Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZgoIR0k6WYJYEfEN1xNg-FXm7aQ.roa
File:                     ZgoIR0k6WYJYEfEN1xNg-FXm7aQ.roa (raw, json)
Hash identifier:          M2G7hx8QcJ6htxE80XuBYSiVSo0+tF2Lgd1OBlkoyuI=
Subject key identifier:   66:0A:08:47:49:3A:59:82:58:11:F1:0D:D7:13:60:F8:55:E6:ED:A4
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184B407F8CEB5466CD5CC0F922E2E1FBA51
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZgoIR0k6WYJYEfEN1xNg-FXm7aQ.roa
Signing time:             Sat 26 Nov 2022 13:02:12 +0000
ROA not before:           Sat 26 Nov 2022 13:02:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205794
IP address blocks:        2a0a:6040:ec00::/40 maxlen: 48
                          2a06:a005:c50::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:b4:07:f8:ce:b5:46:6c:d5:cc:0f:92:2e:2e:1f:ba:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 26 13:02:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=660a0847493a59825811f10dd71360f855e6eda4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fe:69:63:80:c2:e8:d8:cc:e8:a9:3f:1a:73:
                    1b:90:6f:fb:e1:7d:c7:03:be:3a:56:6d:d0:76:93:
                    91:b6:4e:b7:a7:c3:67:bd:21:4d:98:7b:71:31:81:
                    5c:7c:b7:12:0c:26:25:ce:27:27:64:f2:a2:22:f9:
                    35:81:42:1a:4a:70:81:2d:3d:76:83:1c:f0:a6:8a:
                    57:d4:1a:63:eb:da:d4:e9:ed:94:c3:a0:e1:5b:09:
                    54:95:63:ee:37:2c:ea:ea:2f:29:79:6e:b0:d2:a4:
                    a6:1c:b9:24:37:58:2f:33:28:a9:8d:c0:d4:2b:95:
                    37:44:56:4b:b4:f5:4e:a2:16:86:1c:ba:1a:69:39:
                    3e:0e:e6:70:7a:ef:42:97:98:c0:53:24:aa:3f:19:
                    44:40:02:11:2d:5a:96:d4:5a:2e:99:16:0d:cf:cf:
                    c0:36:79:eb:f6:b4:42:f1:cb:bf:38:b7:ce:71:3a:
                    27:50:07:70:4f:02:6c:00:0a:58:18:63:30:90:36:
                    7f:2f:0a:bf:60:15:6e:9f:f2:08:b6:65:ba:4c:8e:
                    72:91:fa:b9:72:f6:7f:d4:ae:74:ad:ac:ee:c1:55:
                    44:d7:4d:b2:3e:85:2d:b8:8b:fe:cc:d1:38:32:c2:
                    e1:4f:b1:8c:5d:21:88:c7:54:aa:dc:91:24:fd:5f:
                    41:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0A:08:47:49:3A:59:82:58:11:F1:0D:D7:13:60:F8:55:E6:ED:A4
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZgoIR0k6WYJYEfEN1xNg-FXm7aQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:c50::/44
                  2a0a:6040:ec00::/40

    Signature Algorithm: sha256WithRSAEncryption
         08:bf:36:61:6d:a5:55:07:77:c6:83:0e:d0:ca:7d:16:e8:bc:
         63:d7:b9:be:94:a5:01:c2:d0:50:9f:0f:07:fd:df:ac:4c:ba:
         c5:55:56:dd:26:37:c6:2f:ab:00:c8:05:ae:c7:22:d8:68:31:
         2e:d2:83:a3:af:cc:38:e8:fc:aa:8f:b2:f2:24:41:b1:7b:f1:
         24:67:fe:17:e6:55:a7:4e:74:59:3a:c9:67:3a:44:e3:ef:e0:
         ce:41:19:99:9b:64:85:a2:1a:05:34:50:26:d5:0c:f5:47:3a:
         d9:d3:e3:04:c6:a7:cd:5a:c0:66:ca:8b:03:32:21:9c:88:c1:
         83:52:ea:b6:06:ea:42:43:03:bb:35:6d:ab:9f:0d:51:06:38:
         60:87:28:24:90:cc:1f:ad:5e:ea:69:e6:74:68:c7:45:c3:6e:
         27:cc:4b:9e:6e:ac:12:7c:8e:f0:3c:43:ec:85:d1:29:20:f6:
         a9:e7:34:88:9c:fd:da:12:12:b0:81:9a:d3:a0:6f:69:55:c2:
         1b:c1:46:f0:35:62:90:88:d9:37:b6:a3:9a:5d:b2:9b:5a:ca:
         6a:52:ff:ae:27:52:69:9f:1a:b9:76:e7:a1:c4:eb:08:43:ea:
         99:a4:4b:0f:21:22:2f:d2:a2:ec:d8:cf:31:a5:c6:75:bd:87:
         33:92:fa:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----