Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/g5A6TBbqzI2rs3RWyC8e6VqHJoI.roa
File:                     g5A6TBbqzI2rs3RWyC8e6VqHJoI.roa (raw, json)
Hash identifier:          8BPSZSD9myniiCPoXQI2Crrgb8aRtq3tBZjX+T3ib9s=
Subject key identifier:   83:90:3A:4C:16:EA:CC:8D:AB:B3:74:56:C8:2F:1E:E9:5A:87:26:82
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0181D5F28BB44B0836AFE4EA47E95EFAE493
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/g5A6TBbqzI2rs3RWyC8e6VqHJoI.roa
Signing time:             Wed 06 Jul 2022 23:57:31 +0000
ROA not before:           Wed 06 Jul 2022 23:57:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204089
IP address blocks:        2a06:a005:d40::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:d5:f2:8b:b4:4b:08:36:af:e4:ea:47:e9:5e:fa:e4:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul  6 23:57:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=83903a4c16eacc8dabb37456c82f1ee95a872682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8c:55:c4:bd:ed:ac:f3:b2:c1:d0:d3:5d:4e:
                    f1:d8:0d:c2:9c:6d:12:f2:b3:a5:32:a2:53:2a:f9:
                    c1:c9:82:74:6c:be:a1:f8:75:69:bd:15:00:da:a5:
                    98:5d:6b:23:13:80:e4:7f:44:22:fc:21:b4:7a:22:
                    a4:cb:f7:d5:58:54:e7:7d:d0:eb:2a:37:1a:8c:9b:
                    03:ff:20:57:41:3f:47:85:86:76:04:23:6d:38:92:
                    0b:a3:81:b2:01:d0:7a:3a:86:d1:66:12:b4:f4:2b:
                    f8:b3:48:6e:57:99:55:da:ca:19:32:cd:07:68:18:
                    01:80:5d:65:cc:39:90:94:ae:c9:80:cd:82:3e:d6:
                    5f:88:0b:96:73:91:eb:c3:2b:7a:a4:e7:39:a9:3e:
                    a5:14:ed:8f:f6:a6:51:34:e1:6f:cb:db:8a:31:b5:
                    9d:12:71:a1:92:32:ee:e8:9e:fa:d2:05:b4:52:d7:
                    45:8b:80:11:e3:5c:f7:f5:37:db:30:31:51:13:57:
                    17:83:74:bf:1a:c6:2c:8b:3a:ca:61:4c:37:a6:28:
                    26:4a:34:d1:05:e8:09:24:58:4d:7d:b3:c4:82:a7:
                    8c:69:89:16:a7:c0:e6:32:de:9b:dc:bc:d4:b8:49:
                    46:3e:42:de:09:c3:38:a3:16:af:c5:79:58:a5:d1:
                    9f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:90:3A:4C:16:EA:CC:8D:AB:B3:74:56:C8:2F:1E:E9:5A:87:26:82
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/g5A6TBbqzI2rs3RWyC8e6VqHJoI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d40::/44

    Signature Algorithm: sha256WithRSAEncryption
         53:a0:58:28:70:dc:34:54:d3:43:e7:fc:6e:1b:f7:f4:3f:e5:
         37:bd:6f:a9:c5:b7:70:2b:f4:2d:c4:db:94:19:2c:72:02:69:
         22:ca:5e:7a:47:fb:cd:c0:53:4a:51:e4:10:16:6a:82:47:e6:
         5f:99:9f:e6:f8:b0:78:bb:8f:62:f1:78:c9:96:c5:e0:32:3d:
         45:07:e1:3f:be:e5:1c:7c:15:cd:7b:af:c8:4d:1f:14:72:af:
         3c:4c:b0:05:41:45:e0:b3:68:21:de:b7:a7:b1:8a:1e:dc:20:
         ba:47:2f:d8:8c:9c:da:9f:52:09:bc:ad:33:3e:ff:4b:48:03:
         d7:36:02:d1:bf:d3:39:7d:12:da:69:1b:5e:ae:db:2f:12:2c:
         0e:4c:e7:f4:ee:06:0f:da:ab:32:d2:1c:66:68:4a:e2:8d:f5:
         0b:ee:c9:a8:a0:8c:d1:79:33:3e:2e:cd:e7:eb:e5:03:03:0b:
         aa:0a:04:72:0a:b6:82:fa:63:e0:6c:6b:46:09:cf:a4:2e:69:
         d0:cb:95:56:46:c4:8b:3c:cb:35:a3:01:db:1a:49:3c:fb:06:
         e4:8c:df:2a:1b:6c:b3:dc:05:8d:7f:a8:9b:89:fa:ce:58:2a:
         84:db:cc:26:2d:93:6a:54:de:1f:b3:76:5a:dc:81:10:6d:25:
         84:30:0e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----