Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/c2A_GkgIoWPZzP2-j3X1JcSV6hQ.roa
File:                     c2A_GkgIoWPZzP2-j3X1JcSV6hQ.roa (raw, json)
Hash identifier:          193Y4wfKTzjG7ZHG9384vZCEM0BGroFDPXZx/KaYWKI=
Subject key identifier:   73:60:3F:1A:48:08:A1:63:D9:CC:FD:BE:8F:75:F5:25:C4:95:EA:14
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018236DD38861EDE281147353FC53A8F1005
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/c2A_GkgIoWPZzP2-j3X1JcSV6hQ.roa
Signing time:             Mon 25 Jul 2022 19:37:23 +0000
ROA not before:           Mon 25 Jul 2022 19:37:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204466
IP address blocks:        2a06:a005:ed0::/44 maxlen: 48
                          2a06:a005:d40::/44 maxlen: 48
                          2a06:a005:d2b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:36:dd:38:86:1e:de:28:11:47:35:3f:c5:3a:8f:10:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 25 19:37:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=73603f1a4808a163d9ccfdbe8f75f525c495ea14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4b:9f:e0:6f:a5:f3:74:71:d4:be:17:b0:08:
                    99:c2:9d:af:bd:64:cd:75:09:01:08:50:5d:00:91:
                    4c:b5:00:8a:fb:fb:b8:38:cc:60:23:a6:2f:1d:3a:
                    38:c0:8e:1f:10:65:26:86:61:8c:bf:9e:c2:2b:49:
                    c0:02:fc:07:a1:8d:01:d2:31:13:ef:95:ad:2f:48:
                    69:c4:dd:62:33:47:9f:4f:ca:93:77:87:53:e8:5b:
                    76:66:11:fc:8e:b3:fb:f3:d5:d5:9a:08:1e:41:96:
                    16:6b:05:82:36:ff:80:b8:98:fa:4d:9e:14:3a:d1:
                    a9:10:d4:b3:3d:7a:d3:78:0b:63:83:b4:d6:19:7b:
                    60:df:56:6d:78:d8:52:ad:92:85:17:2e:6f:00:0d:
                    af:88:55:35:61:1f:4f:39:74:10:9a:a9:8b:73:3b:
                    e4:42:c7:30:06:d7:35:37:93:9f:40:2e:2c:62:ef:
                    05:9f:cf:57:f3:b8:33:07:a5:4e:b3:67:42:cf:68:
                    ee:1d:3b:17:4c:0e:d4:33:68:5b:94:32:70:74:33:
                    97:04:d2:1c:24:89:6c:57:6a:d2:ba:1f:11:da:79:
                    75:28:fa:7c:20:42:ce:3c:a9:a5:29:51:87:af:83:
                    ca:43:af:a4:9e:5b:8a:90:9f:40:43:4d:78:86:77:
                    8c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:60:3F:1A:48:08:A1:63:D9:CC:FD:BE:8F:75:F5:25:C4:95:EA:14
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/c2A_GkgIoWPZzP2-j3X1JcSV6hQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d2b::/48
                  2a06:a005:d40::/44
                  2a06:a005:ed0::/44

    Signature Algorithm: sha256WithRSAEncryption
         26:2d:ca:a9:4b:66:b1:1a:9c:d6:7c:11:81:82:4d:5a:99:05:
         d8:4f:29:bc:78:ed:f4:fc:44:67:12:23:b4:80:9d:34:1d:12:
         0a:04:43:9a:03:62:de:09:07:10:4b:3e:be:27:8f:b0:c3:82:
         3a:00:c7:e1:a7:98:be:4b:7b:f6:03:13:9d:9e:9d:90:fb:62:
         a2:69:d2:c6:63:fa:05:9b:2d:a2:d7:4a:87:5b:31:e5:73:1d:
         70:d7:07:97:8b:67:e7:c4:28:f9:bb:d5:c6:b7:51:38:4d:55:
         c3:c0:a2:d8:46:2e:21:04:34:1e:c3:cc:60:54:9a:ed:ef:90:
         4e:96:3b:c0:c2:4b:09:ee:ee:be:40:ed:be:e3:e9:44:58:48:
         21:00:db:59:30:10:2b:a7:31:52:d3:07:97:eb:90:91:1e:8c:
         d9:06:16:8f:45:fa:e2:0a:70:2c:fc:62:cc:1f:39:c5:79:25:
         4e:83:b9:99:e1:c1:93:de:d3:34:a1:1d:fd:18:ec:5f:0b:27:
         9d:81:88:27:3f:18:1a:e8:3e:cf:dd:6a:f3:20:1d:28:ea:74:
         d6:e6:d7:66:78:2d:3c:93:84:80:95:26:a2:c2:5d:f6:97:c6:
         4c:4d:9b:56:26:c9:f5:88:bd:7b:57:63:bd:2b:1f:25:aa:d7:
         e3:e8:bb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----