Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/XdzL-k7ZAAtOwzUvp2hd11uvU1c.roa
File:                     XdzL-k7ZAAtOwzUvp2hd11uvU1c.roa (raw, json)
Hash identifier:          HwIglQE/8ti0jh6qEKnlXOu/7ENP84kuDygoZofsbIE=
Subject key identifier:   5D:DC:CB:FA:4E:D9:00:0B:4E:C3:35:2F:A7:68:5D:D7:5B:AF:53:57
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018211D77B58314F069F6D2665BDDA2A093D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/XdzL-k7ZAAtOwzUvp2hd11uvU1c.roa
Signing time:             Mon 18 Jul 2022 15:05:10 +0000
ROA not before:           Mon 18 Jul 2022 15:05:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211604
IP address blocks:        2a06:a005:5e1::/48 maxlen: 48
                          2a06:a005:857::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:11:d7:7b:58:31:4f:06:9f:6d:26:65:bd:da:2a:09:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 18 15:05:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5ddccbfa4ed9000b4ec3352fa7685dd75baf5357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1a:75:a6:fa:60:2d:a5:4d:08:ac:3c:7e:3a:
                    ce:db:f5:7a:37:44:4e:2a:c8:36:92:56:15:e2:3a:
                    99:08:16:4f:cd:7a:d5:66:0c:d3:43:65:9e:4b:03:
                    2e:e6:68:6f:b0:c1:5a:c7:f4:e5:0d:11:33:0f:a9:
                    ad:2b:0d:00:ba:30:69:2e:4b:8c:1d:fb:d1:69:cb:
                    99:5c:b6:ab:45:2f:3a:ce:6f:bd:0f:d9:68:e5:13:
                    8f:34:c9:6f:1f:7b:80:e8:f3:98:ad:df:31:5f:f0:
                    68:df:03:62:20:55:85:5b:b2:4c:64:28:c1:c5:cc:
                    72:b2:cc:d4:f2:0d:46:7b:ec:4c:af:c7:63:35:f9:
                    92:08:63:4c:c0:a7:ae:9f:c8:7b:49:45:25:d1:51:
                    79:50:61:49:88:e4:de:80:bc:15:a2:a4:9b:cd:6e:
                    33:26:74:1e:a1:4f:a5:f3:9a:a7:f6:1b:66:9b:b6:
                    ea:8e:1b:7b:4e:69:7a:cf:ae:47:08:17:5d:3e:96:
                    d2:6d:9b:fa:7e:c7:d1:a0:ee:d5:c8:cd:14:c5:41:
                    03:f2:b7:ea:52:20:37:da:90:3e:78:fd:45:51:49:
                    86:94:ef:74:67:72:b0:bc:68:c9:7f:81:3f:6a:cd:
                    46:24:b1:af:02:6f:66:e5:ff:e9:2f:f3:64:46:3a:
                    1e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:DC:CB:FA:4E:D9:00:0B:4E:C3:35:2F:A7:68:5D:D7:5B:AF:53:57
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/XdzL-k7ZAAtOwzUvp2hd11uvU1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5e1::/48
                  2a06:a005:857::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:66:ca:9c:41:fd:c3:79:7b:f5:7d:66:4e:47:88:51:da:0b:
         15:a0:64:6b:2a:ed:69:73:db:23:99:e7:ab:95:bc:31:63:75:
         a5:c7:04:a9:78:22:bb:f7:a4:e6:5e:96:e4:f3:29:44:15:a5:
         73:d6:49:c3:93:ab:5a:8e:f6:d7:e0:39:43:68:cc:2a:a1:0a:
         0e:36:5a:2a:f5:fb:f8:5f:12:1a:fd:e9:57:d0:ef:b7:74:16:
         76:f6:75:bd:f5:6c:fc:de:d7:c1:23:37:a8:f6:5e:e5:fb:da:
         21:78:ae:69:d5:1d:47:56:54:38:23:44:5e:9d:ae:63:ed:42:
         2b:2c:0f:73:39:86:c1:80:53:bf:ff:87:49:1d:b9:24:9a:fc:
         ca:05:9a:c6:74:08:ee:7e:98:52:6c:49:92:22:ba:2c:ec:e2:
         8d:b0:42:a6:c5:27:35:db:b9:04:0e:ac:1f:3c:b8:d2:db:0b:
         b1:07:21:cc:c4:6b:3b:2f:64:7a:8b:ce:27:f9:17:a1:03:24:
         04:56:38:3e:7a:34:58:ef:4f:55:99:f4:17:82:89:6a:01:7f:
         a4:c1:f3:cc:83:3e:16:d7:62:06:72:f7:55:51:d4:57:56:39:
         4b:8b:3f:53:c3:d9:e8:8d:60:59:ba:b7:b9:61:81:8e:2e:68:
         9d:bd:13:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----