Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/gK_6XKux4yFhv_t7hCwfhZvkoes.roa
File:                     gK_6XKux4yFhv_t7hCwfhZvkoes.roa (raw, json)
Hash identifier:          qYYTSL2vR0SYIRYYfvql3I/rHi2G3yEmDqBUGyVcp+w=
Subject key identifier:   80:AF:FA:5C:AB:B1:E3:21:61:BF:FB:7B:84:2C:1F:85:9B:E4:A1:EB
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182CA513A114BECF768D0C3B56C0F0A2FFD
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/gK_6XKux4yFhv_t7hCwfhZvkoes.roa
Signing time:             Tue 23 Aug 2022 10:48:16 +0000
ROA not before:           Tue 23 Aug 2022 10:48:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203868
IP address blocks:        2a06:a005:15d0::/44 maxlen: 48
                          2a06:1287:900::/40 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:ca:51:3a:11:4b:ec:f7:68:d0:c3:b5:6c:0f:0a:2f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug 23 10:48:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=80affa5cabb1e32161bffb7b842c1f859be4a1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c4:de:43:ae:b4:0e:12:42:2a:b2:3e:36:26:
                    07:ce:9e:b2:09:be:50:f8:97:70:67:57:9c:44:05:
                    39:2b:bd:62:fc:30:f2:a2:f7:ac:31:cb:a1:46:93:
                    73:b0:f9:b2:83:81:4d:62:d3:f9:bb:a5:6b:20:4b:
                    ca:8d:3f:f6:cc:f3:26:ce:cc:93:5e:63:6e:5b:bf:
                    4f:f6:16:1e:e3:77:c5:52:2c:b9:8d:b4:d8:f7:c0:
                    3c:57:44:8a:78:83:fe:f7:a7:b4:0a:74:6c:7d:51:
                    08:b3:88:6a:14:a6:95:92:e3:6a:29:4f:24:97:0c:
                    a1:c6:75:d2:6f:13:5a:b5:26:19:50:5c:26:94:d9:
                    8b:38:8d:52:d7:45:4c:fa:80:2e:83:55:f4:d3:65:
                    00:b9:2b:38:01:f6:bc:55:ac:23:e3:48:c5:26:0c:
                    9a:fb:71:d6:25:14:9d:cb:ee:66:5e:6f:f0:61:4f:
                    13:e5:0d:8c:ca:cd:f7:1d:9e:20:7c:e0:4d:10:8c:
                    ce:be:bd:02:c2:4f:15:ac:70:35:02:50:42:a6:f6:
                    1c:d7:7e:05:3e:1c:2d:81:b7:6b:97:3a:8d:a6:e9:
                    86:36:42:48:24:47:9a:9e:27:25:da:d0:77:99:aa:
                    78:55:70:4d:e4:61:4a:04:c2:0e:ba:0f:68:74:fa:
                    f0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:AF:FA:5C:AB:B1:E3:21:61:BF:FB:7B:84:2C:1F:85:9B:E4:A1:EB
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/gK_6XKux4yFhv_t7hCwfhZvkoes.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:900::/40
                  2a06:a005:15d0::/44
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:03:02:be:33:2e:50:1a:d8:f7:87:d5:f0:7d:a6:f6:e3:4e:
         d3:b9:c5:af:0d:9c:17:89:f9:29:63:12:f0:00:81:49:dc:ea:
         d6:7b:c6:90:01:5a:68:ee:fa:43:66:6b:31:01:69:72:31:99:
         d0:87:24:a7:98:63:e6:96:12:f2:18:75:97:69:96:29:d1:87:
         08:19:fb:2a:fe:28:a8:83:c2:75:55:cb:6e:4c:64:f7:60:e7:
         0a:25:8c:62:36:1f:83:a7:62:03:d7:f0:c8:4f:7e:db:aa:56:
         75:9f:6d:dc:2f:c5:63:c4:29:15:66:a3:1c:1a:c5:02:06:09:
         21:32:15:f8:8e:b1:bf:68:1e:85:6e:73:cf:4b:ec:76:42:ce:
         42:70:cc:32:15:7c:b4:57:66:46:86:16:8f:f4:bb:f2:65:64:
         43:90:4f:8e:cb:01:73:57:bc:2e:59:db:59:e2:29:0c:14:a4:
         c9:50:cb:c3:73:98:49:5a:75:32:1a:76:4d:25:c1:e5:33:9e:
         56:57:c6:d7:36:10:9e:4d:06:f3:9e:13:aa:fc:88:3e:66:95:
         e3:d7:f7:03:7c:44:13:65:54:67:82:6e:fb:ca:5a:d8:e5:11:
         86:78:52:01:c8:3c:2b:07:d5:d4:e8:87:c8:6b:cd:f8:e3:be:
         1e:2a:13:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----