Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Wjp5pUTxzOSAxyZ81vSUolZGGu4.roa
File:                     Wjp5pUTxzOSAxyZ81vSUolZGGu4.roa (raw, json)
Hash identifier:          DCVyAsYDeF2TVMyJpf9ulP9lYf0HipTjHBx10lFhJpk=
Subject key identifier:   5A:3A:79:A5:44:F1:CC:E4:80:C7:26:7C:D6:F4:94:A2:56:46:1A:EE
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0181F7D6AF1F16B957AF4837773D5550D3E9
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Wjp5pUTxzOSAxyZ81vSUolZGGu4.roa
Signing time:             Wed 13 Jul 2022 13:54:10 +0000
ROA not before:           Wed 13 Jul 2022 13:54:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203913
IP address blocks:        2a06:a005:a16::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f7:d6:af:1f:16:b9:57:af:48:37:77:3d:55:50:d3:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 13 13:54:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5a3a79a544f1cce480c7267cd6f494a256461aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3e:d8:73:32:7c:62:d9:0f:25:18:99:14:f6:
                    1d:d1:90:50:7e:18:b8:7d:54:54:17:e1:b2:84:d9:
                    6b:a7:2b:00:05:4f:0a:44:e6:2f:3b:02:48:29:4b:
                    6e:35:15:25:2e:01:a4:9e:12:81:95:13:7e:91:8c:
                    54:2d:9e:13:53:21:93:ea:ea:f7:75:d0:72:cc:29:
                    e9:7d:ae:5f:79:04:de:4a:03:a6:e2:77:5e:38:b3:
                    b7:04:38:30:aa:8f:29:40:85:d6:16:fd:6c:9a:ac:
                    4a:06:3d:1a:4c:c8:27:df:0b:b4:9a:eb:b1:43:93:
                    23:3f:c8:64:ec:97:8c:eb:2d:b5:99:ad:df:71:4c:
                    a5:b3:68:6e:97:8e:fe:d6:10:d6:84:a7:02:c1:1a:
                    06:c4:ae:5c:4c:62:87:32:de:41:35:21:36:0f:ca:
                    9c:5f:54:32:38:2d:7d:8a:0f:d1:04:0e:13:6c:60:
                    4c:aa:b2:49:8d:8c:90:d4:7c:0d:8b:94:20:7b:c5:
                    68:9a:67:32:c9:16:1b:7b:8d:6f:2f:66:ec:6c:9d:
                    61:4f:43:b2:a5:8f:ee:0d:4b:1f:08:79:8b:91:cf:
                    6c:34:0e:30:63:83:4f:b8:2b:aa:2a:f2:93:c0:07:
                    3b:99:74:92:d2:c7:fd:1e:71:52:d9:bd:e7:44:37:
                    b3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:3A:79:A5:44:F1:CC:E4:80:C7:26:7C:D6:F4:94:A2:56:46:1A:EE
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Wjp5pUTxzOSAxyZ81vSUolZGGu4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:a16::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:98:68:9a:5d:e0:b3:a2:93:f7:03:64:e4:6e:d3:40:d5:7a:
         cb:e1:1b:0e:38:dd:04:f1:b0:b1:b3:08:5f:b5:08:bd:37:c4:
         75:c7:22:cf:54:dd:d2:04:bd:89:37:92:5d:38:ca:3b:2b:e7:
         69:6f:cb:53:3f:99:17:bc:15:f6:3f:fc:a8:bc:fc:37:03:44:
         67:c2:76:56:6f:77:f7:bd:6f:b6:c3:ac:d2:51:83:dc:11:cb:
         14:cb:45:07:0b:c5:99:17:dd:55:ae:fb:ff:a8:78:6c:75:b4:
         bf:4b:62:93:d9:c3:03:5d:a5:8a:57:bb:56:df:19:46:65:de:
         1e:d8:27:6b:d8:c8:dc:80:9f:39:bf:e5:7a:1e:a4:dc:09:8f:
         1d:b4:cb:65:47:e0:2c:74:ca:fa:64:73:8f:09:dc:99:a0:25:
         e2:89:66:2e:a3:b9:fb:88:66:95:ab:43:00:cd:73:ad:f8:c6:
         fd:d1:22:84:39:5d:4f:45:eb:83:5e:fd:ad:9f:d6:14:c2:ce:
         2d:23:af:ad:0b:a8:1d:93:5a:15:15:ff:1d:cf:0d:73:fa:ea:
         88:ac:08:38:ee:06:cf:ee:50:06:07:ca:5d:97:b3:85:f5:a7:
         9e:62:7d:fa:89:89:d1:6e:82:82:c6:5e:b0:03:84:e4:b8:9c:
         19:7c:f1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----