Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/W67H4dS6FibxXArr1cRSi5OJOjo.roa
File:                     W67H4dS6FibxXArr1cRSi5OJOjo.roa (raw, json)
Hash identifier:          GKCGBiERDRMd45nB4OLhA2THMyHEE5ylaJV2tAVblWs=
Subject key identifier:   5B:AE:C7:E1:D4:BA:16:26:F1:5C:0A:EB:D5:C4:52:8B:93:89:3A:3A
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184454D18CE80DD3B0AF75ECC28679FDCEE
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/W67H4dS6FibxXArr1cRSi5OJOjo.roa
Signing time:             Sat 05 Nov 2022 00:59:51 +0000
ROA not before:           Sat 05 Nov 2022 00:59:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202218
IP address blocks:        2a0a:6040:ff00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:45:4d:18:ce:80:dd:3b:0a:f7:5e:cc:28:67:9f:dc:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov  5 00:59:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5baec7e1d4ba1626f15c0aebd5c4528b93893a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a0:cf:30:9d:a2:c3:d4:b2:36:83:65:8c:1d:
                    7f:e4:81:e2:0f:fe:4c:04:97:7c:00:27:7f:ff:a7:
                    67:06:1e:0f:81:bb:9a:e2:c9:46:ad:d7:5d:83:2c:
                    d1:70:f2:b4:a4:90:2e:2e:f8:f2:71:1c:38:bd:37:
                    f1:09:95:f6:89:57:96:b0:d9:d6:14:52:f5:b7:33:
                    2d:8c:c9:45:d7:87:d6:39:b4:2b:be:a8:50:0a:b9:
                    ee:b6:2f:9c:12:3a:bb:19:d2:d2:7a:32:02:a1:f0:
                    a3:26:d7:d6:3c:af:1a:6a:46:a3:3f:c1:56:3d:d8:
                    0a:6e:4d:e9:82:43:5c:59:0f:8f:88:61:9f:8f:fc:
                    c1:67:5f:20:98:5e:c6:ac:dd:f4:00:ea:14:c7:82:
                    d2:44:38:d7:fa:53:84:c8:df:b7:43:bf:f2:9e:44:
                    8b:f8:84:57:e3:3a:bb:11:a9:9e:7f:fa:4c:9d:eb:
                    69:cd:1e:11:c2:a1:47:dd:1d:52:e0:eb:0f:de:19:
                    92:61:c5:c9:94:b9:65:d5:84:8e:d2:56:e3:bb:3b:
                    0f:be:9a:92:a3:2a:42:68:dd:40:9a:93:15:a8:bb:
                    9f:0b:4a:9a:67:df:d9:d9:f3:3b:17:d3:09:eb:71:
                    18:31:1d:6c:b9:5a:b9:96:7e:65:7b:16:ac:81:bb:
                    19:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AE:C7:E1:D4:BA:16:26:F1:5C:0A:EB:D5:C4:52:8B:93:89:3A:3A
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/W67H4dS6FibxXArr1cRSi5OJOjo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         2e:a0:0d:da:5b:1d:65:22:e7:ac:b5:c6:a7:17:24:ff:fd:d0:
         57:fa:29:e8:ab:f6:50:ac:54:97:16:24:a2:1f:03:2e:65:a4:
         7a:e0:25:c0:57:03:ce:d3:a9:6b:8b:8c:4c:a5:c3:15:1d:bb:
         b6:31:44:b7:62:7d:d6:9f:d1:c7:8b:69:86:34:8d:97:41:61:
         90:05:99:c8:5f:77:5d:3b:97:c2:bb:80:f5:bb:89:54:6a:d9:
         15:04:a0:fa:6a:99:f5:94:1d:c6:d8:7e:c4:0f:27:e0:6b:f3:
         aa:dc:83:8d:e4:76:da:0e:f6:7b:90:38:2b:8c:d8:36:c1:88:
         15:40:47:c0:f4:12:d1:16:8b:8f:99:45:4f:37:28:da:06:35:
         74:6f:50:ff:51:45:29:d4:0d:54:09:39:cf:4a:04:b1:72:16:
         f7:c6:10:bb:60:c3:2d:1e:4e:03:dd:97:6b:0e:5c:4a:a1:5d:
         3a:f7:12:9b:7e:59:83:45:65:c8:88:4f:af:70:4a:fc:ae:f3:
         b1:94:fa:8d:2e:5d:a5:9c:1f:05:67:be:f3:0e:82:03:7a:ab:
         14:07:9e:25:63:e5:08:12:0f:8e:47:88:02:b1:df:eb:ea:6a:
         b1:1f:f8:bb:42:bb:71:56:cc:73:22:d1:52:b8:e8:2c:31:21:
         fe:d4:b7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----