Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_9GmtHIYBFqE0iW5fxAfxsUhkDI.roa
File:                     _9GmtHIYBFqE0iW5fxAfxsUhkDI.roa (raw, json)
Hash identifier:          QzxizRQ3Sm2zI+vz6pTlut/TOtLO3Hz+DzIXzT0kv08=
Subject key identifier:   FF:D1:A6:B4:72:18:04:5A:84:D2:25:B9:7F:10:1F:C6:C5:21:90:32
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       173C1E6F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_9GmtHIYBFqE0iW5fxAfxsUhkDI.roa
Signing time:             Sun 27 Mar 2022 03:14:16 +0000
ROA not before:           Sun 27 Mar 2022 03:14:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212360
IP address blocks:        2a06:a005:180::/44 maxlen: 48
                          2a06:a005:1e0::/44 maxlen: 48
                          2a06:a005:1f0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389815919 (0x173c1e6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Mar 27 03:14:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ffd1a6b47218045a84d225b97f101fc6c5219032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c9:89:15:3f:74:33:5c:60:76:e1:a8:fb:f3:
                    a8:5f:02:12:f0:a3:51:18:41:8c:1f:60:be:52:dd:
                    c7:c4:64:d5:81:92:59:95:93:7a:a9:64:d1:ca:9e:
                    fd:09:ea:35:d3:f5:ce:20:00:e1:2c:fb:91:dc:4e:
                    7d:3d:b1:40:08:80:bb:08:6e:6e:86:9e:30:84:e8:
                    0a:6a:12:cc:fb:c2:9d:88:1e:f2:ee:5b:a7:73:05:
                    ec:81:8d:b7:9d:68:3c:af:1c:64:f6:2b:6c:b9:30:
                    b7:1b:1e:0c:7a:5e:a2:ec:91:72:27:d3:3b:25:90:
                    36:2c:37:c7:42:a9:d1:35:ff:f9:db:dd:05:78:6a:
                    33:50:3c:c9:1d:b8:54:36:d4:16:fd:1c:90:90:91:
                    21:a7:79:2a:0f:10:31:cf:98:b3:f7:b3:e1:c2:ef:
                    e1:ba:4c:85:c2:18:b6:2a:a5:bd:05:86:82:fe:c5:
                    a7:f3:b6:21:13:67:de:33:56:32:34:16:cc:65:3e:
                    18:e8:a5:e7:ad:8e:a6:4a:30:ff:bc:cf:77:dc:ba:
                    95:95:c7:ac:21:b8:3b:25:30:36:9e:dc:8f:db:1b:
                    ab:15:17:f6:19:f8:70:81:33:6c:05:7a:dd:c5:27:
                    76:a3:5f:59:2c:d2:09:f8:fc:15:35:c1:cd:82:5d:
                    f2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D1:A6:B4:72:18:04:5A:84:D2:25:B9:7F:10:1F:C6:C5:21:90:32
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_9GmtHIYBFqE0iW5fxAfxsUhkDI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:180::/44
                  2a06:a005:1e0::/43

    Signature Algorithm: sha256WithRSAEncryption
         7f:09:61:8b:ce:a6:67:8e:4f:0b:83:35:84:5c:70:c7:b8:6f:
         17:9e:64:c4:bd:a7:c1:d9:bc:ff:40:38:4a:1e:45:aa:b4:58:
         a6:61:da:60:4b:39:67:b7:3c:d1:7e:4f:4a:b0:7c:bc:f4:22:
         97:04:23:4b:9d:f0:c5:b8:f3:2d:86:c1:18:28:61:7a:41:54:
         58:fb:df:a4:27:26:2a:c8:98:4a:d9:81:69:bb:66:7d:cc:c0:
         3c:11:0f:b9:9d:83:93:46:d1:55:b9:64:1a:46:ed:a0:15:0b:
         bc:ab:ae:be:9a:4f:14:a4:e8:48:cd:ba:33:ad:97:13:cf:49:
         97:f9:75:86:26:bb:57:21:d5:50:15:64:d2:ff:3c:e0:79:e2:
         1d:67:48:14:65:c3:c5:43:7a:d3:ef:02:8e:43:44:28:d4:69:
         de:17:45:2c:70:49:45:d6:e0:ad:81:b8:00:cd:43:3b:5b:ce:
         d4:65:5c:70:d6:92:5a:24:5b:c5:29:85:fa:cd:7b:fb:a1:51:
         f6:67:a1:10:c7:75:99:d1:ad:4b:38:89:a1:b6:b5:b9:a7:95:
         86:5b:1b:07:c3:0f:15:27:23:62:d2:13:01:a8:ad:47:7a:2a:
         cb:04:69:43:fd:48:ff:2d:80:04:57:76:e5:2b:87:3b:e2:30:
         43:7b:8e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----