Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_o0WLq1BTU_yVXbLMtnYybc_34s.roa
File:                     _o0WLq1BTU_yVXbLMtnYybc_34s.roa (raw, json)
Hash identifier:          /4wus+501vmD7hE/Eg3tR+vNcmP2ccDdeLWOykTy1JE=
Subject key identifier:   FE:8D:16:2E:AD:41:4D:4F:F2:55:76:CB:32:D9:D8:C9:B7:3F:DF:8B
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183366A7D984B7F029C7496C746D6E28A11
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_o0WLq1BTU_yVXbLMtnYybc_34s.roa
Signing time:             Tue 13 Sep 2022 10:34:52 +0000
ROA not before:           Tue 13 Sep 2022 10:34:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202996
IP address blocks:        2a06:a005:1c80::/45 maxlen: 48
                          2a06:a005:1c00::/44 maxlen: 48
                          2a06:a005:1680::/44 maxlen: 48
                          2a06:a005:1c70::/44 maxlen: 48
                          2a06:a005:d2b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:36:6a:7d:98:4b:7f:02:9c:74:96:c7:46:d6:e2:8a:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep 13 10:34:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fe8d162ead414d4ff25576cb32d9d8c9b73fdf8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:60:be:db:44:6a:f6:77:c7:c9:98:6b:05:a5:
                    9c:87:fe:c8:d4:e4:a3:67:c1:d1:2d:20:da:3b:34:
                    24:d9:9e:8e:32:ae:b4:05:e4:89:b1:3a:4f:82:cc:
                    c0:be:94:fb:d6:9a:bf:33:5f:bd:95:8b:6c:59:c3:
                    3b:c3:46:5f:0c:04:ed:c5:a0:05:15:d2:7d:17:75:
                    40:3e:a6:32:fe:aa:d3:eb:a1:4b:65:30:3d:52:8c:
                    4e:b9:e1:d2:a0:92:2b:20:1d:39:a7:65:3f:c4:c5:
                    25:a7:34:dc:ec:a7:8d:c9:48:06:bd:5d:62:e6:b4:
                    97:cc:43:28:c0:4e:bc:60:55:10:6a:65:62:3a:ab:
                    c3:7e:4d:49:a6:f4:75:1a:89:bc:73:d9:3f:e0:bc:
                    f5:7c:8c:2f:65:b6:56:fa:1f:5e:59:4c:04:c8:9b:
                    80:49:d9:fb:a0:10:5d:35:96:98:28:f0:7e:36:74:
                    f8:29:51:b3:80:60:6c:52:87:22:9b:40:97:cf:9d:
                    37:43:6c:06:bf:00:21:5b:65:68:5c:62:eb:de:58:
                    98:19:51:37:01:67:b3:26:ec:e8:d7:07:33:6d:cd:
                    1f:30:27:90:61:27:58:1d:9e:62:1a:67:d8:e9:23:
                    ca:1f:d9:50:94:3f:cb:2c:f8:09:8f:6a:d7:7d:23:
                    9e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8D:16:2E:AD:41:4D:4F:F2:55:76:CB:32:D9:D8:C9:B7:3F:DF:8B
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_o0WLq1BTU_yVXbLMtnYybc_34s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d2b::/48
                  2a06:a005:1680::/44
                  2a06:a005:1c00::/44
                  2a06:a005:1c70::-2a06:a005:1c87:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         43:3f:12:ec:e1:59:7a:d5:69:ed:98:61:aa:02:5d:53:58:a6:
         0d:14:53:ad:5a:ef:e8:f1:93:fd:9d:6c:02:8a:bb:b3:2f:1b:
         fe:2e:7d:f9:1c:9b:8e:a0:dc:a2:ab:7c:87:4f:ff:10:7a:e5:
         61:a6:c9:c1:ae:c0:8b:19:71:b9:59:57:5e:26:aa:9b:b8:82:
         4e:b4:79:ab:6c:8b:f1:df:ce:87:71:0d:fe:b2:63:32:01:57:
         0b:27:eb:c4:94:a2:0c:56:5b:0f:17:d9:d6:b6:33:3b:04:f9:
         fe:89:86:65:7d:be:6d:0e:eb:46:79:82:0d:05:03:7a:e8:1a:
         29:09:62:f2:86:a0:10:c0:cd:36:b3:b7:0b:c6:9d:86:25:10:
         9b:5f:f9:2a:c7:6b:58:69:f9:e9:3f:df:16:69:95:e9:ae:da:
         8f:eb:c5:79:1a:96:b8:22:90:51:55:86:fc:6f:29:74:c4:88:
         15:19:8b:11:b0:af:7b:5a:12:e5:49:51:74:63:94:83:b0:9b:
         83:59:0b:99:9e:7e:42:aa:08:f8:76:8d:5f:67:49:84:40:c9:
         be:af:b8:8c:67:f5:a2:67:7e:4d:27:ec:c3:8b:d0:44:22:6f:
         4b:2d:cf:9b:c4:91:61:e4:a7:fe:f5:5b:72:39:bf:25:b4:ea:
         74:38:19:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----