Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_82xg93U5zax3anH6OUcDLmBSB4.roa
File:                     _82xg93U5zax3anH6OUcDLmBSB4.roa (raw, json)
Hash identifier:          MtTsbm9tkC/dcDnS11iLD2RJsINxlICXPjshpZHFEiY=
Subject key identifier:   FF:CD:B1:83:DD:D4:E7:36:B1:DD:A9:C7:E8:E5:1C:0C:B9:81:48:1E
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184172FAF31B17B7A101508B9916E3753FC
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_82xg93U5zax3anH6OUcDLmBSB4.roa
Signing time:             Thu 27 Oct 2022 02:05:11 +0000
ROA not before:           Thu 27 Oct 2022 02:05:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210537
IP address blocks:        2a06:a005:1507::/48 maxlen: 48
                          2a06:a005:20c0::/44 maxlen: 48
                          2a06:a005:d2d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:17:2f:af:31:b1:7b:7a:10:15:08:b9:91:6e:37:53:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 27 02:05:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ffcdb183ddd4e736b1dda9c7e8e51c0cb981481e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:93:51:74:00:61:1a:10:20:d3:e2:fd:91:11:
                    d2:b7:51:6d:18:15:db:a9:1e:51:03:f2:74:47:ee:
                    30:7c:dd:b6:37:64:98:51:e4:b3:62:28:d9:ef:48:
                    91:00:16:70:68:3e:a0:e8:ae:0d:f3:ad:4e:14:18:
                    2a:f5:e1:8c:5a:fd:22:39:79:bc:64:0d:47:bd:0e:
                    76:a8:ea:72:74:2c:a9:f3:7f:23:eb:1d:5f:16:7e:
                    c5:a9:ad:0c:5f:42:5d:39:e7:ba:e5:fc:7d:d6:fa:
                    4b:31:ea:8e:ba:83:c6:18:68:6c:ee:65:e2:96:a3:
                    bd:0e:87:f0:36:5f:6a:5c:a4:df:b4:8d:a9:58:4d:
                    f5:11:8e:a3:49:59:b9:78:38:d6:02:ef:c0:ab:99:
                    bd:a8:01:6b:62:f2:ee:34:ea:de:bd:03:92:60:31:
                    74:95:ef:03:2e:ea:6b:9d:b7:af:d9:d9:67:92:15:
                    70:25:8e:c3:85:62:e0:0b:ff:5d:c8:c6:58:27:07:
                    1b:64:da:38:e6:62:56:3a:26:75:56:eb:f1:53:70:
                    99:8c:b7:d1:6f:d6:08:3c:84:e2:63:d3:62:19:da:
                    53:cf:99:99:ec:2b:15:08:f3:b8:8e:a5:b3:96:ce:
                    82:a3:dd:73:47:0f:0e:da:da:b9:14:82:eb:ec:99:
                    c1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CD:B1:83:DD:D4:E7:36:B1:DD:A9:C7:E8:E5:1C:0C:B9:81:48:1E
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_82xg93U5zax3anH6OUcDLmBSB4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d2d::/48
                  2a06:a005:1507::/48
                  2a06:a005:20c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         2c:4b:b5:84:27:87:c0:b6:c0:a4:e1:4b:55:c3:d5:99:7f:e3:
         53:03:e3:41:36:1e:90:e3:cb:38:a7:d2:d3:46:25:88:76:1d:
         ce:d7:52:ff:ce:30:06:69:e6:b9:f0:ef:40:63:1e:b0:fb:e6:
         2e:33:71:c0:4b:1e:14:1c:10:b1:31:77:51:e0:cd:dd:b8:73:
         80:3b:f9:49:36:95:65:7f:07:15:de:35:8e:8d:5a:8f:41:9e:
         99:a5:08:36:68:bc:31:97:30:e9:bd:d7:77:65:f7:e2:49:2e:
         23:b4:f5:a6:63:dc:53:4a:d8:8d:82:63:43:44:4f:8b:d1:8e:
         2c:fc:86:94:f5:59:9a:e0:1c:d2:ae:72:81:f7:4e:c5:c1:52:
         de:dd:34:6a:67:f5:f4:9e:99:b1:19:5b:85:f9:f7:ce:18:71:
         fe:c6:3a:e1:17:2c:73:0a:76:46:cb:dc:9e:fa:fc:8d:ae:95:
         07:ac:23:95:49:06:11:1f:70:4d:9c:46:87:bd:7f:fd:52:b3:
         34:3f:19:61:25:a8:10:42:52:5a:e0:78:76:81:d7:33:d7:c7:
         18:26:bd:c1:ff:6e:18:c2:a2:59:4a:ce:ae:90:43:0f:64:85:
         15:fb:4f:93:48:a6:ec:82:e7:c9:0f:35:23:c0:87:6e:a7:b4:
         f3:7b:88:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----