Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Z1TGwIcW3dm_PorZ_hqS4AJ4228.roa
File:                     Z1TGwIcW3dm_PorZ_hqS4AJ4228.roa (raw, json)
Hash identifier:          huR0s+bJELc8E/fyxVElBeuPLo7kJXXDbQh60AOkqus=
Subject key identifier:   67:54:C6:C0:87:16:DD:D9:BF:3E:8A:D9:FE:1A:92:E0:02:78:DB:6F
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1982A6EC
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Z1TGwIcW3dm_PorZ_hqS4AJ4228.roa
Signing time:             Sat 07 May 2022 21:13:17 +0000
ROA not before:           Sat 07 May 2022 21:13:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203857
IP address blocks:        2a06:a005:4d4::/48 maxlen: 48
                          2a06:a005:5ec::/48 maxlen: 48
                          2a06:a005:5e9::/48 maxlen: 48
                          2a06:a005:4d2::/48 maxlen: 48
                          2a06:a005:5ea::/48 maxlen: 48
                          2a06:a005:4d7::/48 maxlen: 48
                          2a06:a005:5e8::/48 maxlen: 48
                          2a06:a005:4d5::/48 maxlen: 48
                          2a06:a005:4d6::/48 maxlen: 48
                          2a06:a005:5e3::/48 maxlen: 48
                          2a06:a005:4d3::/48 maxlen: 48
                          2a06:a005:5eb::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427992812 (0x1982a6ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May  7 21:13:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6754c6c08716ddd9bf3e8ad9fe1a92e00278db6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bb:22:a5:46:5e:2a:cc:92:1b:3a:4d:65:7a:
                    c8:28:60:f7:fe:32:0e:7b:c4:72:ca:75:1d:22:a4:
                    c3:59:5c:f2:fa:b3:26:e2:9a:a4:88:c5:08:cd:af:
                    6c:e4:cf:46:b8:e5:5a:26:89:58:90:12:78:0b:6b:
                    14:8b:d4:e3:95:6d:65:b3:08:af:3e:37:4c:9c:53:
                    eb:4b:a1:7e:6d:3f:a2:ff:e2:49:0d:4d:b8:0c:53:
                    1b:65:0f:32:43:8e:69:60:b7:58:45:c6:df:27:b9:
                    a6:98:ae:2a:ec:4b:d4:e2:b3:9f:82:36:fc:61:11:
                    c6:e9:3d:59:68:81:f6:b0:fa:86:b0:9e:cb:c0:88:
                    fa:62:91:d5:92:a4:8f:23:74:ec:c8:f4:eb:b3:9a:
                    3b:20:54:bc:a2:6b:f8:42:41:a7:28:11:87:a8:dc:
                    38:3a:7b:81:39:73:da:ae:eb:af:37:6d:b5:5b:f7:
                    6e:9c:57:07:a6:67:04:ae:04:3e:84:e5:3c:8b:f1:
                    15:91:68:e1:f7:7d:26:c0:17:41:8f:62:56:1d:d2:
                    09:30:54:d4:71:44:f0:25:b5:89:1e:23:eb:89:aa:
                    20:1c:c1:1f:3f:a8:08:1b:79:44:38:24:a1:47:19:
                    1f:b5:4d:aa:96:a5:10:82:a8:1b:be:01:ae:11:f1:
                    ea:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:54:C6:C0:87:16:DD:D9:BF:3E:8A:D9:FE:1A:92:E0:02:78:DB:6F
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Z1TGwIcW3dm_PorZ_hqS4AJ4228.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:4d2::-2a06:a005:4d7:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:5e3::/48
                  2a06:a005:5e8::-2a06:a005:5ec:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         3c:eb:66:34:25:db:f4:3e:45:4e:7f:f9:61:b7:d8:00:c9:a2:
         31:6b:16:29:62:89:00:d0:f0:bd:ac:64:c9:40:f9:bc:ef:4d:
         b3:58:52:34:99:4b:c3:6d:5a:ef:56:22:4a:ff:4c:2b:10:da:
         3e:ea:61:a8:09:fe:55:81:23:92:16:95:fe:fc:a4:f9:4c:77:
         a7:b1:8f:8c:b0:1c:83:3a:6a:f1:82:93:2b:a1:f2:8c:0d:79:
         ff:27:77:f2:3d:26:5e:f8:42:47:67:66:f1:56:2a:2f:61:c1:
         92:48:98:10:f8:e5:16:70:ec:2f:bf:f8:31:40:6d:c4:1d:4c:
         ce:0d:de:11:9f:9b:1c:67:44:a9:32:8e:bb:d6:1d:3f:94:a7:
         53:a7:d5:95:34:6e:98:bc:19:4c:5d:a8:67:0e:3b:80:c6:a1:
         b7:9e:4a:13:92:05:4d:40:6e:5f:de:c8:8d:39:94:a1:9d:cc:
         97:ae:1b:2b:e3:96:14:a4:fa:18:c2:b9:ec:54:ff:d8:3e:1f:
         a1:85:0a:0a:c2:ba:ef:73:c7:c3:fa:ea:97:11:22:05:9f:43:
         84:64:0e:35:0d:c3:83:6f:7c:d5:aa:2a:2f:d7:34:55:c3:e3:
         91:d4:dc:70:91:43:62:48:ea:08:55:59:c9:4a:0c:28:bb:f0:
         36:2d:28:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----