Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZTQ4hS_iTekjt-dThNX-HESfGB8.roa
File:                     ZTQ4hS_iTekjt-dThNX-HESfGB8.roa (raw, json)
Hash identifier:          DRq5PPLp5bHnx8mNvWEUHNsKgMrE05wVi7i/z9UhJL4=
Subject key identifier:   65:34:38:85:2F:E2:4D:E9:23:B7:E7:53:84:D5:FE:1C:44:9F:18:1F
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1B1E9E8F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZTQ4hS_iTekjt-dThNX-HESfGB8.roa
Signing time:             Tue 21 Jun 2022 11:17:47 +0000
ROA not before:           Tue 21 Jun 2022 11:17:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204508
IP address blocks:        2a06:a005:d29::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454991503 (0x1b1e9e8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun 21 11:17:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=653438852fe24de923b7e75384d5fe1c449f181f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fc:ea:c2:5a:bb:38:93:41:33:eb:b0:5a:24:
                    f9:b5:5a:7e:7d:18:43:ab:6d:fa:6d:04:20:3a:9c:
                    ff:d7:68:46:c1:1e:64:63:be:73:a8:b6:d4:6c:53:
                    4a:d8:a5:e3:da:63:30:7c:59:eb:76:9c:34:5a:2d:
                    39:26:36:86:02:ab:ec:de:92:1c:23:0e:ef:46:f2:
                    0b:c4:5b:92:22:35:de:bc:44:71:d5:54:bd:54:4c:
                    3c:d1:55:e9:51:b4:58:4e:ac:c2:9e:7e:01:06:7f:
                    3d:79:97:bf:6d:12:d9:c1:33:8d:3b:d2:25:49:42:
                    a9:dc:47:57:0c:54:af:62:73:72:d4:5c:8a:b9:e8:
                    d7:a0:60:9a:0d:00:6e:1e:7a:a0:84:3b:cd:5e:95:
                    79:dd:4f:ef:1c:ab:f5:e1:1f:4c:2a:ad:80:6a:c8:
                    52:e4:33:e2:5d:ce:fa:e5:73:ed:bf:ce:5a:08:5f:
                    a3:66:11:07:33:4b:fa:7f:2d:00:34:39:79:2b:ea:
                    32:80:a8:4f:29:3b:ad:f8:51:9e:5b:c0:60:79:ea:
                    dc:c1:f1:9c:e1:e1:5a:88:49:4d:43:e3:b7:1e:f3:
                    2d:f7:42:39:a4:fc:64:3f:83:77:89:74:04:c1:e4:
                    c7:00:2d:1c:a8:c7:58:67:ed:65:ee:96:7f:a2:3d:
                    ce:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:34:38:85:2F:E2:4D:E9:23:B7:E7:53:84:D5:FE:1C:44:9F:18:1F
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZTQ4hS_iTekjt-dThNX-HESfGB8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d29::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:d9:8b:84:b0:35:67:d4:d3:b2:98:e1:c4:70:08:12:fc:e3:
         87:28:73:7b:2d:ad:42:98:36:9a:3a:d6:ce:f5:95:94:e6:a6:
         cb:36:73:dd:75:58:b5:0e:c3:5a:18:68:21:4a:93:80:22:84:
         1a:db:e8:99:9d:96:e3:58:9e:19:ab:96:1b:df:52:34:07:30:
         5b:9c:59:6b:a4:41:cd:a1:bc:14:09:3e:27:2d:6e:ab:0d:0c:
         7f:34:17:64:a9:de:86:9d:9b:36:a4:a2:0e:60:ee:16:14:27:
         88:74:85:4b:24:0a:3a:91:1d:a8:d3:0a:91:91:10:aa:4a:5e:
         1b:bb:3a:71:b8:0c:2c:88:38:13:a4:b1:d7:3d:f3:96:69:b7:
         7d:cf:9f:d6:cd:87:09:8e:fe:a6:f8:03:e3:ff:a4:f1:c8:60:
         cf:e9:20:c4:82:44:42:44:d9:f0:1f:37:e1:ce:f9:62:88:6c:
         7b:54:4d:b9:24:df:f0:d1:20:eb:f1:0a:19:e6:34:d7:b9:37:
         32:53:cb:45:12:d1:f2:41:30:6d:78:08:10:25:a8:16:64:d1:
         fa:1d:5b:37:cd:86:b6:dc:58:bd:e7:47:75:dc:b5:2f:b1:41:
         9d:0b:9c:9f:30:0f:fb:c9:dd:a8:64:05:1d:c2:8c:87:8e:de:
         63:17:46:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----