Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/aI52kd-R9kkoPl9bG4hcRudwBMc.roa
File:                     aI52kd-R9kkoPl9bG4hcRudwBMc.roa (raw, json)
Hash identifier:          htJqfRndB/+KWitEeUanc7Jl5srR9G8t+2O72Zv8Izg=
Subject key identifier:   68:8E:76:91:DF:91:F6:49:28:3E:5F:5B:1B:88:5C:46:E7:70:04:C7
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       183A5CFB
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/aI52kd-R9kkoPl9bG4hcRudwBMc.roa
Signing time:             Sun 17 Apr 2022 11:43:51 +0000
ROA not before:           Sun 17 Apr 2022 11:43:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206023
IP address blocks:        2a06:a005:437::/48 maxlen: 48
                          2a06:a005:4d8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406478075 (0x183a5cfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 17 11:43:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=688e7691df91f649283e5f5b1b885c46e77004c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:22:65:39:c0:82:30:12:14:e3:45:ac:1e:b7:
                    09:84:ae:b6:3e:4d:a9:63:b6:52:9d:b8:d9:fe:43:
                    cc:be:a5:f2:92:5b:89:f4:1c:a9:39:3c:69:e4:7b:
                    49:ec:6a:42:ba:20:79:f3:65:f2:db:ef:83:89:73:
                    ce:79:4a:80:0a:49:b8:77:95:b9:5a:96:2f:29:c5:
                    dd:b2:c0:a4:81:8d:ab:32:ce:65:31:d1:8b:e6:9d:
                    b6:5b:4b:31:25:c1:d8:e9:11:67:4c:d9:08:c0:0c:
                    54:28:45:a4:bd:9c:91:58:d9:69:c5:0e:56:76:f8:
                    ff:fe:58:1a:2d:d2:c8:7a:f8:57:d0:2f:cd:da:1a:
                    d4:43:89:82:1b:19:16:00:50:f1:ae:91:90:e1:51:
                    06:d9:e1:80:49:64:b9:ab:b1:66:d4:e3:67:62:8c:
                    d8:71:23:e4:5f:02:39:68:b1:73:60:76:29:7f:6d:
                    02:7d:ec:86:4a:bf:fd:d3:d3:25:9a:95:a1:21:92:
                    6c:11:23:b9:39:a7:9e:a1:f7:91:19:6d:40:5c:bc:
                    f3:97:35:36:20:25:ca:78:0d:d0:3b:0e:89:76:31:
                    6d:ca:92:bb:97:25:78:ba:5d:23:46:53:12:1a:a8:
                    38:a4:9b:56:03:3b:37:60:3d:54:30:e0:e5:4f:b8:
                    4c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:8E:76:91:DF:91:F6:49:28:3E:5F:5B:1B:88:5C:46:E7:70:04:C7
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/aI52kd-R9kkoPl9bG4hcRudwBMc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:437::/48
                  2a06:a005:4d8::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:a4:b0:d3:26:f1:f4:e7:76:4e:13:a4:55:cf:a3:6e:67:7a:
         72:79:fb:5c:bc:71:12:fe:22:e2:ea:bb:13:e2:1d:af:ce:24:
         5f:9d:8f:70:44:e2:79:a0:69:50:62:10:79:aa:ef:a6:9d:24:
         71:62:54:04:1e:23:13:1d:a2:8a:9f:da:b2:d8:59:7b:22:b8:
         e0:b7:eb:c8:03:dc:91:d7:46:e1:56:b6:da:8f:d9:0a:f7:13:
         8e:94:b7:05:e0:cc:84:57:eb:1d:b0:93:05:9d:af:e5:1a:80:
         11:4e:88:bd:11:b0:5f:53:b9:ae:4d:cc:77:40:91:34:2a:65:
         6d:ad:d7:0b:de:f9:85:1f:7a:c2:bd:83:0f:5b:76:8b:60:29:
         5f:71:66:62:e3:87:17:60:6d:4f:8e:ac:59:a8:f3:b8:79:dd:
         29:9b:65:ae:8f:d9:08:e0:d1:73:c1:83:ce:97:25:c8:1f:91:
         f3:8e:a7:e5:29:24:66:2f:50:12:ab:f8:54:17:70:15:fe:32:
         64:a0:16:c1:76:2e:dc:c7:02:5c:ec:7a:8b:36:ca:26:b0:ea:
         a7:08:6e:ae:c6:ad:bb:bf:fa:6a:45:c7:d4:85:a2:41:fa:92:
         9d:f8:2c:92:9f:d6:6c:44:e0:e6:37:72:0e:81:f4:b4:81:e4:
         27:fe:40:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----