Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/cTV5L-oqB7Q7PHubRfcimkhZaDY.roa
File:                     cTV5L-oqB7Q7PHubRfcimkhZaDY.roa (raw, json)
Hash identifier:          DJuvTmYzi20OMr7PPb0rEwNCzSPrLye+Y/gwS424tU8=
Subject key identifier:   71:35:79:2F:EA:2A:07:B4:3B:3C:7B:9B:45:F7:22:9A:48:59:68:36
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01840CB288F8DA0962192176EE9DCDE9DEC3
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/cTV5L-oqB7Q7PHubRfcimkhZaDY.roa
Signing time:             Tue 25 Oct 2022 01:12:17 +0000
ROA not before:           Tue 25 Oct 2022 01:12:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203967
IP address blocks:        2a07:54c4:7::/48 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:0c:b2:88:f8:da:09:62:19:21:76:ee:9d:cd:e9:de:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 25 01:12:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7135792fea2a07b43b3c7b9b45f7229a48596836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:89:73:d2:d7:a9:c4:4c:e5:48:9b:b7:68:c9:
                    2a:75:13:b1:07:21:51:0b:99:0e:b8:5a:4f:3d:13:
                    83:dd:d3:7e:60:47:7b:a9:72:85:64:96:e7:b1:d5:
                    a0:17:0c:e7:fa:27:ab:61:15:30:19:8c:97:ff:35:
                    a3:76:43:cb:4b:0b:fe:64:04:23:e8:9d:dc:90:38:
                    24:95:0a:38:49:7a:60:55:35:19:7e:21:55:4a:cf:
                    83:04:df:21:5d:16:81:dd:11:83:92:4b:68:98:2b:
                    1f:1d:c8:a9:84:96:43:09:b3:cc:ba:3e:41:d0:5a:
                    31:b8:18:bb:cf:f3:49:49:f1:c7:f2:6f:75:c7:e5:
                    37:b1:4f:d2:86:d0:c2:9a:d2:62:28:99:cd:6d:fb:
                    80:b7:6d:07:d1:a7:85:41:27:eb:29:b8:38:23:73:
                    3d:5c:50:a8:08:88:95:c0:99:d3:9a:e8:a5:30:2e:
                    5b:c7:c5:32:82:4d:91:91:a6:d1:a6:40:90:d2:78:
                    b3:5c:ce:84:54:07:f3:76:1f:32:91:3b:87:5e:b8:
                    2b:c2:c3:a3:29:0a:8f:03:ae:43:9a:9f:c6:1a:8d:
                    ab:3d:ba:0c:87:84:95:54:80:66:ae:cc:e5:ef:32:
                    3b:90:7f:3b:5d:82:59:98:df:07:4d:37:22:b4:5e:
                    9e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:35:79:2F:EA:2A:07:B4:3B:3C:7B:9B:45:F7:22:9A:48:59:68:36
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/cTV5L-oqB7Q7PHubRfcimkhZaDY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48
                  2a07:54c4:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:8e:a8:da:bd:4b:73:87:67:76:4c:f7:84:68:bd:18:1d:12:
         49:18:e9:8b:2e:45:08:1c:c4:ea:f8:eb:78:42:b6:3d:8a:17:
         97:e0:83:03:c9:02:15:1a:aa:95:b3:38:a5:e5:28:c2:f6:24:
         3f:cb:5f:fb:bd:34:ba:aa:da:6f:91:0c:65:a0:cf:0c:a0:81:
         c5:2a:dd:b3:8b:3e:fa:e0:48:e2:8c:e7:0d:62:77:91:2a:ca:
         f3:c0:b2:d6:a7:e6:29:5a:af:dd:2c:6b:3b:28:70:53:39:20:
         8f:1e:85:f0:18:bd:ce:83:9e:d4:3e:26:e6:62:cc:e9:ee:a4:
         0b:b2:b6:9b:3d:15:ca:c3:75:04:9e:e4:27:aa:15:32:08:b0:
         8a:a7:ba:dd:92:f9:79:88:1e:9b:0a:32:8b:da:69:0e:c8:a8:
         07:e6:ac:29:db:da:ed:61:4f:ed:de:eb:34:37:48:20:02:83:
         3d:12:3c:ad:f6:82:1b:4e:b6:0c:4f:76:00:71:5b:0f:27:5c:
         02:67:24:d5:47:a0:23:21:46:4a:95:fb:15:d8:8b:75:ff:77:
         94:38:b3:d5:1d:24:00:5a:92:55:55:6b:02:0a:66:e0:ba:c7:
         bc:b7:28:08:87:54:10:0a:65:7a:ee:b0:5c:d5:85:ff:1e:44:
         c5:92:83:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----