Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_P2c1CeF8jNC_ZfRZfYD36ldZug.roa
File:                     _P2c1CeF8jNC_ZfRZfYD36ldZug.roa (raw, json)
Hash identifier:          mZpHF0tYMMXsvlaCbFuvuwvY+mdrGZMDV3/2lCrgfPI=
Subject key identifier:   FC:FD:9C:D4:27:85:F2:33:42:FD:97:D1:65:F6:03:DF:A9:5D:66:E8
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01841F706DA24883497CD5F38C3BEBDBD251
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_P2c1CeF8jNC_ZfRZfYD36ldZug.roa
Signing time:             Fri 28 Oct 2022 16:32:52 +0000
ROA not before:           Fri 28 Oct 2022 16:32:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201763
IP address blocks:        2a06:a005:150a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:1f:70:6d:a2:48:83:49:7c:d5:f3:8c:3b:eb:db:d2:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 28 16:32:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fcfd9cd42785f23342fd97d165f603dfa95d66e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:13:c8:e5:bd:c8:b1:51:51:37:e9:a9:cf:85:
                    45:5e:57:5c:e3:d0:25:63:20:7f:59:bb:d9:2d:1d:
                    b0:7b:18:33:42:6c:ed:73:ca:b8:2c:97:1b:6a:1a:
                    f5:1e:e0:42:e7:5b:27:43:d5:0e:1f:34:7e:a2:6b:
                    8c:77:1c:5f:37:b7:41:dd:35:fa:0f:64:8a:5c:0a:
                    5e:1b:0f:f8:0c:cc:22:db:57:2d:fd:8d:36:45:66:
                    fc:f1:75:f0:46:26:b1:7c:96:94:ce:cf:57:b8:4a:
                    26:21:9a:64:f6:07:e9:39:0c:1d:c9:2d:a3:27:fc:
                    de:36:c9:56:c2:2b:65:1e:c0:fc:59:16:1e:a1:f4:
                    14:8d:2a:80:89:36:02:17:e4:ff:ac:d9:a5:67:6c:
                    c5:ac:80:c1:fc:56:cb:36:42:34:07:08:2b:df:42:
                    6c:f0:b3:ca:eb:06:ba:f3:fd:d4:42:c1:03:62:89:
                    89:61:d7:b1:12:76:43:61:15:63:a1:2f:86:e3:2c:
                    bd:7e:e4:da:a3:76:74:a2:c9:a2:c9:d3:10:1b:b3:
                    87:02:db:44:94:ce:22:c2:b4:5f:54:15:90:01:35:
                    e5:a3:1e:9d:d3:25:67:a6:94:2f:f6:ec:87:50:0a:
                    c2:b6:1f:52:9b:e3:74:34:8c:3f:87:b2:69:8f:2d:
                    9f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FD:9C:D4:27:85:F2:33:42:FD:97:D1:65:F6:03:DF:A9:5D:66:E8
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_P2c1CeF8jNC_ZfRZfYD36ldZug.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:150a::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:70:ba:65:64:9b:72:69:b0:64:e2:96:94:12:84:8c:73:ec:
         0b:15:2b:2e:16:49:02:d4:0d:63:96:6e:93:a7:1c:37:c2:e9:
         67:6f:23:83:b0:df:61:0b:d7:06:5e:b4:59:0a:55:a0:40:6f:
         84:6e:a1:89:a5:80:03:82:ad:24:fc:70:fc:e3:ef:0a:68:bc:
         fd:1d:c3:fc:c0:3a:d1:9d:00:89:69:50:df:08:cc:0e:37:8c:
         36:99:72:7a:f3:d7:51:79:46:5f:b6:1f:5d:94:12:c6:60:87:
         15:d0:33:94:61:af:74:99:be:cd:74:bd:e4:aa:51:21:7b:2e:
         7c:73:e7:52:1e:02:c9:61:cc:78:20:1f:50:35:02:38:2d:d8:
         c8:0d:88:f4:64:d4:4a:f1:3a:d2:16:57:ad:9c:a7:ed:d4:1e:
         cc:10:ee:3b:38:0f:07:1e:75:17:fb:58:77:3f:ad:20:92:dc:
         8b:46:f9:35:ed:35:e0:81:74:89:1d:ef:20:1b:d8:85:cd:55:
         13:c6:ec:92:a7:72:ae:88:be:de:c9:53:62:a2:b5:e8:90:f0:
         b1:a1:36:c2:e9:b9:0a:ed:43:c9:ca:27:59:b2:14:99:eb:24:
         e4:ab:62:d3:92:31:6c:f6:93:4d:37:e3:96:cb:e1:b6:fa:f6:
         eb:45:b7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----