Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/UcAlWY5_ihD3-z96Aa6895y4jAU.roa
File:                     UcAlWY5_ihD3-z96Aa6895y4jAU.roa (raw, json)
Hash identifier:          5626NwUwVrySlMbdC98BcOtYkjv9zz8OXsS4pRsWLNQ=
Subject key identifier:   51:C0:25:59:8E:7F:8A:10:F7:FB:3F:7A:01:AE:BC:F7:9C:B8:8C:05
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01835B298682C5113DA5253FFED4B42377CE
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/UcAlWY5_ihD3-z96Aa6895y4jAU.roa
Signing time:             Tue 20 Sep 2022 13:49:51 +0000
ROA not before:           Tue 20 Sep 2022 13:49:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204789
IP address blocks:        2a06:a005:1de0::/44 maxlen: 48
                          2a06:a005:1df0::/44 maxlen: 48
                          2a06:a005:1dd0::/44 maxlen: 48
                          2a06:a005:1dc0::/44 maxlen: 48
                          2a06:a005:1db0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:5b:29:86:82:c5:11:3d:a5:25:3f:fe:d4:b4:23:77:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep 20 13:49:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=51c025598e7f8a10f7fb3f7a01aebcf79cb88c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:30:92:81:b8:3b:d5:e3:6e:6f:a6:7c:65:9f:
                    72:50:81:f6:a7:02:82:d1:f0:5c:c7:3c:a7:68:8a:
                    2a:f7:81:bc:58:e2:47:d8:5b:92:1c:45:86:eb:63:
                    1e:79:ee:0f:03:76:e9:41:35:e5:82:57:ae:5c:2b:
                    77:ed:27:85:cd:64:0b:54:97:27:db:6c:c0:69:66:
                    dc:79:e3:3a:cd:9c:2a:a9:d3:ed:f0:0d:58:33:7a:
                    ad:99:b5:ad:38:c5:42:25:75:fa:42:fb:28:f6:aa:
                    66:d6:de:bd:06:d4:5d:44:56:20:39:71:80:dd:c1:
                    d9:1b:fe:1e:dc:d5:a1:ed:c0:83:d1:07:b9:2f:78:
                    ba:9c:d8:43:79:c4:0e:09:e4:c6:a0:bc:c9:b3:d0:
                    13:d8:a1:36:40:bd:77:34:da:a3:48:c9:f6:45:52:
                    1e:33:77:00:7b:ef:b5:30:44:89:9d:e0:11:7b:45:
                    07:d0:30:b3:f0:e4:8c:5d:16:ad:7c:43:fd:e9:0f:
                    62:f7:62:a8:ee:a1:cf:1e:be:dc:0f:66:de:5d:95:
                    ae:5a:f2:ff:fe:80:c9:cc:05:29:3f:f4:58:e4:8e:
                    4c:5e:68:5d:4a:31:70:d6:4a:dd:9a:2a:28:53:57:
                    c3:13:90:e5:fa:6f:5d:58:77:65:c3:2a:af:cf:a5:
                    67:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C0:25:59:8E:7F:8A:10:F7:FB:3F:7A:01:AE:BC:F7:9C:B8:8C:05
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/UcAlWY5_ihD3-z96Aa6895y4jAU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1db0::-2a06:a005:1dff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         8e:e1:64:e7:00:17:7d:81:65:6f:36:01:1c:f1:da:21:ab:28:
         68:d9:ba:f6:c4:b9:8c:f6:5c:92:7d:82:74:2a:22:b2:d2:da:
         83:4a:c2:b6:f5:c3:f4:ee:69:a7:b1:1c:3f:13:c0:aa:83:b2:
         fe:fa:0b:12:76:88:af:5a:b4:61:da:88:08:d2:a2:c3:72:f6:
         ad:b0:1c:aa:69:1f:3f:d0:bc:45:fd:e4:2d:9a:33:8a:c7:10:
         d3:24:c4:63:44:f7:4a:48:84:ff:36:0b:6f:13:91:52:bc:04:
         38:01:e6:07:af:a0:36:4d:e6:b9:96:75:90:9c:22:ae:2f:c7:
         db:b5:5b:34:3a:d6:88:ee:1d:45:c6:d2:fd:64:7d:6e:d3:d1:
         30:81:36:76:4a:cf:2e:18:e4:cf:76:64:39:be:1e:0e:4b:9b:
         c0:a2:04:78:86:10:3a:9d:09:5a:e4:ad:cc:9b:14:09:2d:a3:
         c9:33:97:60:a7:89:04:b5:b2:19:a1:df:ff:0c:72:32:7f:a1:
         c1:82:53:af:f0:41:20:d5:5e:52:aa:1a:3a:74:71:13:39:d5:
         09:0a:a4:ad:92:31:78:33:92:70:fc:09:ff:47:ae:ba:32:7c:
         0e:11:0e:6f:30:99:74:a5:f6:14:30:9e:bc:43:b2:6c:18:cd:
         c1:a5:49:7f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----