Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_ilaUWDeYZpMTpSVHGBFkEXDVg0.roa
File:                     _ilaUWDeYZpMTpSVHGBFkEXDVg0.roa (raw, json)
Hash identifier:          TJIyJ/g+QiIRQV8xQHm4G62vIcvFvh9dLyPlM4e0QKQ=
Subject key identifier:   FE:29:5A:51:60:DE:61:9A:4C:4E:94:95:1C:60:45:90:45:C3:56:0D
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183E6E076F21A95CD4435C679E896FC45F1
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_ilaUWDeYZpMTpSVHGBFkEXDVg0.roa
Signing time:             Mon 17 Oct 2022 16:56:53 +0000
ROA not before:           Mon 17 Oct 2022 16:56:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212294
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48
                          2a06:a005:1c40::/44 maxlen: 48
                          2a06:a005:1f60::/44 maxlen: 48
                          2a06:a005:1800::/44 maxlen: 48
                          2a06:a005:19e0::/44 maxlen: 48
                          2a06:a005:1f80::/44 maxlen: 48
                          2a06:a005:1f40::/44 maxlen: 48
                          2a06:a005:1f70::/44 maxlen: 48
                          2a06:a005:1c30::/44 maxlen: 48
                          2a06:a005:18d0::/44 maxlen: 48
                          2a06:a005:1f50::/44 maxlen: 48
                          2a05:dfc7:8100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:e6:e0:76:f2:1a:95:cd:44:35:c6:79:e8:96:fc:45:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 17 16:56:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fe295a5160de619a4c4e94951c60459045c3560d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9d:49:38:26:07:75:6f:14:1f:55:69:a4:b5:
                    c8:3c:35:31:9a:e0:7c:9b:a1:72:14:49:43:af:20:
                    bf:12:13:79:9d:ce:7f:40:dc:6b:89:76:14:d3:44:
                    4c:a6:26:be:fe:1d:66:8c:c5:57:0a:12:cd:da:c1:
                    5e:fc:bc:71:1d:9e:03:ea:47:56:9d:2a:c6:68:5d:
                    b3:6f:b9:8c:69:91:04:a7:75:3e:92:e1:2b:66:1e:
                    be:3a:c8:7d:e5:35:0e:32:50:35:d7:34:52:dc:8c:
                    79:48:f7:96:1f:87:f0:e4:54:75:91:b4:4c:76:17:
                    34:68:05:ce:8e:ae:fd:8a:14:4b:d2:5c:33:25:cf:
                    d8:41:ea:42:93:6a:b8:77:ef:dd:3f:7f:01:6d:3d:
                    0c:42:41:4f:4c:9a:cb:b6:a8:5d:f0:02:fe:20:08:
                    d4:98:41:b3:16:16:42:a3:09:85:71:de:12:3a:8a:
                    42:92:70:25:bd:b3:a7:3e:f6:a2:a4:9c:f9:99:2a:
                    3e:b9:2d:5d:ee:76:5b:68:22:fb:97:12:50:f6:95:
                    63:ce:5e:a8:ef:98:9f:ea:59:03:d6:55:84:2e:83:
                    a7:52:c6:b1:0a:11:c3:a7:49:e7:38:62:5a:01:36:
                    88:d4:62:49:dd:d9:6d:12:ea:a7:5b:a3:e3:7a:49:
                    3a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:29:5A:51:60:DE:61:9A:4C:4E:94:95:1C:60:45:90:45:C3:56:0D
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_ilaUWDeYZpMTpSVHGBFkEXDVg0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:8100::/40
                  2a06:a005:1800::/44
                  2a06:a005:18d0::/44
                  2a06:a005:19e0::/44
                  2a06:a005:1c30::-2a06:a005:1c4f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:1f40::-2a06:a005:1f8f:ffff:ffff:ffff:ffff:ffff
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:ee:7a:7e:56:5c:ba:7b:93:ec:0b:44:41:c6:66:41:62:04:
         15:08:e2:fe:ba:d1:ba:54:83:25:02:d7:fa:b5:e2:4b:1a:00:
         46:06:6a:ec:5f:ae:d9:54:d8:68:82:b9:8d:b5:f4:ad:a9:95:
         3d:5f:30:21:53:46:d6:c6:6c:14:4b:77:0d:2b:a6:13:8b:f6:
         07:0a:57:6a:36:0f:aa:f3:75:6d:ce:10:ae:5d:5a:0d:64:d2:
         65:76:ce:2f:01:df:f2:fd:b6:9e:46:ac:ef:d2:f9:f4:43:ef:
         a1:45:54:9e:4f:f8:a7:79:04:ec:11:b0:ad:22:af:5e:b5:8a:
         67:a4:04:bc:24:b0:57:c3:a6:d3:fe:94:2d:17:04:0e:96:d2:
         8c:c4:76:ca:09:02:33:36:a0:3f:92:a8:77:9d:0e:ab:b8:28:
         eb:c7:bc:3d:29:4d:c3:58:cf:a1:d3:72:78:5c:69:5d:68:2a:
         4c:ab:c1:64:bb:0a:73:3e:79:79:38:93:61:c4:ab:e5:60:f7:
         38:d8:c8:9c:a8:c0:8b:ca:8f:23:48:ab:75:60:d2:ff:b2:90:
         b5:ea:33:4f:c4:a5:e4:e0:83:3a:74:0d:d5:2e:b8:2d:fd:b0:
         4a:4d:bb:3e:00:dc:e5:e7:88:68:6d:36:49:47:90:e0:d3:23:
         7e:61:7c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----