Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_dqPAQZDpSKPK9waTaMLnuya_pM.roa
File:                     _dqPAQZDpSKPK9waTaMLnuya_pM.roa (raw, json)
Hash identifier:          /RS/lrW1o6NTdDdrgkOCWvi68LgCdV8rgky48pgPyuE=
Subject key identifier:   FD:DA:8F:01:06:43:A5:22:8F:2B:DC:1A:4D:A3:0B:9E:EC:9A:FE:93
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184EE8D825CA67F4A1EECD7F85B8079F9D7
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_dqPAQZDpSKPK9waTaMLnuya_pM.roa
Signing time:             Wed 07 Dec 2022 21:46:02 +0000
ROA not before:           Wed 07 Dec 2022 21:46:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200782
IP address blocks:        2a0a:6040:ce00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:ee:8d:82:5c:a6:7f:4a:1e:ec:d7:f8:5b:80:79:f9:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  7 21:46:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fdda8f010643a5228f2bdc1a4da30b9eec9afe93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:73:da:c2:f6:56:76:79:a4:5f:54:0b:07:c2:
                    ab:f0:2f:3f:07:ee:0f:81:ac:cf:d0:2f:27:96:4a:
                    15:44:dd:09:8f:35:be:ec:58:30:88:8d:52:2f:e1:
                    c4:a0:b1:c6:92:36:35:5b:45:cb:78:f3:42:23:f7:
                    96:c8:c1:15:09:32:96:1b:36:91:35:e1:d4:ff:92:
                    50:92:f7:68:ff:27:d8:43:bd:94:19:0e:8c:0a:ec:
                    b9:34:79:e3:a0:ce:63:a9:d0:b9:f7:84:f4:f4:12:
                    9b:80:3e:7d:f1:6e:7c:1e:13:de:b7:2f:c6:11:3e:
                    66:84:38:37:c5:be:93:d4:75:7c:b9:e7:b5:09:9d:
                    f0:0e:33:0e:15:0a:46:ad:11:d0:7c:00:a2:17:97:
                    0c:cf:68:5d:c8:f5:00:09:d6:8c:29:a3:6e:97:d8:
                    5d:7d:96:ce:a7:f5:b0:ec:e5:36:a8:64:d2:d9:86:
                    81:49:f5:ea:b2:9d:12:c6:50:67:da:2b:05:c8:07:
                    39:b8:b8:f8:97:fc:ac:e5:1f:83:25:d9:0d:90:5c:
                    88:99:95:8a:bb:71:b6:da:99:7a:6e:b6:b2:e4:57:
                    91:4b:82:b7:7b:c9:5e:83:f1:d6:1b:c6:47:01:98:
                    65:b3:b4:04:95:4e:1f:bb:c4:aa:fb:14:72:cc:6a:
                    8e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DA:8F:01:06:43:A5:22:8F:2B:DC:1A:4D:A3:0B:9E:EC:9A:FE:93
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_dqPAQZDpSKPK9waTaMLnuya_pM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ce00::/40

    Signature Algorithm: sha256WithRSAEncryption
         17:98:17:53:91:02:1a:4f:e8:07:3f:3e:5b:57:c2:e5:2f:8f:
         b5:99:bb:ef:1a:c7:81:c5:ad:7b:ad:7d:29:9d:62:a3:d1:2a:
         14:71:07:29:27:1f:19:d3:d3:34:57:06:27:c3:1d:9b:a0:8a:
         8f:eb:d4:4e:5b:a4:0e:37:06:29:89:45:d6:45:9d:e2:81:27:
         73:ce:10:a3:12:8f:e7:c2:c9:8d:2a:59:8f:6b:b1:3d:a6:e4:
         dc:91:48:ab:8e:c5:28:9a:7f:e3:9a:65:79:3d:0e:db:2d:be:
         cb:e0:f4:9c:37:02:7f:86:a0:33:cb:32:23:90:b6:04:05:fb:
         12:7e:79:1b:1f:97:24:8a:a6:48:1a:19:e3:0b:31:08:d7:ed:
         b2:a9:26:64:8a:4d:90:dd:69:19:4f:c1:3b:2d:fa:d7:1c:28:
         0e:fe:09:b6:b7:f5:91:33:bf:78:24:47:df:1f:a0:f7:da:2c:
         65:5c:76:29:a1:da:46:61:c4:d2:70:13:b9:61:8b:ab:69:30:
         e0:d0:cf:ea:93:10:7b:73:20:70:ae:87:cf:e2:7f:77:8c:4f:
         e0:fd:56:74:82:05:2e:9d:46:26:0b:ed:04:da:e6:fd:2c:7f:
         ac:fb:0e:ec:72:e4:e7:81:40:75:01:7c:1a:d2:9f:35:94:0b:
         16:cc:94:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----