65:84:e5:83:
                    77:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8E:06:FF:E1:29:5C:92:A0:46:D4:92:08:00:66:63:27:65:1E:8D
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/To4G_-EpXJKgRtSSCABmYydlHo0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:dc0::/44
                  2a06:a005:e50::/44
                  2a06:a005:e70::/44
                  2a06:a005:1010::/44
                  2a06:a005:12a0::/44
                  2a06:a005:1710::/44
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:b9:e7:3c:68:ad:dd:27:57:2a:31:5c:66:aa:9e:76:01:7b:
         21:a6:64:41:14:2c:cb:ed:34:41:93:35:c2:68:90:b4:f9:2e:
         40:bd:89:e7:38:f2:6e:c6:c7:f5:2e:98:b3:82:b8:03:6e:4f:
         0b:e2:e9:ff:25:e5:bc:d0:ae:b2:39:f6:87:af:06:27:db:bb:
         fc:aa:eb:9c:8e:93:bd:6a:53:aa:3a:9e:12:e6:73:3b:a7:11:
         78:4b:7f:02:c7:17:4e:10:d4:2b:86:70:4a:16:f5:13:2f:ad:
         cb:54:65:d7:68:ad:45:a2:6d:c3:98:ad:02:20:7e:19:a3:15:
         6e:92:c9:a0:57:51:68:e7:7d:a7:7c:41:6c:cf:42:e2:ec:54:
         0a:82:5a:38:f8:ec:e0:81:92:d5:6d:81:5c:b2:e9:e2:f0:ec:
         45:4f:90:c9:87:52:ca:83:17:eb:56:f4:b0:9d:35:01:57:24:
         83:4e:a0:b8:5b:cb:5a:0f:84:cc:ca:0a:d6:60:16:b3:60:7f:
         eb:72:0c:85:af:42:84:15:a9:18:6b:bc:df:af:07:15:fb:9d:
         ac:e7:16:ac:0e:58:de:28:d5:cc:20:a8:d0:c4:92:00:40:7e:
         46:54:b3:e4:2b:bd:42:f7:b9:c6:7f:a2:5e:fb:21:41:5d:b6:
         79:2c:d5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----