Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ffbMv90_A8t7Qay1IsuLZi-IE0A.roa
File:                     ffbMv90_A8t7Qay1IsuLZi-IE0A.roa (raw, json)
Hash identifier:          vkic/2oRmM8oz2p3CgEaBmMvY4HV3YynAgC5KvHzt9I=
Subject key identifier:   7D:F6:CC:BF:DD:3F:03:CB:7B:41:AC:B5:22:CB:8B:66:2F:88:13:40
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01848AC2DB1FD5BE9BB00C7338863DE3C988
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ffbMv90_A8t7Qay1IsuLZi-IE0A.roa
Signing time:             Fri 18 Nov 2022 12:42:16 +0000
ROA not before:           Fri 18 Nov 2022 12:42:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205848
IP address blocks:        2a06:a005:1271::/48 maxlen: 48
                          2a06:a005:cf0::/44 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:8a:c2:db:1f:d5:be:9b:b0:0c:73:38:86:3d:e3:c9:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 18 12:42:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7df6ccbfdd3f03cb7b41acb522cb8b662f881340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:27:5d:b1:87:1c:ad:99:50:b9:10:1f:a5:d9:
                    08:9d:8d:03:ed:60:18:fe:db:b4:35:75:c6:0a:6b:
                    c0:eb:70:cf:7e:6d:d8:a6:4e:9a:d0:34:a5:61:8a:
                    2d:a0:e0:cb:e0:2c:4d:29:82:40:48:9a:77:34:81:
                    86:eb:15:46:c6:cf:81:3f:67:89:f6:11:ec:e3:dc:
                    8c:de:0c:d5:53:b3:48:0e:70:cb:84:f4:67:96:62:
                    da:61:f1:ec:c5:01:a4:b7:b5:fe:60:56:1c:aa:d5:
                    ad:ff:9f:ea:fd:58:d4:6f:13:ee:cc:da:b4:45:9c:
                    0b:25:e3:8b:38:bc:48:9c:91:db:42:18:15:59:32:
                    35:f3:77:75:66:f5:a3:ab:7b:11:d9:1b:f6:53:6f:
                    5e:11:fe:4d:9e:f5:3f:3d:b4:a4:38:0e:ee:8e:ea:
                    54:85:69:3e:95:1f:2e:d6:19:f4:24:7d:9b:96:b5:
                    ad:43:a4:3f:ca:a8:9d:3a:ce:c2:49:4f:43:b1:40:
                    6c:36:24:8b:27:ee:6a:81:42:81:29:7d:43:f7:89:
                    ec:53:cf:dc:60:fc:43:e5:6a:12:f2:d5:74:54:b1:
                    63:87:83:16:79:2d:75:bd:e0:73:3e:2e:4f:01:ef:
                    53:18:97:a6:ba:3b:61:74:25:6f:51:2a:ad:5b:6d:
                    07:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F6:CC:BF:DD:3F:03:CB:7B:41:AC:B5:22:CB:8B:66:2F:88:13:40
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ffbMv90_A8t7Qay1IsuLZi-IE0A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:cf0::/44
                  2a06:a005:1271::/48
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:c3:f3:84:97:e0:1d:18:d6:8a:99:c4:71:61:51:fe:2d:d8:
         9b:e5:72:fa:63:b6:33:ca:99:49:19:1f:cb:90:9b:73:73:59:
         ed:a2:44:67:ce:8a:1c:ec:70:00:a1:29:6c:d7:3b:67:90:f0:
         73:f5:47:12:23:a3:e4:39:f2:ed:c3:4a:d8:df:80:b9:93:6f:
         f6:1f:5d:f8:8a:7b:f7:05:ed:3f:15:4d:cf:3b:af:6b:87:53:
         9a:4e:16:24:42:87:34:15:0e:f5:b8:3a:af:6c:d3:2b:71:93:
         5c:0b:1c:b6:0d:90:96:bc:74:c6:9c:bb:2c:d9:bc:20:7f:4f:
         a1:ac:83:76:dc:92:08:e6:c4:c3:a9:2f:c8:8a:d9:62:28:72:
         8b:21:25:ca:ef:2e:84:03:f6:42:92:3d:41:aa:08:74:cc:0a:
         64:ba:cc:f7:38:42:4d:fb:8a:48:94:df:91:23:96:84:d3:bf:
         eb:47:df:c1:d6:21:71:02:fc:8f:54:9e:22:6d:5c:1a:df:ac:
         bc:06:73:48:c4:e8:06:e5:69:e1:c2:4e:82:4d:01:9e:9a:4e:
         a2:03:28:97:4e:8d:57:b9:50:4c:25:96:de:f7:93:af:41:ee:
         96:02:6f:6a:60:f1:c1:78:fd:46:23:74:a5:ef:bd:3b:6f:28:
         d7:84:39:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----