Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/aHQ3o4oC1Hm8hxW4jZYEIsojoXI.roa
File:                     aHQ3o4oC1Hm8hxW4jZYEIsojoXI.roa (raw, json)
Hash identifier:          xdUUxRybz5rKD3/368oqm8AtKh9TWmHHSy/Uy5cX4bc=
Subject key identifier:   68:74:37:A3:8A:02:D4:79:BC:87:15:B8:8D:96:04:22:CA:23:A1:72
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0181FE672E09FEAF864593B19DB05447D135
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/aHQ3o4oC1Hm8hxW4jZYEIsojoXI.roa
Signing time:             Thu 14 Jul 2022 20:29:43 +0000
ROA not before:           Thu 14 Jul 2022 20:29:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203873
IP address blocks:        2a06:a005:1280::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:fe:67:2e:09:fe:af:86:45:93:b1:9d:b0:54:47:d1:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 14 20:29:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=687437a38a02d479bc8715b88d960422ca23a172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1d:d7:99:62:8f:0f:4d:e1:a9:c4:31:87:c2:
                    fb:fc:76:1f:62:c8:ca:ce:d2:0b:6d:a7:b4:85:10:
                    85:89:8b:f2:f0:ab:dd:c9:62:08:5e:31:78:b7:90:
                    7d:24:76:dd:91:84:73:78:28:ab:8a:17:e1:49:50:
                    09:6c:36:34:34:2b:eb:dd:9b:4f:f1:bc:b0:62:b3:
                    7a:22:0e:29:93:81:2a:88:26:00:10:cb:20:58:94:
                    1b:d4:66:b3:d6:83:9f:6b:71:46:f4:4a:02:a5:e9:
                    1a:92:4d:a1:0a:f7:14:b1:7e:2c:9f:ed:36:b8:a1:
                    c1:7f:29:8c:4d:30:ca:02:37:ce:03:cc:11:6c:13:
                    67:80:db:2b:b5:c2:f5:e0:b6:2e:9d:be:ef:7c:94:
                    1e:c5:1e:e4:69:38:ef:63:d1:f6:7b:82:28:2e:0a:
                    df:0e:31:23:18:8f:f0:3f:70:1b:c2:45:b4:77:02:
                    d0:50:0e:2d:03:d0:2f:a8:0f:91:54:d4:09:5a:45:
                    f9:ae:79:14:cb:d8:14:71:67:35:a3:90:b4:a3:e5:
                    dc:91:79:5a:20:9e:58:d7:d2:45:74:4b:5b:54:d7:
                    f4:9b:ff:c3:ba:80:be:15:7a:a4:f8:7c:c1:b1:c0:
                    2a:20:9a:7f:ec:61:ca:5c:7d:00:ad:37:14:47:48:
                    0a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:74:37:A3:8A:02:D4:79:BC:87:15:B8:8D:96:04:22:CA:23:A1:72
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/aHQ3o4oC1Hm8hxW4jZYEIsojoXI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1280::/44

    Signature Algorithm: sha256WithRSAEncryption
         9f:ba:74:f9:71:e9:0e:30:83:b7:84:cf:0c:42:81:37:d0:d9:
         52:a6:2f:44:63:00:34:fd:61:f3:b9:f2:f7:e0:d5:68:98:1b:
         ab:ee:32:45:55:a8:c6:dc:7d:8b:67:5f:a2:11:4a:30:bc:f3:
         f8:7c:6f:92:6d:44:15:e6:89:f8:93:ab:b2:30:58:68:38:19:
         7b:ac:4d:0b:bc:e3:b0:91:1e:3c:95:83:d4:6e:26:dc:c0:62:
         c9:f3:df:fe:b0:79:8a:a6:f8:91:08:e4:7f:34:56:3e:23:dc:
         4d:ed:ba:c2:4d:54:41:c7:a6:c6:44:69:cf:c3:f4:63:61:a5:
         15:d3:a1:21:d8:36:fe:19:2a:15:7e:c0:e7:70:92:3c:e6:6e:
         33:aa:3a:66:60:e6:bf:f2:4b:74:21:ee:e5:28:8f:b1:1d:d6:
         a0:af:01:c1:01:de:77:9a:31:81:41:52:d4:72:52:aa:24:c1:
         25:3c:68:cd:78:38:ed:9a:87:2f:84:68:6e:a0:75:44:7d:a5:
         6d:50:c2:7b:bc:31:3a:61:b6:11:86:11:47:4e:47:63:cf:59:
         65:24:a6:6d:d9:1e:95:8a:a5:13:53:a3:b3:82:2a:1a:90:2b:
         a5:94:85:cc:a4:5d:f8:33:b6:31:18:ec:7c:25:d2:c1:81:d0:
         cd:b6:fc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----