Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/c9s5JQqnKeLA_9QCwk0Q18z9OXM.roa
File:                     c9s5JQqnKeLA_9QCwk0Q18z9OXM.roa (raw, json)
Hash identifier:          4vu0FOHzHlJNajt+/M0pTFJj4UR+vlIfFv6cUOoHpxA=
Subject key identifier:   73:DB:39:25:0A:A7:29:E2:C0:FF:D4:02:C2:4D:10:D7:CC:FD:39:73
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1A6CCD8C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/c9s5JQqnKeLA_9QCwk0Q18z9OXM.roa
Signing time:             Wed 01 Jun 2022 01:28:07 +0000
ROA not before:           Wed 01 Jun 2022 01:28:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204876
IP address blocks:        2a06:a005:b60::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443338124 (0x1a6ccd8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun  1 01:28:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=73db39250aa729e2c0ffd402c24d10d7ccfd3973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:85:91:19:f4:2e:4d:bf:e9:a6:51:3f:04:f2:
                    39:24:3f:3c:ae:a7:03:25:94:1e:cd:4c:42:b8:91:
                    8e:30:f3:ab:0a:13:fb:98:01:8d:52:71:17:44:14:
                    97:f1:e4:08:04:bb:d4:dc:9c:4f:e1:ae:35:79:08:
                    92:f9:64:04:99:74:6f:35:6b:59:1b:f7:2d:b6:40:
                    8a:5b:f1:4f:bf:e0:74:8d:e5:9c:aa:33:28:33:d4:
                    10:7e:a5:5f:35:96:3a:d2:ec:56:47:6f:4e:44:0a:
                    ad:06:32:b5:1f:93:2a:26:a4:54:63:1d:6b:24:03:
                    9a:81:34:5f:af:09:b7:3e:f6:4e:8e:fe:9d:d3:74:
                    2c:03:c4:78:b7:52:34:66:ff:c0:8e:75:65:fd:de:
                    28:88:e4:24:7c:a3:a9:ad:11:49:e5:db:3c:1c:f0:
                    65:1d:9f:c7:6a:9a:62:22:c3:c7:a9:f0:5b:ec:8c:
                    7d:db:a7:5b:5a:49:00:17:f7:7b:62:9d:63:7c:23:
                    0e:b4:e9:f0:f8:ff:46:af:ca:ae:01:be:c1:e8:3c:
                    03:b4:f8:77:73:2c:f4:53:77:bd:34:39:22:2a:22:
                    a8:e4:50:2b:da:ee:78:62:b5:eb:11:f7:45:2c:7b:
                    56:8f:12:d9:b5:00:7d:f2:7f:53:cb:cf:72:91:a2:
                    41:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DB:39:25:0A:A7:29:E2:C0:FF:D4:02:C2:4D:10:D7:CC:FD:39:73
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/c9s5JQqnKeLA_9QCwk0Q18z9OXM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:b60::/44

    Signature Algorithm: sha256WithRSAEncryption
         75:9f:e4:21:c9:ed:5d:6d:ae:07:b2:6c:d9:70:51:17:2e:73:
         17:24:13:c2:9e:68:df:a8:2c:84:6e:cc:9f:b5:be:c8:0d:6c:
         d4:a8:bd:e2:f9:65:58:6e:4f:ff:b2:b8:88:82:fd:c5:01:70:
         d2:01:c3:c4:bc:f8:81:15:76:4c:3c:0c:ee:34:be:ae:21:2f:
         7e:7a:23:4a:27:c6:77:79:be:87:62:bc:99:c2:d4:24:d5:3f:
         62:e9:a8:07:43:1b:18:4f:ae:6f:9b:3b:62:93:04:d4:b5:4c:
         98:fd:72:7f:6b:3f:f2:1b:68:e8:97:96:43:eb:06:e4:31:de:
         4b:38:a6:16:69:ca:eb:6d:99:2c:4a:2e:ce:84:23:37:76:19:
         bb:86:5e:6a:e2:b0:2b:18:fb:20:8f:b0:3e:cf:83:10:43:41:
         e0:9e:8d:8c:67:13:4c:13:5f:27:79:3e:c1:c8:d9:8a:4b:c4:
         fe:cb:5a:ee:25:30:05:3b:99:2e:ea:02:5f:96:cb:a2:27:87:
         53:90:91:e6:d9:99:b5:ec:6a:5f:ae:23:eb:ea:7f:7d:f0:2c:
         59:57:6a:9c:68:0a:16:0d:dc:d8:c7:3a:c5:fa:e0:36:0e:e1:
         58:36:0d:9f:55:5e:4d:4b:8b:1e:65:7b:13:9f:52:23:a1:b7:
         42:60:b4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----