Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_4eMWK9mpAlZnrUA_KI0p_O_hWY.roa
File:                     _4eMWK9mpAlZnrUA_KI0p_O_hWY.roa (raw, json)
Hash identifier:          j9t7FqKJpWu4QbGYrM1T6KCYyFXo+HVyRnnVmuUyjcw=
Subject key identifier:   FF:87:8C:58:AF:66:A4:09:59:9E:B5:00:FC:A2:34:A7:F3:BF:85:66
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       189A6A96
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_4eMWK9mpAlZnrUA_KI0p_O_hWY.roa
Signing time:             Fri 22 Apr 2022 14:21:31 +0000
ROA not before:           Fri 22 Apr 2022 14:21:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205531
IP address blocks:        2a06:a005:5b4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412773014 (0x189a6a96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 22 14:21:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ff878c58af66a409599eb500fca234a7f3bf8566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f4:f5:b7:17:b3:45:69:84:bf:2e:ef:de:1e:
                    2a:10:4b:90:93:0f:9e:18:f8:96:b9:9b:cc:ed:ff:
                    95:38:6e:a9:e7:4c:bb:c7:a9:1f:c7:73:43:6a:a1:
                    3a:97:59:20:cc:5f:55:a4:fd:85:a0:dd:19:20:d7:
                    49:6e:f4:da:78:7a:69:9b:a8:e5:c3:7c:b1:16:22:
                    a8:1c:3c:9d:0f:38:49:20:01:00:a8:5b:31:d9:50:
                    28:f5:e6:77:95:61:e0:4f:7b:3c:f4:b9:24:3e:de:
                    8a:c4:1c:dc:77:55:8a:f9:27:8a:c4:dc:37:37:7d:
                    77:56:84:fb:c0:32:87:81:b5:6a:b9:31:bd:91:3a:
                    60:79:bf:88:be:62:bd:7d:00:64:ff:46:55:e8:a1:
                    51:d7:4c:5a:e7:85:85:3d:b9:6a:f6:01:cc:4e:3f:
                    3e:01:8b:5f:83:c9:62:16:08:10:5d:7b:cd:ec:0c:
                    ff:3b:56:b4:a1:b5:92:df:c4:17:14:96:18:cc:8e:
                    11:20:de:b1:c7:c6:8f:46:60:32:3a:72:8e:26:49:
                    37:96:bc:f0:d7:f7:b8:fa:42:54:29:9b:b8:e3:87:
                    ab:0c:63:49:db:49:fb:62:63:8c:4d:52:95:0d:f2:
                    1a:93:6c:c6:2e:f5:25:f5:94:b2:3a:78:88:4b:99:
                    00:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:87:8C:58:AF:66:A4:09:59:9E:B5:00:FC:A2:34:A7:F3:BF:85:66
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_4eMWK9mpAlZnrUA_KI0p_O_hWY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5b4::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:d2:2c:d0:85:a5:fc:86:44:50:46:99:9b:20:f4:af:11:02:
         a7:3d:51:9d:44:f0:0b:54:e4:f6:d1:ea:d0:bf:14:80:5c:d0:
         e8:da:d8:b1:3c:09:92:73:74:d9:93:fc:3e:11:53:81:2c:8e:
         25:63:a7:e6:aa:74:01:df:cb:ac:e4:7e:6d:28:cc:64:07:df:
         60:c4:4e:0c:d9:2f:f3:cd:15:20:fd:92:5f:5e:36:14:56:85:
         20:2f:49:89:90:f2:33:6f:59:68:8c:e8:06:29:78:93:f1:bb:
         08:4a:ea:1e:c5:40:0e:16:ea:0e:f2:04:52:2b:2f:33:a9:60:
         88:ab:53:63:9e:05:45:30:16:af:d2:7f:53:ba:78:0b:d8:c8:
         39:b2:62:63:33:28:a9:91:13:70:24:61:12:a7:9f:ac:26:7b:
         ea:a5:39:c7:ff:3b:04:55:7e:a8:b2:66:ad:c0:dd:50:88:ea:
         3f:ef:65:0b:c0:09:e3:0f:85:59:59:70:7f:e8:29:49:a5:0c:
         90:6b:0e:4e:29:5c:52:21:56:43:38:4d:66:f6:e5:f4:c0:c8:
         5b:b6:0c:15:32:17:dd:73:4f:05:a8:4f:72:1c:15:e9:ed:55:
         2b:e1:53:08:1a:22:ae:25:cb:ea:7a:ab:d3:5a:91:86:0b:8f:
         8a:4c:74:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----