Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_1pdLAYoKCpZcI1DGRR3OOZtlC0.roa
File:                     _1pdLAYoKCpZcI1DGRR3OOZtlC0.roa (raw, json)
Hash identifier:          JTYpHguIvH0AcZCJXrmigMfIPtCCYfYwB/fSP3cg1i0=
Subject key identifier:   FF:5A:5D:2C:06:28:28:2A:59:70:8D:43:19:14:77:38:E6:6D:94:2D
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183580192165DFD713AF1C7FF6AF990EBC2
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_1pdLAYoKCpZcI1DGRR3OOZtlC0.roa
Signing time:             Mon 19 Sep 2022 23:07:21 +0000
ROA not before:           Mon 19 Sep 2022 23:07:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203333
IP address blocks:        2a06:a005:1860::/44 maxlen: 48
                          2a06:a005:1c78::/48 maxlen: 48
                          2a06:a005:d25::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:58:01:92:16:5d:fd:71:3a:f1:c7:ff:6a:f9:90:eb:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep 19 23:07:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ff5a5d2c0628282a59708d4319147738e66d942d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d3:88:59:4e:8d:d5:10:a6:9f:29:92:35:07:
                    73:d3:a8:c8:bc:f8:10:38:12:99:78:4b:0f:c7:e1:
                    b9:13:f8:1a:90:6b:a9:a5:f4:52:89:c3:04:4a:6d:
                    ae:6a:e3:6d:a3:66:25:51:8c:36:f0:40:3b:36:eb:
                    34:69:d6:0b:9e:af:7a:cb:eb:e5:39:b8:68:3a:e0:
                    10:fd:03:8a:bf:1a:29:54:a8:81:b2:15:e8:6d:d4:
                    ec:ad:9a:4b:78:6f:3f:62:0a:9e:19:86:2e:a4:fc:
                    19:50:2f:ae:7d:21:dc:5f:04:f8:e1:90:63:0e:19:
                    7a:c1:85:a1:6d:56:60:bd:82:b9:cd:2e:88:dc:98:
                    21:95:e2:eb:16:9d:ec:b5:59:45:c9:b1:42:97:61:
                    55:f4:b5:26:01:fd:e9:37:9d:8a:04:28:89:c5:7b:
                    93:43:a9:f8:dd:7a:2f:b1:a7:73:27:fa:b0:6b:0c:
                    c9:09:f1:b2:75:32:ec:d5:3e:82:13:57:e7:86:f0:
                    0f:52:3c:9f:b4:32:a9:ef:72:e4:aa:d6:11:0d:42:
                    fa:3a:1d:1d:2b:78:cd:1a:7a:4f:5d:f1:4e:0e:e9:
                    30:b1:93:4d:cc:5d:2c:ab:4a:c3:b9:e8:b7:22:27:
                    f3:38:4b:b0:4c:7e:a5:32:7c:2d:0b:97:96:bc:b8:
                    bf:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5A:5D:2C:06:28:28:2A:59:70:8D:43:19:14:77:38:E6:6D:94:2D
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_1pdLAYoKCpZcI1DGRR3OOZtlC0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d25::/48
                  2a06:a005:1860::/44
                  2a06:a005:1c78::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:8f:0c:86:8b:f6:4f:4d:14:6c:35:21:14:7e:a6:5b:fb:e8:
         d4:fc:68:c3:d5:4c:eb:68:9c:4f:62:66:99:2d:1d:fd:71:74:
         71:f4:da:40:f8:a3:89:cf:40:86:b4:a2:eb:e7:f0:94:06:b3:
         64:9b:33:ab:c7:ba:e6:f8:ef:fb:b5:e8:10:1f:7e:5e:36:69:
         0a:27:da:3d:d2:c1:30:12:5e:d7:2b:fd:d5:b1:37:74:a6:18:
         90:b4:c2:93:17:45:8f:75:04:c5:e9:15:6d:e3:31:1c:27:86:
         51:e4:31:15:2b:84:cb:10:df:b9:4f:bd:d2:75:8e:71:d0:56:
         bd:a6:fc:0a:3c:2d:73:d5:76:2e:11:99:5e:89:25:06:0e:ef:
         53:16:1b:1a:e2:bd:0c:f6:fe:65:e5:ae:1b:2d:2c:26:a0:96:
         d7:30:dc:fa:87:e2:1a:b0:02:dd:19:4f:63:e0:7b:96:c7:eb:
         4e:b6:40:a3:6f:3b:c7:39:a5:e2:2d:41:ba:66:50:1b:73:ec:
         52:31:73:cf:bf:67:30:53:c1:b9:a4:6f:f5:cc:51:6a:4b:83:
         d5:e2:08:ab:9c:61:79:6b:22:c9:7c:f1:e8:37:d2:9e:0f:e6:
         1c:21:61:e9:41:b6:48:c5:26:0e:f5:20:6a:67:84:e2:ab:0f:
         31:c2:45:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----