Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Vvl9tYx-fPWZW_vdYif9_lkmt-A.roa
File:                     Vvl9tYx-fPWZW_vdYif9_lkmt-A.roa (raw, json)
Hash identifier:          1afmbO853sbE6E8fBmnhLvQRhoYQB/AWLwAGWGmgHlk=
Subject key identifier:   56:F9:7D:B5:8C:7E:7C:F5:99:5B:FB:DD:62:27:FD:FE:59:26:B7:E0
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182A23F072A6752DC8FC033404872FE196B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Vvl9tYx-fPWZW_vdYif9_lkmt-A.roa
Signing time:             Mon 15 Aug 2022 16:03:35 +0000
ROA not before:           Mon 15 Aug 2022 16:03:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210152
IP address blocks:        2a06:a005:17f0::/44 maxlen: 48
                          2a06:a005:1290::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:a2:3f:07:2a:67:52:dc:8f:c0:33:40:48:72:fe:19:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug 15 16:03:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=56f97db58c7e7cf5995bfbdd6227fdfe5926b7e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6c:3a:40:e5:a7:df:b3:2b:f2:1e:df:66:4c:
                    1d:77:64:e4:5a:94:23:5e:34:46:da:e1:3b:f8:15:
                    5c:e1:74:0c:d1:3e:77:c5:e5:aa:0b:88:54:64:36:
                    69:91:bd:23:42:cf:32:53:7d:54:e4:d7:f5:55:a7:
                    c3:92:5a:c2:57:93:b8:b3:14:91:ea:dd:48:0a:a5:
                    e7:19:1a:88:47:0d:d1:de:83:2d:d9:5d:02:92:05:
                    20:c5:36:2d:44:d5:8e:d2:61:a6:43:42:84:4d:30:
                    07:fb:f5:ff:9e:e1:e9:a4:fb:9f:07:11:46:4f:8a:
                    eb:a8:a1:b5:8e:da:6c:ea:54:db:1f:80:7d:eb:c6:
                    ce:16:18:cb:38:90:f9:76:7f:c5:d2:1b:01:24:0b:
                    b0:28:fd:03:16:08:04:17:bd:c9:6b:8a:8d:1f:96:
                    ef:af:5f:c3:82:7b:39:9f:63:01:5d:3c:c8:f1:94:
                    8e:f1:a7:43:6e:75:89:04:d0:3c:9f:21:58:7c:fc:
                    6d:42:2c:48:73:c0:19:ef:d1:c7:ce:2e:61:d1:f9:
                    13:87:d4:61:fc:05:79:18:32:21:96:a5:48:40:4f:
                    13:58:e8:6a:c8:db:a2:e2:d4:72:e3:87:4a:6b:d5:
                    4c:45:7e:4d:11:01:86:31:7c:33:b3:3c:87:38:75:
                    e5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F9:7D:B5:8C:7E:7C:F5:99:5B:FB:DD:62:27:FD:FE:59:26:B7:E0
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Vvl9tYx-fPWZW_vdYif9_lkmt-A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1290::/44
                  2a06:a005:17f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         62:19:ac:2d:34:8a:c4:57:19:59:c3:96:ba:c0:3c:c1:34:a9:
         83:04:72:5a:97:e9:70:78:67:81:65:30:3b:d3:e5:60:c8:8b:
         58:64:40:67:1d:81:f8:cb:68:1c:87:d3:ce:1d:a8:f5:f6:9f:
         2f:c8:0a:51:3d:6a:15:b6:dc:94:6a:d2:de:cc:a5:87:7c:b4:
         51:59:3f:a6:f7:dd:d9:a2:e5:37:44:ce:6d:0c:e7:6a:0d:fa:
         16:2f:ed:45:5f:44:b4:d8:8c:79:18:6e:7e:38:23:56:13:45:
         01:45:05:96:cd:73:3b:be:1e:55:8b:17:f5:d7:36:e6:e9:d6:
         db:50:58:a5:8c:06:48:af:b6:62:52:f8:70:a5:68:1f:c9:83:
         ce:54:fb:13:ce:86:ae:a4:03:ce:c6:4d:af:7c:3b:c0:95:d0:
         4d:e5:b2:32:39:36:ad:9e:4b:7b:65:8f:e4:4a:ad:eb:9f:37:
         95:3f:8e:a8:f3:b2:fd:1a:ed:d6:28:96:58:4f:d8:e9:9d:2f:
         e6:7a:bc:44:85:8a:31:31:ba:a8:9f:fa:6a:e8:78:82:73:80:
         6f:36:21:9d:ae:6c:ff:bd:fe:b3:ea:b2:89:8c:40:a9:95:8b:
         b7:09:7c:04:75:6d:b2:d1:bc:7f:56:57:0f:3e:c8:98:c8:b6:
         ec:2d:dd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----