Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/WMorLAy-CfyPIFhQbnIcN-VkWDs.roa
File:                     WMorLAy-CfyPIFhQbnIcN-VkWDs.roa (raw, json)
Hash identifier:          23uUBLurDyarfHWGF0T0RGaE5w23H/FdSVd0oKocMrc=
Subject key identifier:   58:CA:2B:2C:0C:BE:09:FC:8F:20:58:50:6E:72:1C:37:E5:64:58:3B
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183897F10E92B7BE2782231F60DCF1CC1A4
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/WMorLAy-CfyPIFhQbnIcN-VkWDs.roa
Signing time:             Thu 29 Sep 2022 13:45:49 +0000
ROA not before:           Thu 29 Sep 2022 13:45:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202627
IP address blocks:        2a06:a005:1f00::/44 maxlen: 48
                          2a06:a005:1f10::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:89:7f:10:e9:2b:7b:e2:78:22:31:f6:0d:cf:1c:c1:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep 29 13:45:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=58ca2b2c0cbe09fc8f2058506e721c37e564583b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7f:40:f9:52:ea:71:71:3c:7b:f6:e5:57:1f:
                    15:8d:e6:28:75:cf:6c:0f:b5:e6:c2:ff:51:41:63:
                    9c:18:58:67:9a:25:17:f0:70:53:08:28:24:3a:72:
                    64:b6:b7:d9:d6:28:8f:a0:f0:61:fa:69:ee:74:26:
                    89:dd:2c:ab:3f:eb:11:7d:66:15:9e:ee:34:58:71:
                    8e:cf:50:68:38:37:4b:73:eb:cc:30:20:4b:55:93:
                    90:a3:3a:91:2f:18:32:91:45:55:74:4f:51:58:b7:
                    5b:fd:64:22:1d:72:c7:42:40:23:f7:da:09:a1:0b:
                    1f:9e:2f:b7:62:2c:03:97:bc:7c:7f:7c:27:8f:7b:
                    4f:74:43:76:22:a7:de:8b:42:53:a9:e2:77:89:5c:
                    02:f4:7a:3f:54:29:3a:e3:52:53:d2:29:17:17:56:
                    7b:a1:fa:7b:14:41:ad:8c:91:d9:e1:f6:a6:11:6a:
                    5c:62:ce:66:08:66:17:c6:17:62:b7:29:c2:6b:ce:
                    a1:ef:19:b1:f5:5b:f3:a9:7c:38:1c:c9:1a:cd:c8:
                    e5:81:32:0f:07:3f:ed:d8:02:51:27:68:59:5a:ba:
                    c3:bc:6f:86:98:da:f9:a5:6d:eb:49:2a:c7:f3:f7:
                    c3:00:9d:e5:87:29:06:b6:3b:86:a3:54:71:27:e6:
                    6b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CA:2B:2C:0C:BE:09:FC:8F:20:58:50:6E:72:1C:37:E5:64:58:3B
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/WMorLAy-CfyPIFhQbnIcN-VkWDs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1f00::/43

    Signature Algorithm: sha256WithRSAEncryption
         55:8b:a7:1e:d6:ba:97:4a:1d:57:0e:49:93:49:05:2e:ed:15:
         75:7e:33:fe:e7:1a:57:2b:d9:0d:b2:b8:ca:1b:6d:86:3e:94:
         4c:f4:22:f0:67:ed:23:bb:10:13:24:ea:fb:f3:12:31:1a:85:
         de:db:24:6e:0a:58:a6:24:89:64:27:1f:75:81:00:44:67:1e:
         29:76:4b:d0:b2:63:b0:99:bb:78:be:fd:68:18:43:3e:27:05:
         a2:ce:6d:26:fd:84:24:d4:c1:be:c7:82:2e:7d:c3:2a:8e:e7:
         2f:b1:3f:d4:8d:2b:fc:fd:05:70:de:9b:94:2b:86:bf:ae:93:
         81:db:69:5a:17:e8:f5:00:b5:2d:86:df:bd:51:f7:37:85:59:
         24:86:2e:eb:99:ff:cd:96:fc:1a:6e:42:be:9d:1e:66:76:fe:
         88:e4:ba:d5:f0:25:94:fa:76:f4:24:a6:7b:20:6f:07:8d:13:
         d7:66:b9:99:3d:91:d9:7f:ba:80:f1:8c:49:81:f7:8f:e3:a4:
         ec:a8:dd:4b:3c:8d:f7:8c:ac:f3:db:03:29:83:3b:fd:89:8b:
         f4:65:3c:88:6a:16:4e:43:0b:95:ef:de:9f:47:f3:bc:0a:49:
         41:94:97:74:8a:62:7b:67:f7:ba:2b:e8:b7:c8:66:92:96:f6:
         48:f9:b2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----