Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/WCPXqWd374It2NIMIBUClu7uguw.roa
File:                     WCPXqWd374It2NIMIBUClu7uguw.roa (raw, json)
Hash identifier:          JF6eknhwQwBH+dmn/+p+ygzfS45ze6a3utPlXilzsKE=
Subject key identifier:   58:23:D7:A9:67:77:EF:82:2D:D8:D2:0C:20:15:02:96:EE:EE:82:EC
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       19565048
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/WCPXqWd374It2NIMIBUClu7uguw.roa
Signing time:             Fri 06 May 2022 07:20:53 +0000
ROA not before:           Fri 06 May 2022 07:20:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62430
IP address blocks:        2a06:a005:840::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 425087048 (0x19565048)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May  6 07:20:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5823d7a96777ef822dd8d20c20150296eeee82ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4b:65:16:8a:95:74:20:78:a6:18:d4:d0:9e:
                    5f:b8:00:94:dc:c4:76:d1:02:10:02:ac:ed:be:90:
                    22:c3:94:de:88:56:2a:3a:72:36:0e:e5:9d:e4:94:
                    bc:e3:65:04:9d:ff:8c:e1:cd:ee:ae:4e:87:b6:34:
                    4e:12:7d:73:4a:c2:e1:eb:9b:98:e5:a4:0d:a2:d9:
                    aa:fd:df:af:e5:ed:1a:3c:f9:90:8d:3c:1d:86:7e:
                    ce:64:43:c4:70:82:ab:bc:92:0c:c7:1f:0b:14:84:
                    52:09:93:3b:a9:6f:bb:8b:df:6a:ea:a4:de:09:ab:
                    58:48:b6:5a:4c:57:2d:d0:fa:4c:c7:98:74:e4:d0:
                    b4:ca:db:7a:93:a0:31:a8:53:c0:63:36:2b:ef:90:
                    c1:63:3b:6c:9f:1a:c8:b8:5b:e4:3c:3b:ca:36:6b:
                    09:d6:e7:c9:cc:97:08:76:d8:36:3c:59:db:3f:20:
                    f7:db:c2:0a:18:e5:ee:8d:7d:68:fb:a7:15:d3:8f:
                    7e:8c:91:e4:7a:47:c0:9c:cb:5c:70:ce:76:97:27:
                    1d:57:40:bc:c0:ae:ca:ac:f1:cd:0e:91:fd:79:90:
                    59:7b:f9:01:52:a0:8c:19:ef:db:6f:cd:b0:6f:d1:
                    cf:f7:18:11:28:e3:fa:bb:45:59:6e:f7:51:c0:46:
                    f0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:23:D7:A9:67:77:EF:82:2D:D8:D2:0C:20:15:02:96:EE:EE:82:EC
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/WCPXqWd374It2NIMIBUClu7uguw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:840::/44

    Signature Algorithm: sha256WithRSAEncryption
         46:a8:c1:f2:9d:07:50:81:d9:0b:4e:55:0e:f9:16:b1:2f:a7:
         0a:ea:f3:bb:46:c5:a2:4f:8a:a6:11:33:2f:39:8d:24:02:52:
         7b:16:35:27:25:f0:df:e8:d5:06:22:71:fb:07:ff:16:98:7a:
         28:f1:f8:b0:b8:68:48:4e:a3:5c:bb:4c:84:13:5f:63:97:a7:
         fa:6a:bf:da:b9:3a:e7:b4:ba:d3:ca:52:fa:14:b7:2f:3f:53:
         ac:c6:06:f7:3a:58:a5:5e:37:dc:42:fe:29:81:cf:26:19:84:
         4c:bf:63:18:1c:cf:3e:f8:02:ea:85:a4:49:c7:ab:e0:7b:ae:
         7b:d5:f0:5d:14:c0:4a:09:91:d2:2a:9f:15:62:67:3b:0a:3c:
         d7:e8:5c:47:f5:ac:97:a4:8c:e4:d6:ae:7f:c3:50:15:bd:97:
         50:1b:39:c1:34:1d:c8:54:91:bc:19:ef:04:3e:1a:fd:25:ef:
         1f:45:cc:f9:89:03:57:e7:21:39:20:5f:dc:c6:2b:97:ad:63:
         98:62:ea:87:04:ba:24:73:b9:12:b9:2e:dc:ee:e5:55:98:55:
         57:d5:c8:df:02:94:77:e4:c3:5e:d0:84:6c:3c:65:45:54:fb:
         00:4d:b9:65:a1:6d:0d:12:9c:21:26:89:b1:b9:65:53:12:35:
         b5:28:f5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----