Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_n-vS-j1in0u97m6GWlq9iAFitQ.roa
File:                     _n-vS-j1in0u97m6GWlq9iAFitQ.roa (raw, json)
Hash identifier:          BjUxfST15VPAPhAbzHjaaz8v+XNKk1u0sWpD/5+3ZSs=
Subject key identifier:   FE:7F:AF:4B:E8:F5:8A:7D:2E:F7:B9:BA:19:69:6A:F6:20:05:8A:D4
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       181CDEC8
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_n-vS-j1in0u97m6GWlq9iAFitQ.roa
Signing time:             Thu 14 Apr 2022 06:42:01 +0000
ROA not before:           Thu 14 Apr 2022 06:42:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     147020
IP address blocks:        2a06:a005:435::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404545224 (0x181cdec8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 14 06:42:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fe7faf4be8f58a7d2ef7b9ba19696af620058ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d3:3b:20:7d:d4:a3:96:f8:5c:7e:c4:c3:41:
                    5e:ac:ca:de:83:ff:d7:68:0a:2b:69:d3:30:34:f0:
                    e6:0a:2a:15:e1:a7:0d:72:c6:9d:e9:24:8d:6a:85:
                    c5:a6:94:43:8c:2a:ee:44:15:7a:b5:aa:88:16:62:
                    e3:a5:a2:5e:86:c3:20:30:21:cc:dc:4b:06:31:3d:
                    20:70:c3:98:96:98:35:0b:e3:13:20:4f:73:75:02:
                    69:39:03:57:c4:a9:fa:1d:88:00:f7:d3:49:55:ad:
                    0d:f0:02:cb:8f:9e:69:89:d7:95:ad:fd:08:91:c8:
                    56:65:46:3a:a0:70:7e:54:2e:27:cc:28:0e:a1:63:
                    69:f6:c5:4b:02:8e:89:bb:17:47:b7:f8:bc:16:6d:
                    29:13:69:78:2f:0c:f5:63:7e:73:67:ca:76:00:9f:
                    bd:20:a7:eb:4a:db:12:c7:63:58:40:78:2b:4c:1f:
                    09:4d:4d:16:5f:73:c3:89:70:14:48:af:e0:70:9d:
                    dc:0e:7b:e0:92:18:f4:14:6a:68:5b:b9:44:6f:9a:
                    e7:56:6e:94:8f:d3:24:b5:36:81:31:ce:f4:09:b8:
                    45:fd:3a:08:33:0c:a9:6e:e1:fe:0f:c2:5c:fe:50:
                    bf:01:ec:09:20:40:d5:46:c3:7a:19:5e:dc:b5:bb:
                    36:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7F:AF:4B:E8:F5:8A:7D:2E:F7:B9:BA:19:69:6A:F6:20:05:8A:D4
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_n-vS-j1in0u97m6GWlq9iAFitQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:435::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:e0:b4:33:3e:aa:cc:de:a6:17:26:be:c0:60:68:4b:77:24:
         8d:67:66:e8:1d:0d:e9:5f:41:da:d7:bf:e8:de:fa:5e:b5:ad:
         18:87:b0:64:c8:54:c9:20:e5:83:16:bc:cd:e2:74:5c:85:33:
         6e:75:ce:14:cc:bb:c6:b4:82:c9:6a:ca:3c:88:54:d4:07:56:
         8a:b2:0a:da:dd:04:3a:01:b0:1e:01:29:5e:98:5f:c7:74:9d:
         89:a3:0a:52:e3:21:9c:18:36:dd:4c:2d:bf:48:30:81:0e:49:
         dc:9a:10:4e:a0:ec:55:09:ac:92:cb:9a:ce:f6:0d:14:0f:55:
         bd:23:c5:ca:91:dc:d9:00:00:fd:af:78:46:e2:0e:ec:63:63:
         84:8b:fb:bb:62:81:4d:21:0f:d1:13:c5:1f:77:3f:b8:5c:fc:
         b2:8d:96:88:94:6f:7a:69:e2:36:59:e3:20:06:d5:cb:6d:54:
         4a:57:87:19:70:31:61:67:72:7a:b5:c1:4e:59:8b:c9:d5:b6:
         14:7d:42:89:ed:9f:55:d8:52:20:08:4c:e0:e0:fd:c2:8a:b2:
         2e:89:f0:06:16:c2:b3:f4:49:d2:53:6b:21:31:65:57:4d:87:
         a0:4b:88:4b:22:6f:16:30:4d:1a:b9:db:c2:c0:21:c4:92:86:
         39:c8:1f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----