Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZatZCGp9intGedmmJ29F2V0BRFQ.roa
File:                     ZatZCGp9intGedmmJ29F2V0BRFQ.roa (raw, json)
Hash identifier:          jDPQgsVESq2ysBQS0CdiLcL5IZR/kYug/1LZPmJTrRA=
Subject key identifier:   65:AB:59:08:6A:7D:8A:7B:46:79:D9:A6:27:6F:45:D9:5D:01:44:54
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184000671741D99B134E340C15BC7EF0881
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZatZCGp9intGedmmJ29F2V0BRFQ.roa
Signing time:             Sat 22 Oct 2022 14:08:53 +0000
ROA not before:           Sat 22 Oct 2022 14:08:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202726
IP address blocks:        2a06:a005:20d0::/44 maxlen: 48
                          2a06:a005:20e0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:00:06:71:74:1d:99:b1:34:e3:40:c1:5b:c7:ef:08:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 22 14:08:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=65ab59086a7d8a7b4679d9a6276f45d95d014454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:35:fc:83:ba:d1:14:0d:27:01:9f:99:74:28:
                    f9:d7:22:b4:52:43:4f:eb:83:53:d3:bf:57:47:e0:
                    cd:de:93:ec:51:27:33:8e:82:94:1d:9a:45:75:bc:
                    5d:fa:8e:c8:ea:05:6e:91:82:a4:c6:3b:de:24:cf:
                    c6:a5:00:56:83:71:17:a5:1e:f0:f8:65:96:c5:9a:
                    65:8b:bd:10:3d:27:dd:4f:69:83:30:24:15:f0:1a:
                    5d:08:8e:86:8e:76:49:de:e9:16:51:a6:e4:a6:41:
                    09:39:a9:b5:bc:81:60:62:6a:50:d5:98:13:9e:f8:
                    b7:81:e9:42:46:10:66:79:dc:e0:85:65:fc:80:17:
                    42:2e:b5:41:eb:44:f0:68:3a:5f:22:57:89:d0:84:
                    7b:53:51:07:47:09:c4:0a:c0:a1:c1:12:40:0c:41:
                    93:d6:e5:ee:df:89:d0:db:ef:0f:d0:74:fb:61:26:
                    88:99:67:2a:2c:54:4b:36:7b:42:a3:74:4d:61:dd:
                    1d:0b:8f:a9:09:6e:87:a3:7b:5c:cb:2a:54:2f:3e:
                    c0:21:a7:29:88:fe:e2:5d:48:36:4c:2f:2c:34:e9:
                    e6:88:e2:4a:ac:92:47:6a:21:2d:ee:25:0c:8c:06:
                    0d:32:f8:f5:85:bf:02:03:a3:66:8e:97:78:6c:41:
                    9e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:AB:59:08:6A:7D:8A:7B:46:79:D9:A6:27:6F:45:D9:5D:01:44:54
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZatZCGp9intGedmmJ29F2V0BRFQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:20d0::-2a06:a005:20ef:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         69:c4:5f:d1:a8:6b:7f:d2:46:0a:fe:bf:60:7c:c2:bb:10:07:
         94:2f:28:91:cf:66:a6:64:89:2c:1f:82:ac:d8:cd:25:8d:b1:
         72:86:34:27:42:5a:ec:f7:52:18:4f:d3:f6:b9:82:cb:37:71:
         46:57:22:65:bb:46:bd:c2:ac:2d:d1:c0:00:0d:ab:19:da:a6:
         6c:f5:c1:23:94:4f:4b:f0:4e:06:3b:5c:c0:53:b9:1a:0c:76:
         38:3c:91:ed:15:ad:1a:6a:93:49:b4:27:7f:9c:ca:30:8b:5a:
         f2:e5:17:f2:e4:ac:bd:32:c5:75:b4:37:ef:d8:5b:3f:85:d2:
         a1:d1:c5:76:20:e4:a5:69:d4:2a:26:f7:87:c6:43:68:26:16:
         31:d3:7e:fd:38:e9:dd:00:fb:a5:94:47:1b:0a:3b:97:90:56:
         9e:3c:68:bc:fe:6a:18:1e:17:93:0b:a8:8f:87:c5:42:c3:74:
         fd:8a:cb:5a:ee:5d:42:92:4c:94:4e:d5:4f:13:7c:88:c3:f9:
         5c:8f:dc:cb:6f:f4:85:fe:27:8b:0e:1f:83:87:fd:90:57:5b:
         0b:90:bb:4f:1f:72:20:da:3d:79:61:da:57:c7:1d:42:b0:28:
         4f:37:eb:4b:62:b3:d6:d4:83:5d:68:84:df:9c:d5:47:83:d1:
         b6:e7:33:ff
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----