Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/W18xLd5BTqc44KJEHY_GLJ6wWuA.roa
File:                     W18xLd5BTqc44KJEHY_GLJ6wWuA.roa (raw, json)
Hash identifier:          /Rbf3eo4PKoIwOyeZhHHRBkqa6n/fSimWfUL5oNRd9E=
Subject key identifier:   5B:5F:31:2D:DE:41:4E:A7:38:E0:A2:44:1D:8F:C6:2C:9E:B0:5A:E0
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184D8CA0859780BE71B008164A2B12B2A72
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/W18xLd5BTqc44KJEHY_GLJ6wWuA.roa
Signing time:             Sat 03 Dec 2022 16:20:29 +0000
ROA not before:           Sat 03 Dec 2022 16:20:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204789
IP address blocks:        2a06:1286::/32 maxlen: 48
                          2a06:a005:1de0::/44 maxlen: 48
                          2a06:a005:1df0::/44 maxlen: 48
                          2a06:a005:1dd0::/44 maxlen: 48
                          2a06:a005:1dc0::/44 maxlen: 48
                          2a06:1287:9000::/36 maxlen: 48
                          2a06:a005:1db0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:d8:ca:08:59:78:0b:e7:1b:00:81:64:a2:b1:2b:2a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  3 16:20:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5b5f312dde414ea738e0a2441d8fc62c9eb05ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2a:20:f6:a2:b2:21:0d:96:79:88:50:18:98:
                    0d:62:76:54:91:bb:81:34:5e:d1:21:04:e2:4d:d3:
                    e8:24:b6:1a:56:0b:7e:35:84:76:6c:59:10:2c:3a:
                    c0:66:73:33:62:0b:d2:eb:06:cf:07:f4:59:e7:f6:
                    0f:7d:a3:ce:84:6b:3a:fb:18:ca:e9:5d:c5:b6:fd:
                    99:c2:d8:e0:bf:dc:d4:77:25:e3:77:3d:82:21:d6:
                    78:8d:66:39:61:f6:83:1a:bc:e6:4d:ae:9a:19:10:
                    b7:d6:34:f9:ac:32:a3:d1:b1:b4:24:2a:c0:3b:40:
                    8b:01:ec:a6:41:98:d6:e4:0f:7e:88:52:95:24:3a:
                    6e:c5:18:7e:7c:7f:30:a7:e5:e5:5a:04:2b:70:70:
                    60:4c:15:f5:29:0c:aa:87:32:84:f5:a9:92:11:dd:
                    c3:5e:ee:f7:80:4e:0b:25:c3:19:4d:fc:73:b5:94:
                    65:6e:28:71:be:e7:f2:00:31:de:18:c2:9f:47:b5:
                    23:58:c7:4b:e6:1b:1e:e8:e5:25:f3:7f:fc:c4:5f:
                    93:e6:61:63:61:9b:1f:89:42:3e:cb:5a:a2:82:87:
                    6d:bf:42:5e:f1:05:f3:b2:f8:57:7e:e7:d9:3c:32:
                    29:d2:7b:6b:f0:65:07:a7:d0:7c:e0:9e:46:b2:88:
                    b9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5F:31:2D:DE:41:4E:A7:38:E0:A2:44:1D:8F:C6:2C:9E:B0:5A:E0
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/W18xLd5BTqc44KJEHY_GLJ6wWuA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1286::/32
                  2a06:1287:9000::/36
                  2a06:a005:1db0::-2a06:a005:1dff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         1d:e6:4e:76:d8:0a:02:d6:58:9f:1c:8d:92:ae:7b:d1:45:e4:
         c7:c7:b1:13:cf:46:4b:53:26:f7:48:92:46:02:ca:03:e1:ce:
         ad:4e:79:e4:a1:c9:2d:97:fe:5f:f0:5d:0b:98:2c:e2:c1:e6:
         b8:23:f3:13:b2:3f:3c:48:70:c8:4e:f4:61:61:2c:89:5e:93:
         a1:57:1b:53:34:0a:db:b2:4b:44:07:3c:00:60:1c:21:fa:c8:
         8a:2f:df:94:04:26:0b:fd:71:0e:03:6a:59:94:d2:bc:41:3d:
         b3:fa:81:48:c5:59:c1:67:01:bb:a3:e1:b5:78:e2:27:a5:0b:
         ad:36:54:93:70:da:4c:bf:ae:12:fa:0b:73:52:80:2a:35:ed:
         70:7a:32:26:a5:2d:d6:c8:c5:b9:18:03:c1:e7:bb:eb:35:79:
         84:30:33:f5:70:9c:86:48:bf:ff:37:da:34:1f:ee:0d:8d:b8:
         04:66:44:eb:21:e4:66:19:d0:f6:0e:0f:68:8c:d4:22:cc:45:
         d7:4d:cf:62:b7:80:be:a6:f0:72:bf:bc:c3:60:40:da:47:5e:
         5b:61:b2:75:b3:75:3b:14:6b:cc:e0:27:04:c3:18:1f:59:84:
         49:87:a2:7a:d9:07:d9:ed:46:41:ad:01:87:0b:27:30:27:a0:
         90:ac:4c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----