Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/dWQIJeZDPZyfjFEbrCMqN9hSmlM.roa
File:                     dWQIJeZDPZyfjFEbrCMqN9hSmlM.roa (raw, json)
Hash identifier:          taAomni6Y0gdQO8EyW7XcX4Y3MhzWnIn4IOv/xuDu04=
Subject key identifier:   75:64:08:25:E6:43:3D:9C:9F:8C:51:1B:AC:23:2A:37:D8:52:9A:53
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       17BCFF0F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/dWQIJeZDPZyfjFEbrCMqN9hSmlM.roa
Signing time:             Tue 05 Apr 2022 17:02:22 +0000
ROA not before:           Tue 05 Apr 2022 17:02:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203858
IP address blocks:        2a06:a005:350::/44 maxlen: 48
                          2a06:a005:18::/46 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398262031 (0x17bcff0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr  5 17:02:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=75640825e6433d9c9f8c511bac232a37d8529a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:44:99:aa:1f:aa:a3:de:a3:8a:3b:37:b6:03:
                    83:09:54:8a:6b:04:a4:04:3f:85:71:cd:a6:44:3b:
                    97:af:9f:58:40:18:8d:5b:19:ae:5e:6e:18:ca:eb:
                    09:d4:6c:e6:71:65:a0:f2:e4:4f:75:0c:ad:2f:4e:
                    2f:94:07:0c:85:a4:1e:d8:41:f1:d1:8e:a2:76:c6:
                    ea:63:e2:e3:bc:2c:6f:22:0e:5a:40:b2:a4:cd:cb:
                    91:8d:ef:19:37:ec:06:90:06:fd:d9:9e:cb:cb:fb:
                    72:2c:28:95:b0:32:f8:40:16:03:a8:73:5e:2f:01:
                    15:4c:37:ab:c6:a5:66:6c:6a:16:4e:37:f3:2c:3a:
                    6d:8e:aa:9d:f1:11:ae:78:b6:7c:97:d6:87:a4:14:
                    cf:d1:99:a9:f6:5e:aa:ab:ef:61:2d:23:4e:b2:61:
                    96:e8:2f:62:46:5b:af:ed:5c:ba:b9:42:67:e2:33:
                    70:74:11:f2:1f:03:74:92:2a:d1:39:94:1a:ea:5e:
                    18:f1:5b:bb:fa:19:4c:86:fb:c6:7c:3a:38:0c:0f:
                    2d:0c:0e:e0:79:58:43:23:a9:36:d6:4a:fb:8a:66:
                    6d:0e:ff:a6:64:4f:e7:a4:84:d5:bf:af:ba:f8:78:
                    ca:7b:b2:fb:8d:eb:c8:19:ee:d6:7b:5a:6b:b2:70:
                    0a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:64:08:25:E6:43:3D:9C:9F:8C:51:1B:AC:23:2A:37:D8:52:9A:53
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/dWQIJeZDPZyfjFEbrCMqN9hSmlM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:18::/46
                  2a06:a005:350::/44

    Signature Algorithm: sha256WithRSAEncryption
         12:87:43:f0:d5:e2:77:53:a5:fd:5c:7a:2e:46:ba:1d:75:01:
         85:02:36:3f:84:bc:b7:99:a2:b0:f6:91:44:82:1f:20:7e:f8:
         93:41:ab:31:72:e0:4b:f8:5e:b1:59:a0:a4:b8:1e:82:a9:00:
         75:3c:13:44:c9:11:79:67:ea:ba:af:56:62:4c:30:4e:67:f8:
         84:5f:9f:96:21:bf:2f:1b:c9:76:f5:f0:9c:89:3c:9b:10:79:
         80:28:03:29:7e:38:a3:db:ad:db:cc:e7:6f:37:67:11:52:c7:
         23:b8:6c:2b:3d:b4:d2:bf:47:00:76:73:29:ae:f0:56:7c:23:
         46:13:f5:56:fd:e3:11:4a:6d:57:32:78:30:e8:5b:18:92:57:
         60:4d:63:4b:c6:65:f7:f3:5c:d5:93:3d:2c:26:84:91:77:69:
         b5:ab:d5:2b:f0:8f:53:f9:f4:63:79:23:07:59:8d:58:6a:07:
         31:0d:cb:f0:ae:e5:df:68:69:c5:7b:a0:62:b0:47:f5:f0:47:
         cb:89:5b:18:7d:80:99:9e:3c:ef:c1:62:ec:fb:3e:7b:42:22:
         e1:92:9c:51:2f:20:a1:ea:15:85:c8:10:3e:ab:8a:19:67:14:
         fc:29:b2:27:d2:f3:1c:9d:b7:d7:1c:a5:cd:6c:a3:f5:d1:40:
         a5:aa:f7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----