Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ckOffukDxzOtz-bxsmAr931rKSw.roa
File:                     ckOffukDxzOtz-bxsmAr931rKSw.roa (raw, json)
Hash identifier:          eJISzK4dMc6VvbxuQxTwK/NBSOb99e1p5kfNGEuzG3k=
Subject key identifier:   72:43:9F:7E:E9:03:C7:33:AD:CF:E6:F1:B2:60:2B:F7:7D:6B:29:2C
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184EE5C0FEE8F96DEAE3DFC8C7933BE35DD
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ckOffukDxzOtz-bxsmAr931rKSw.roa
Signing time:             Wed 07 Dec 2022 20:52:01 +0000
ROA not before:           Wed 07 Dec 2022 20:52:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210912
IP address blocks:        2a06:a005:2600::/44 maxlen: 48
                          2a06:a005:2610::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:ee:5c:0f:ee:8f:96:de:ae:3d:fc:8c:79:33:be:35:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  7 20:52:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=72439f7ee903c733adcfe6f1b2602bf77d6b292c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0c:64:73:2f:d2:54:9a:23:a6:e1:87:83:0d:
                    0f:e4:71:dc:91:9a:b9:bd:06:5f:49:de:1d:bf:11:
                    1d:c8:b1:8e:e3:06:94:d3:8f:69:d6:1c:01:fd:84:
                    36:8c:16:54:a5:70:f3:72:ce:fa:0d:6c:ca:89:fb:
                    85:fa:12:f5:c3:12:40:bc:4b:dd:1f:a8:22:f8:87:
                    ae:66:4c:2f:87:21:f1:3e:ed:c4:31:f0:c0:b3:75:
                    89:36:2b:8e:2d:4b:bb:75:43:df:92:09:13:5a:2f:
                    9d:f3:3e:20:23:e6:0a:79:4a:6b:04:a5:2a:d8:91:
                    f9:93:bb:bf:d5:74:9e:2b:2d:4c:15:8d:8e:4f:a4:
                    2d:74:87:64:ec:1a:9b:ee:06:d0:c7:5e:fc:e4:e7:
                    cd:9f:48:c6:a2:14:d5:41:83:60:40:7a:26:b1:a9:
                    8b:63:d8:94:08:57:bd:9e:2f:a6:eb:94:77:9e:58:
                    e4:43:57:e6:59:b3:5b:5f:59:eb:79:d1:b2:a4:da:
                    19:83:c3:93:96:3a:62:54:2a:e9:a7:d1:46:bc:35:
                    98:30:50:ca:15:15:33:f9:d5:89:11:c0:df:3b:87:
                    c8:23:0c:20:d6:e2:91:27:89:99:ca:12:98:fd:fd:
                    40:5b:49:11:7e:86:98:26:88:f9:e2:43:c5:e6:2b:
                    b8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:43:9F:7E:E9:03:C7:33:AD:CF:E6:F1:B2:60:2B:F7:7D:6B:29:2C
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ckOffukDxzOtz-bxsmAr931rKSw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2600::/43

    Signature Algorithm: sha256WithRSAEncryption
         5b:91:b1:69:61:ce:a1:30:20:b7:64:cd:08:e1:13:ea:08:e6:
         9a:43:e9:a7:87:d5:10:c6:9f:08:59:d2:43:31:32:5d:3e:df:
         02:9c:b5:ff:69:57:09:52:ea:9a:60:65:23:fd:49:9c:63:e7:
         9b:45:bc:62:0f:26:be:04:5e:0b:d2:03:72:bb:cd:64:80:2b:
         1b:fa:72:2f:f6:5d:fa:62:f7:10:a6:7f:80:97:79:4b:e5:9a:
         95:24:c2:52:d8:59:37:71:5a:1f:2a:29:28:e4:a7:24:3f:38:
         e5:11:b7:fc:4a:ca:8e:c6:e8:d6:f3:af:89:bd:6e:d0:1a:32:
         86:60:d1:a5:57:ec:f3:e2:e2:49:09:59:91:a1:39:ff:b7:71:
         7b:ab:7c:c5:01:63:18:d8:10:1c:a5:33:cb:71:ee:72:6f:4d:
         5f:87:16:3e:7b:c9:10:1c:b6:eb:56:64:17:95:cd:dd:92:5c:
         83:36:c4:ba:70:e7:a6:4b:b1:52:37:20:ea:53:52:e2:97:fd:
         5f:7a:bc:60:18:ad:a0:d5:06:37:04:3e:a9:80:58:3a:2d:c1:
         f5:e8:71:bc:cc:9a:0e:60:60:81:3e:44:8c:b6:c1:08:27:86:
         17:e6:f6:d6:13:b4:01:94:1b:49:e7:2a:b8:b7:3b:de:15:2a:
         c1:61:3b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----