Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZHxhIpNbxXw4uJHu3H-L65c1pPE.roa
File:                     ZHxhIpNbxXw4uJHu3H-L65c1pPE.roa (raw, json)
Hash identifier:          xd7ao5dHVOppV1RLV2G8Ti27BjSCgj64Wp4EV6s0NWY=
Subject key identifier:   64:7C:61:22:93:5B:C5:7C:38:B8:91:EE:DC:7F:8B:EB:97:35:A4:F1
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1AC5CD68
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZHxhIpNbxXw4uJHu3H-L65c1pPE.roa
Signing time:             Sat 11 Jun 2022 20:33:03 +0000
ROA not before:           Sat 11 Jun 2022 20:33:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210445
IP address blocks:        2a06:a005:a04::/48 maxlen: 48
                          2a06:a005:85f::/48 maxlen: 48
                          2a06:a005:a05::/48 maxlen: 48
                          2a06:a005:a06::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 449170792 (0x1ac5cd68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun 11 20:33:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=647c6122935bc57c38b891eedc7f8beb9735a4f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:18:32:25:6a:d9:26:a7:93:11:51:78:bc:68:
                    40:fd:cb:ab:bf:43:57:5c:9a:56:1f:86:96:73:ae:
                    1d:bf:88:bf:1a:84:c2:67:2c:4d:39:a1:59:d5:f5:
                    e6:d4:f5:f9:3a:a7:ed:3a:6c:be:62:06:4c:26:a4:
                    71:d5:ef:78:72:61:58:bb:a5:34:4a:40:70:6b:08:
                    32:72:37:6c:17:06:aa:8b:c4:0d:0c:81:8b:d6:40:
                    45:a9:92:e5:d5:f1:28:0d:db:03:d9:72:bb:52:0e:
                    dc:2f:50:bf:46:78:fc:c5:08:16:c6:c5:c7:8a:63:
                    a0:2e:5f:67:9f:9a:0f:d9:ad:5f:d1:47:bf:7e:4b:
                    22:4b:3e:26:8e:04:8a:40:5d:c2:b5:87:d8:19:3d:
                    12:e7:2c:7d:de:c3:1f:0d:84:b0:31:23:ec:33:f5:
                    bc:13:a5:b4:5f:20:e6:6b:c8:5d:66:72:88:52:1a:
                    48:93:c9:74:c5:9a:ff:5b:15:12:5e:ca:e5:e7:47:
                    89:a0:a7:86:26:0d:2b:05:f8:44:33:35:26:77:4d:
                    45:b0:82:2a:04:5a:cc:f4:9b:fb:d8:3e:64:41:2d:
                    16:14:88:2f:1b:58:0e:62:62:52:89:ad:08:0a:f1:
                    40:41:a8:55:b4:f2:38:05:c6:c3:1e:46:56:9d:fd:
                    b4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7C:61:22:93:5B:C5:7C:38:B8:91:EE:DC:7F:8B:EB:97:35:A4:F1
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZHxhIpNbxXw4uJHu3H-L65c1pPE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:85f::/48
                  2a06:a005:a04::-2a06:a005:a06:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         2d:7b:d1:66:09:a2:45:bf:a4:51:34:ad:c7:99:d3:5b:60:6b:
         d4:b6:37:c6:bc:d7:e1:97:1c:87:de:28:5b:af:3d:4d:75:f4:
         36:f6:b5:9d:05:55:07:e9:5c:75:e4:14:e6:bf:7d:db:73:77:
         97:e7:34:2d:00:9e:58:bd:a4:a4:0d:1a:12:89:54:64:10:c1:
         a4:e7:46:2f:05:82:2e:ab:b0:b3:53:cb:f3:f3:65:02:78:b5:
         2b:e5:ea:ba:e7:85:0d:42:c2:eb:5f:e4:14:0a:5d:5b:c9:53:
         96:88:85:f0:1a:75:b4:fa:b7:b0:6a:03:0b:55:7b:d1:73:87:
         5e:72:59:77:e3:1d:80:23:4f:3f:f3:dc:d0:d2:d0:8c:66:28:
         1b:fa:cf:b7:f8:18:d3:7c:be:ca:9b:d7:ae:0f:9c:fe:a9:32:
         f7:39:1f:52:1f:a3:fa:52:f9:f4:37:d4:a9:38:7a:e2:cd:1d:
         88:c7:09:f6:ec:5b:68:cf:24:a8:bc:35:6a:0b:76:d9:c5:81:
         bd:84:cf:c9:57:82:44:c9:dd:d8:1d:ed:41:bb:69:62:3b:65:
         71:ab:7b:5f:4f:3d:48:73:fb:03:4d:07:2f:93:52:a7:d6:c7:
         95:8d:8c:28:13:b5:40:11:5b:75:d4:75:fa:40:8c:23:8c:ee:
         bb:9a:ae:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----