Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/es1vWDvz5SwsS4XuAKjM-DiuT-Q.roa
File:                     es1vWDvz5SwsS4XuAKjM-DiuT-Q.roa (raw, json)
Hash identifier:          a1pQUDLmIRzVqWqgvB5u+br2qlVW5nGvSD2zoC/qhtI=
Subject key identifier:   7A:CD:6F:58:3B:F3:E5:2C:2C:4B:85:EE:00:A8:CC:F8:38:AE:4F:E4
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184C1C6CB977BCD57F75116E8A64518210B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/es1vWDvz5SwsS4XuAKjM-DiuT-Q.roa
Signing time:             Tue 29 Nov 2022 05:05:41 +0000
ROA not before:           Tue 29 Nov 2022 05:05:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205965
IP address blocks:        2a06:a005:2240::/44 maxlen: 48
                          2a06:a005:2410::/44 maxlen: 48
                          2a06:a005:2420::/44 maxlen: 48
                          2a06:a005:23a0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:c1:c6:cb:97:7b:cd:57:f7:51:16:e8:a6:45:18:21:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 29 05:05:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7acd6f583bf3e52c2c4b85ee00a8ccf838ae4fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a9:b0:e7:a9:ed:f9:c8:6f:55:e5:74:d4:dc:
                    93:f1:cc:17:6d:ec:87:28:51:ef:40:16:1a:e2:3c:
                    eb:3f:8b:ee:29:6c:84:f1:5f:32:cb:74:58:36:84:
                    08:7f:89:3e:ac:14:90:17:b9:d8:af:2b:3b:38:83:
                    ae:69:53:24:63:6d:e6:b5:29:90:c2:66:f6:87:7e:
                    eb:33:c9:6c:a9:35:69:22:32:33:0a:dd:c8:89:3e:
                    ac:16:6b:da:80:e6:f3:7c:cd:29:e5:22:2e:90:34:
                    35:1e:f7:f3:15:8b:6b:28:a0:49:bf:28:c2:e6:c3:
                    e3:1f:94:fc:0f:6d:7e:6d:b4:43:ce:8e:9b:2b:1b:
                    1c:8e:d4:eb:ba:ca:1f:dd:db:d9:dd:90:d2:f5:67:
                    47:fd:bf:08:ff:96:9a:0b:5c:d5:39:18:5c:71:c7:
                    85:e1:b5:a0:72:62:4d:97:4a:4e:ee:90:4e:86:eb:
                    31:87:bf:43:a1:32:95:14:a9:4a:85:02:3d:bd:42:
                    50:06:d4:6f:a3:7c:16:18:32:fd:a5:b6:eb:3e:cb:
                    99:f2:b6:6f:e0:22:42:52:a0:74:81:b9:f6:69:8c:
                    48:3f:7d:fb:2d:59:b3:4e:3b:08:49:3f:52:1b:52:
                    11:e5:c6:fc:d6:36:1d:80:72:15:c1:f8:40:a8:26:
                    b6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CD:6F:58:3B:F3:E5:2C:2C:4B:85:EE:00:A8:CC:F8:38:AE:4F:E4
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/es1vWDvz5SwsS4XuAKjM-DiuT-Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2240::/44
                  2a06:a005:23a0::/44
                  2a06:a005:2410::-2a06:a005:242f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         47:5d:e2:0b:78:cd:b8:f5:e7:bd:67:09:45:06:16:95:66:ce:
         d7:77:d0:8e:56:40:22:45:47:4d:e4:86:09:6c:84:17:27:36:
         ed:65:de:4e:0b:44:3b:4e:fa:d6:9e:f0:cf:0b:9e:c2:e9:f5:
         8b:d1:56:ae:2c:cb:3c:4d:19:72:d6:00:de:e6:d0:cf:bd:43:
         83:9a:4a:d8:22:d9:46:00:bd:e7:86:eb:ed:0e:95:35:c2:6e:
         11:7b:1b:d3:68:b7:c5:89:4b:0b:19:0e:0b:ec:0c:55:48:19:
         18:ed:1a:9f:81:41:3f:e5:8e:97:45:df:35:ca:71:d8:e1:b1:
         d5:87:07:73:ec:c4:10:69:a8:45:e0:4b:8c:bb:22:60:b6:22:
         6b:72:f2:e7:90:73:5b:b9:d7:21:3c:58:fc:67:c6:0d:b1:a5:
         ef:b8:c4:2c:7d:c8:c3:8d:a0:37:ea:ae:2d:44:53:32:d7:d9:
         3a:78:54:31:3f:d2:e8:8c:9d:69:0e:f5:87:00:3b:ca:7b:59:
         38:64:e7:bc:91:83:95:cc:8a:11:17:6e:e6:4d:0c:0e:90:e1:
         02:66:35:57:8b:19:88:97:41:d5:8b:fe:48:e5:9f:78:43:b8:
         a8:74:dd:c8:41:15:4a:9c:47:b9:18:59:33:54:04:e6:38:d0:
         3b:56:f0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----