Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/f4o4qfheDPa-Luyzg5wdyI8l_j4.roa
File:                     f4o4qfheDPa-Luyzg5wdyI8l_j4.roa (raw, json)
Hash identifier:          memYnFDKc3nL/p7ESpnFXAl3ExxWxROn11EnPhk8fB4=
Subject key identifier:   7F:8A:38:A9:F8:5E:0C:F6:BE:2E:EC:B3:83:9C:1D:C8:8F:25:FE:3E
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184EE8D7FD7E2A379181AC279D306E06726
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/f4o4qfheDPa-Luyzg5wdyI8l_j4.roa
Signing time:             Wed 07 Dec 2022 21:46:01 +0000
ROA not before:           Wed 07 Dec 2022 21:46:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     52210
IP address blocks:        2a0a:6040:c500::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:ee:8d:7f:d7:e2:a3:79:18:1a:c2:79:d3:06:e0:67:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  7 21:46:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7f8a38a9f85e0cf6be2eecb3839c1dc88f25fe3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4a:af:8e:6b:b3:25:05:2b:e5:0e:ea:4b:d7:
                    a7:02:49:09:00:4b:86:2f:ca:b3:af:e9:fb:57:08:
                    38:59:dc:48:e1:ab:30:2d:9e:99:ed:77:5f:19:cf:
                    cd:b9:50:62:d8:b6:2d:e0:05:d0:73:60:39:75:f8:
                    e9:18:a9:ac:4f:09:00:73:48:87:00:5d:84:2f:5d:
                    b1:a4:c6:bd:27:91:b7:8d:ad:89:18:47:80:5f:12:
                    fb:ab:1d:91:cb:08:dc:9f:e6:6e:3d:ab:f2:75:71:
                    85:30:2f:63:5a:d9:63:25:46:54:d6:21:06:43:ab:
                    45:23:76:34:c5:7a:67:05:1e:22:69:00:41:84:41:
                    e7:c0:9c:a7:69:77:cd:94:6d:3f:3c:9a:e8:48:bc:
                    9c:ed:87:65:ad:d9:f2:49:26:e9:40:7a:f5:b0:3e:
                    2e:71:4a:cb:03:9e:17:77:86:9b:0f:37:24:a8:ef:
                    fd:2c:99:80:f6:6d:56:b2:d4:04:c6:c7:51:ef:f0:
                    79:62:08:bd:52:19:0d:36:7b:42:2c:d9:9d:03:61:
                    10:7f:79:e0:57:a5:fc:60:88:00:55:ef:3d:1b:65:
                    53:de:10:59:7f:8e:2a:50:68:b1:2e:d0:4f:a4:29:
                    e2:9a:5a:57:86:3c:63:02:aa:46:b6:51:4a:53:a6:
                    95:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8A:38:A9:F8:5E:0C:F6:BE:2E:EC:B3:83:9C:1D:C8:8F:25:FE:3E
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/f4o4qfheDPa-Luyzg5wdyI8l_j4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:c500::/40

    Signature Algorithm: sha256WithRSAEncryption
         6f:28:d6:5b:a1:18:8a:d3:f4:16:e8:ac:6c:28:64:52:48:3f:
         6b:52:7e:9a:7f:b3:66:f5:79:bb:92:b4:13:17:0c:1a:62:68:
         1e:16:a8:b8:85:00:d6:2a:f7:9e:4d:4b:f9:e3:3a:f5:3e:62:
         e1:54:00:b7:b4:a3:c1:dd:6a:d5:81:a6:70:e1:6b:a8:9c:51:
         e1:b5:cc:99:c3:16:6e:3f:e0:d6:c0:dd:38:0a:1c:74:ba:eb:
         12:e2:5f:90:66:77:c9:df:d4:96:b7:b3:66:8d:0a:f6:67:77:
         80:39:6e:a7:05:a4:1a:74:0f:9c:f4:b1:48:78:13:c3:67:a4:
         03:89:cb:78:1c:66:25:b2:83:a9:5d:8e:38:bc:6e:1a:a3:2e:
         ea:f2:9b:26:3b:e8:25:fe:78:58:3f:c0:0d:98:f2:69:ef:2b:
         e0:32:ec:3e:bb:6c:a4:19:c9:fc:84:bd:96:1e:ca:48:b2:d7:
         c9:2f:ad:95:e9:e6:80:bc:de:63:d9:a8:08:10:25:7a:ca:13:
         6d:b1:e4:51:33:14:f1:12:3f:d3:32:cc:b1:2a:d2:64:8c:d7:
         9a:cc:0a:fe:90:04:d3:76:ba:ae:06:11:03:aa:db:b7:16:27:
         df:93:1f:cf:c7:9f:4a:29:9b:fe:01:b7:14:f3:a6:2a:14:a4:
         8c:78:ac:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----