Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/gNf10s5oYKj9nAfCgfGrxOrdMAE.roa
File:                     gNf10s5oYKj9nAfCgfGrxOrdMAE.roa (raw, json)
Hash identifier:          AgvZV4zkjvA5ZBTDsa3ytjxRnVl1sYJOuyqSZiqWCoM=
Subject key identifier:   80:D7:F5:D2:CE:68:60:A8:FD:9C:07:C2:81:F1:AB:C4:EA:DD:30:01
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       188CD669
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/gNf10s5oYKj9nAfCgfGrxOrdMAE.roa
Signing time:             Fri 22 Apr 2022 09:17:39 +0000
ROA not before:           Fri 22 Apr 2022 09:17:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210951
IP address blocks:        2a06:a005:5c0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411883113 (0x188cd669)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 22 09:17:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=80d7f5d2ce6860a8fd9c07c281f1abc4eadd3001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1e:d7:16:7a:06:36:37:6d:aa:8b:5e:55:31:
                    2f:25:61:e5:a2:ac:57:2e:47:2c:d1:86:be:e4:df:
                    d4:90:ae:9f:02:ce:3d:da:98:c6:d5:37:2d:86:c1:
                    0c:59:3c:d4:e5:96:be:9a:8f:f2:e8:92:05:31:d8:
                    d8:3b:90:df:60:45:68:3f:fa:f4:2c:62:9a:e2:b9:
                    25:27:bd:e9:3d:74:d2:f0:dd:6f:26:68:1c:96:d4:
                    33:85:3c:0a:41:f6:84:10:7a:4b:78:92:30:42:b0:
                    54:cc:da:c8:c5:c3:e9:0b:10:e2:71:61:8c:ba:5b:
                    50:39:33:3f:a2:85:59:bd:9d:08:d1:37:69:f7:a9:
                    1d:7d:c4:f2:c7:13:d5:5e:f3:04:e6:80:91:7f:5f:
                    0f:6e:8c:1b:17:f2:63:e3:1d:d6:ae:b7:ff:ac:50:
                    d7:e6:24:24:b9:3f:6a:2d:dd:6b:bb:54:a8:8c:c6:
                    39:02:f9:7c:f8:84:8c:ff:80:6d:51:0b:d7:ed:04:
                    93:9e:92:00:42:9f:7f:d6:4f:a0:f4:95:a4:fc:5c:
                    3e:95:82:d3:0f:31:1a:eb:5c:e0:5f:cb:f9:9d:91:
                    97:da:d2:48:35:99:94:ad:42:72:34:8f:ef:39:cb:
                    1e:33:f4:25:52:ff:32:7f:72:1d:24:ee:f4:ee:30:
                    d3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D7:F5:D2:CE:68:60:A8:FD:9C:07:C2:81:F1:AB:C4:EA:DD:30:01
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/gNf10s5oYKj9nAfCgfGrxOrdMAE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         78:c8:77:a6:73:16:62:0c:6f:99:ae:1a:48:51:24:51:ee:bb:
         e7:47:db:0e:d2:d7:07:d2:1a:8f:7f:ae:ab:9b:a6:5b:99:34:
         dd:f7:ac:21:93:91:c1:24:2e:6e:d4:40:db:87:93:5e:da:ea:
         67:dc:53:92:4f:19:7f:60:22:bf:3a:ec:f2:dd:e1:f0:7a:f0:
         72:16:66:70:5c:5f:bf:c5:12:2e:58:4d:19:d1:bc:0e:fe:f4:
         5e:83:83:ad:06:df:42:d6:9b:6d:86:2a:97:76:dc:31:b5:b0:
         4e:84:f5:e6:6a:a1:f5:b5:a4:28:4b:80:2a:fd:ef:cc:ef:07:
         29:e9:0e:1d:e6:46:29:e5:68:eb:31:fa:5c:8a:9a:ba:ea:cf:
         e8:75:ce:e3:a0:fe:89:e8:56:c8:98:20:2a:8a:a7:b3:63:48:
         c9:87:26:d0:78:67:e7:14:b7:54:7c:29:b9:36:82:ee:ff:11:
         f8:16:4a:64:56:55:41:e4:bc:9f:cf:3c:a1:8e:a2:38:e4:a0:
         2b:52:2f:cc:ff:e7:ad:7d:3e:e2:f3:8b:dd:cb:6c:36:1d:de:
         21:5d:06:98:46:5e:ee:85:32:13:90:4d:46:7d:77:cf:66:94:
         da:54:f6:fd:69:ef:d5:78:e7:43:5a:f8:fa:06:82:2b:a0:e4:
         4b:9b:45:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----