Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_BRhTFYGAPjrQGiOvi6lxoYyDtg.roa
File:                     _BRhTFYGAPjrQGiOvi6lxoYyDtg.roa (raw, json)
Hash identifier:          Iob6NzW3yLA6KcasnaHwzJCPeG+PZMM4N4qnEB5B/x4=
Subject key identifier:   FC:14:61:4C:56:06:00:F8:EB:40:68:8E:BE:2E:A5:C6:86:32:0E:D8
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018274412A78579663ED09CED1E408C190F3
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_BRhTFYGAPjrQGiOvi6lxoYyDtg.roa
Signing time:             Sat 06 Aug 2022 17:43:23 +0000
ROA not before:           Sat 06 Aug 2022 17:43:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212888
IP address blocks:        2a06:a005:1::/48 maxlen: 48
                          2a06:a005:1660::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:74:41:2a:78:57:96:63:ed:09:ce:d1:e4:08:c1:90:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug  6 17:43:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fc14614c560600f8eb40688ebe2ea5c686320ed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b9:78:75:1c:ee:13:e2:8a:db:0e:e2:ec:7f:
                    85:c8:ee:a2:fe:f0:c5:88:26:fb:1b:94:ef:0c:66:
                    5e:4b:54:d0:c4:7d:1e:da:29:65:b9:ea:56:33:10:
                    e3:d7:0f:d6:3c:e8:68:ae:b8:75:fa:06:dd:75:39:
                    cb:02:f0:54:31:80:99:25:83:89:e4:44:34:dc:f5:
                    22:e6:a6:5f:76:76:f9:c8:2e:07:9d:0c:a6:35:3a:
                    a7:8a:6d:19:9b:1b:ad:9b:2f:74:53:a4:ab:9d:3d:
                    4a:5a:d8:d3:2c:6c:8f:a8:09:27:fb:e9:40:03:b8:
                    91:62:a8:dd:d8:6b:c5:a8:cb:ec:25:31:58:2f:c1:
                    57:bc:9d:fd:86:2a:98:d5:5d:66:2a:f1:e5:3d:9d:
                    00:c0:8a:ce:8e:13:e8:5b:d5:0e:ad:c9:e8:49:ec:
                    e4:ea:37:a6:65:3f:52:2f:f0:8e:ea:3d:b4:de:28:
                    f9:1d:48:d1:2c:9f:17:ef:2d:41:42:54:80:e7:f5:
                    ef:37:06:99:03:4b:d5:88:74:80:ce:27:3a:14:e4:
                    1d:91:21:97:c3:ed:e7:ad:88:23:0d:c8:3d:ee:dd:
                    73:95:a4:a1:65:2d:a1:b3:40:94:95:b0:34:55:8f:
                    27:f6:51:f4:40:06:b9:5c:e9:86:8e:4b:0a:30:a0:
                    47:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:14:61:4C:56:06:00:F8:EB:40:68:8E:BE:2E:A5:C6:86:32:0E:D8
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_BRhTFYGAPjrQGiOvi6lxoYyDtg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1::/48
                  2a06:a005:1660::/44

    Signature Algorithm: sha256WithRSAEncryption
         34:af:1b:eb:a4:28:aa:4f:af:8b:64:f6:f4:60:2b:cf:4e:6d:
         82:7b:9c:e2:43:38:03:c8:9c:d6:fa:7a:87:c6:c7:22:58:ec:
         f9:3d:41:1c:5e:ad:0a:a5:ef:f5:b1:97:24:2f:87:13:c1:1d:
         33:8c:20:79:b9:95:48:64:73:c9:97:ee:61:c4:55:08:43:3e:
         0b:73:98:8e:e3:06:0f:ea:8d:f3:98:cb:f9:dc:03:2c:e1:9b:
         21:10:e1:77:db:51:c7:58:b1:8d:d5:9e:e9:bd:ed:cf:ee:06:
         05:a1:fd:f7:61:fa:f9:4a:76:8e:fe:f3:ff:cd:08:51:d1:66:
         8e:20:fe:24:54:da:ac:77:ea:c6:4d:67:07:6f:25:c4:e1:97:
         53:fe:20:5a:2b:5a:8e:f5:df:f8:f5:46:a4:90:85:fc:45:cd:
         93:31:34:02:f1:10:e9:93:6b:21:6c:08:65:4f:aa:d9:ea:68:
         ab:da:7a:03:e7:ac:d8:fc:90:e1:b8:7b:38:05:06:8c:bd:99:
         8a:ad:ef:33:3e:34:4e:28:ac:0c:1e:fc:f3:ff:f2:91:ed:d6:
         96:31:32:e2:3b:c9:b5:83:06:eb:06:f3:03:04:76:a8:3b:59:
         76:85:ba:cf:6a:6d:5a:0a:0e:e2:65:aa:98:6f:03:7f:05:60:
         c9:61:0e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----