Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/cbqeXFUYytl7oK4LroRDzhs-PeY.roa
File:                     cbqeXFUYytl7oK4LroRDzhs-PeY.roa (raw, json)
Hash identifier:          xi2dvZpVtK9fkjI/b4GWhaUrDvDqjvgmuR1M/pEM9MI=
Subject key identifier:   71:BA:9E:5C:55:18:CA:D9:7B:A0:AE:0B:AE:84:43:CE:1B:3E:3D:E6
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018256EB19E4BEE49447D57B7EDC418395DE
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/cbqeXFUYytl7oK4LroRDzhs-PeY.roa
Signing time:             Mon 01 Aug 2022 01:00:24 +0000
ROA not before:           Mon 01 Aug 2022 01:00:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204375
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:56:eb:19:e4:be:e4:94:47:d5:7b:7e:dc:41:83:95:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug  1 01:00:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=71ba9e5c5518cad97ba0ae0bae8443ce1b3e3de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:39:b0:66:3a:5b:8e:a4:37:3b:39:8d:dd:21:
                    4c:74:ab:d0:7c:5f:c4:a8:c0:70:85:53:65:83:4d:
                    e9:ed:a6:ef:5d:da:26:62:9e:19:9a:48:29:df:85:
                    5d:dd:5b:ee:bf:58:3d:17:70:f9:40:85:0f:10:1d:
                    a9:26:a8:7a:4b:8f:75:f3:8b:39:45:58:f3:74:09:
                    9f:5a:43:d7:b5:d9:5f:74:0f:6b:b6:db:9a:6f:f1:
                    33:06:9d:37:7b:35:c5:aa:72:e4:97:60:e5:cf:42:
                    9e:d3:67:72:9d:20:ca:72:56:db:e8:67:ca:c2:9a:
                    9d:22:61:81:d6:c4:47:42:6b:39:1c:ff:9d:cb:03:
                    f1:38:4d:63:3a:e7:43:41:a9:07:cf:80:9d:6b:d1:
                    32:86:bf:0b:2d:c8:01:67:2e:d8:16:e1:0a:d3:31:
                    c9:ab:a4:d0:9f:f0:94:70:57:d8:30:31:3e:84:2a:
                    c3:bd:22:49:ff:72:ac:4e:26:ab:2e:3a:22:b5:6a:
                    be:6e:65:18:96:6c:68:a0:31:91:c0:e8:93:ce:ca:
                    11:e6:09:b7:87:dd:98:d2:a9:5e:89:f5:bd:72:dd:
                    e6:76:94:90:a5:69:43:05:2f:d2:b6:79:88:39:6d:
                    c6:a7:57:75:d5:cb:57:aa:ab:62:03:c7:9a:2d:b7:
                    92:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BA:9E:5C:55:18:CA:D9:7B:A0:AE:0B:AE:84:43:CE:1B:3E:3D:E6
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/cbqeXFUYytl7oK4LroRDzhs-PeY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:78:52:e4:11:d1:62:79:d2:31:39:ad:6f:02:ba:ce:17:cd:
         d2:2a:3e:b7:4b:63:a0:74:0f:ab:95:97:86:eb:dd:65:5f:4f:
         de:9f:c9:0c:a1:0c:a3:8a:ac:e4:99:95:1f:b9:b0:19:3e:cf:
         4d:58:3b:6c:26:55:2b:59:1a:9f:06:82:99:41:70:17:2f:ae:
         33:a1:72:16:fe:b6:3a:ee:5e:5b:22:a3:c2:03:3b:cf:38:de:
         cf:a5:ca:06:43:a4:3e:25:d9:d9:e0:51:f0:56:20:22:f2:49:
         7b:a2:8a:16:f0:d0:dd:9e:1f:08:fa:5d:30:93:ac:34:2f:0a:
         93:40:a0:e6:d6:22:ef:aa:a1:b9:b1:39:e1:53:96:77:1c:aa:
         d0:bb:19:d1:e2:20:4c:a1:b6:1f:3c:40:55:b1:78:cc:ae:34:
         ba:f4:29:37:10:9f:da:91:1f:d4:48:f5:fc:47:83:64:4f:67:
         9d:b9:ed:cd:7f:d6:3a:fb:02:57:8f:7a:4a:a6:ca:50:ef:c1:
         47:39:03:fe:5e:5e:83:a5:18:36:24:b7:6d:42:25:8c:63:08:
         46:58:89:57:cb:92:df:91:bd:59:78:74:9e:1d:11:53:3d:a0:
         d5:fe:1e:4a:85:c2:06:05:29:9f:92:47:cf:90:be:7c:77:b8:
         0e:c9:21:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----