Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/WBkORKNg0LLDPvNHRTnA6RTMZns.roa
File:                     WBkORKNg0LLDPvNHRTnA6RTMZns.roa (raw, json)
Hash identifier:          XRp7o2rzI6YWkkxIXvy98m/gByYefU9vs67sLPwa6sA=
Subject key identifier:   58:19:0E:44:A3:60:D0:B2:C3:3E:F3:47:45:39:C0:E9:14:CC:66:7B
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01842E809A668472D34A7642DAA932305183
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/WBkORKNg0LLDPvNHRTnA6RTMZns.roa
Signing time:             Mon 31 Oct 2022 14:44:50 +0000
ROA not before:           Mon 31 Oct 2022 14:44:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203323
IP address blocks:        2a06:a005:21c0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:2e:80:9a:66:84:72:d3:4a:76:42:da:a9:32:30:51:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 31 14:44:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=58190e44a360d0b2c33ef3474539c0e914cc667b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e0:21:ce:4f:1f:31:c9:e9:2f:0e:68:9a:a6:
                    c6:f7:e9:72:ff:5c:e0:ea:3c:cb:c1:81:08:6c:82:
                    dd:1b:ff:5c:f7:ad:90:bb:c5:e3:37:74:63:16:2c:
                    2f:a6:dc:85:71:52:b1:d2:f8:e2:b0:7a:87:a4:9d:
                    20:e5:c2:01:05:46:0e:7f:71:80:61:cd:d9:b6:22:
                    68:1d:bb:33:50:19:64:1a:4e:1d:7d:c1:d8:29:54:
                    13:3b:b3:1d:01:ee:55:10:83:68:bf:6c:9f:72:b6:
                    29:45:83:0b:b9:dc:fc:7b:ba:9e:ed:e5:82:65:18:
                    38:ae:d5:c7:51:8a:9a:39:f2:6c:71:10:60:b6:b2:
                    8a:75:0b:22:c2:71:b2:6c:22:da:79:d0:46:8b:c8:
                    b6:67:ab:b8:0d:0e:71:11:b8:cd:8a:06:a6:1a:71:
                    48:f8:5f:f2:84:93:35:03:88:bf:e3:67:89:e8:4b:
                    dd:22:85:b9:fc:aa:96:9c:1c:d4:4c:56:d6:b9:37:
                    49:48:4a:df:0a:79:a0:f1:55:f2:04:f5:a0:91:2d:
                    11:e5:eb:11:96:69:bb:1e:b0:f1:b9:fb:f1:e1:26:
                    c9:d1:79:7a:37:d0:02:a4:fd:e1:fa:0f:7d:51:57:
                    d6:da:96:6f:9d:8f:b4:66:11:0f:19:d2:1d:54:32:
                    c1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:19:0E:44:A3:60:D0:B2:C3:3E:F3:47:45:39:C0:E9:14:CC:66:7B
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/WBkORKNg0LLDPvNHRTnA6RTMZns.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:21c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         84:8f:48:34:02:62:9a:bc:b1:55:59:6a:2a:19:1c:03:57:8d:
         eb:5b:3d:c2:f6:33:c7:3e:d1:43:23:c4:a7:d8:31:d3:c2:cc:
         e5:6f:3c:f7:5c:b3:ab:92:7b:e4:00:bc:43:65:7d:b8:84:28:
         4f:88:10:02:53:0a:40:11:d0:dc:9f:d3:6f:2d:cb:e0:bc:1e:
         c8:99:1d:ac:79:3b:45:eb:27:65:a8:49:c2:4f:96:48:2e:20:
         6e:c2:c7:22:ed:d1:68:5f:c2:9d:70:04:af:2b:48:3c:93:d4:
         86:0a:88:05:24:b5:0d:99:4d:27:f6:0b:8e:be:2d:a3:b9:9f:
         6a:1c:49:38:5c:e8:c5:ec:e6:ae:37:7f:89:fe:9f:12:c5:e9:
         59:cd:3e:0c:bd:23:6c:92:2f:59:43:da:2b:8f:7e:c1:fb:43:
         c5:2a:98:32:e6:95:3b:ac:6a:03:3e:bc:a6:e2:41:b2:12:7a:
         f3:d5:13:22:4d:c8:30:04:72:62:53:a2:89:e0:43:ce:24:69:
         6d:21:3b:d0:bb:35:55:db:6b:53:aa:b5:56:1d:8b:6a:26:dc:
         de:cc:07:d9:59:69:56:42:bf:b9:95:79:c2:81:21:38:5f:4e:
         7c:44:fa:d7:36:0a:84:a3:9e:f2:e7:0f:cc:2e:19:aa:06:f5:
         e9:6d:01:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----