Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/UwP9wAfhTh2tHLrV7F87F46Z9gQ.roa
File:                     UwP9wAfhTh2tHLrV7F87F46Z9gQ.roa (raw, json)
Hash identifier:          w3pfNyXr+6jiGDwKJ6LWOkUwqrYf9D57pNhHhZm7n4I=
Subject key identifier:   53:03:FD:C0:07:E1:4E:1D:AD:1C:BA:D5:EC:5F:3B:17:8E:99:F6:04
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1AE672BD
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/UwP9wAfhTh2tHLrV7F87F46Z9gQ.roa
Signing time:             Wed 15 Jun 2022 10:24:47 +0000
ROA not before:           Wed 15 Jun 2022 10:24:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212995
IP address blocks:        2a06:a005:cd0::/44 maxlen: 48
                          2a06:a005:4a0::/44 maxlen: 48
                          2a06:a005:d10::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451310269 (0x1ae672bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun 15 10:24:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5303fdc007e14e1dad1cbad5ec5f3b178e99f604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:af:b1:9b:3e:21:82:b9:00:39:ab:d8:de:6f:
                    ce:fa:e1:b7:44:1f:20:20:ea:9c:ad:24:13:42:0e:
                    a0:1c:5b:ad:3e:19:02:34:10:62:98:66:b2:81:e1:
                    a7:39:19:a1:5c:0b:ad:f7:cb:ff:15:02:49:57:e3:
                    ed:6d:54:51:7d:7c:53:85:f0:96:d8:fa:17:f7:ea:
                    71:5d:43:3e:fe:b7:56:cd:ef:5e:53:f0:c8:52:7a:
                    15:c6:88:f9:b9:18:84:c8:fe:19:fe:26:89:45:3d:
                    83:f9:6b:16:dc:25:77:38:e5:b0:a0:6e:17:f3:80:
                    57:8f:e3:17:87:48:b3:1b:84:73:4b:0e:b5:91:67:
                    43:0e:2b:81:e2:55:47:33:23:e6:d8:a1:0d:67:8f:
                    bb:1b:bc:b3:a0:4b:72:7d:ca:cb:43:46:59:a7:6b:
                    82:6d:91:64:51:7e:cb:60:b4:da:26:e0:f5:44:95:
                    4c:45:bd:c6:b6:5c:3d:49:c9:c3:de:4f:18:ad:df:
                    f9:19:54:d5:cd:30:23:d8:1d:af:8f:a5:50:db:5b:
                    1c:07:98:91:ed:15:dd:0c:5c:ac:1f:d9:e1:92:92:
                    ec:b0:21:80:51:a4:4e:ea:5e:02:db:38:95:d9:47:
                    23:59:10:ad:b3:30:81:e0:7b:d7:e6:65:c0:08:2d:
                    39:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:03:FD:C0:07:E1:4E:1D:AD:1C:BA:D5:EC:5F:3B:17:8E:99:F6:04
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/UwP9wAfhTh2tHLrV7F87F46Z9gQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:4a0::/44
                  2a06:a005:cd0::/44
                  2a06:a005:d10::/44

    Signature Algorithm: sha256WithRSAEncryption
         7d:b0:6c:08:ce:05:23:02:8e:d9:bb:62:4e:5f:3b:3c:23:57:
         03:bb:25:0c:2b:77:f4:2f:21:9c:a5:fa:e3:d0:be:cb:3b:1b:
         f2:f8:ed:00:11:11:cc:fb:cf:0f:9c:88:e3:f5:9a:11:d7:d3:
         82:02:99:e6:e1:3a:bc:ba:82:6f:7b:42:8a:24:f5:b7:11:45:
         6d:bc:d7:3d:c2:3e:e0:a8:fd:02:07:08:23:c9:92:c0:f0:7b:
         fe:1e:5e:37:ab:52:b8:ca:8a:2f:d0:e3:59:5d:a6:b2:b1:a6:
         9c:1f:83:6d:c5:72:ef:1a:f2:9c:61:bb:9b:f3:7a:b4:2e:5d:
         32:dd:2e:08:2b:70:e4:e5:41:64:0b:62:13:ba:fc:62:02:06:
         45:14:6f:d7:0d:0d:e1:2f:4d:ee:de:3b:94:27:ff:4a:d0:05:
         6b:94:e7:d4:74:58:ca:df:ab:91:26:2b:35:7f:8c:4d:0d:11:
         5a:4c:4e:b9:90:3f:95:42:24:80:1c:09:22:8e:7d:62:05:93:
         53:56:e1:98:b2:14:89:54:d9:82:dc:8e:33:bf:1d:2b:bd:82:
         a4:63:ab:36:fa:f7:c5:b8:7f:2b:97:e5:2a:02:0b:96:7e:35:
         ba:92:a2:93:98:b2:d4:b0:1a:c0:fb:18:16:2a:ef:83:4a:ca:
         87:53:cb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----