Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/glwbIZo-8jbKZ4LXXwCLrJ5JFPo.roa
File:                     glwbIZo-8jbKZ4LXXwCLrJ5JFPo.roa (raw, json)
Hash identifier:          wJ/0pBzYxj51xdYeXpLUnXJVJO/R3BF9szQWtGBD9eM=
Subject key identifier:   82:5C:1B:21:9A:3E:F2:36:CA:67:82:D7:5F:00:8B:AC:9E:49:14:FA
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0181DA4379251AED3464F5EFF70DAC4DB9BF
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/glwbIZo-8jbKZ4LXXwCLrJ5JFPo.roa
Signing time:             Thu 07 Jul 2022 20:04:23 +0000
ROA not before:           Thu 07 Jul 2022 20:04:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204474
IP address blocks:        2a06:a005:11a0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:da:43:79:25:1a:ed:34:64:f5:ef:f7:0d:ac:4d:b9:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul  7 20:04:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=825c1b219a3ef236ca6782d75f008bac9e4914fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:02:ca:25:b8:07:97:49:1b:02:2a:c5:0c:dc:
                    ea:dc:e2:74:1c:af:93:d2:0b:08:99:71:cd:c9:c4:
                    5b:8c:06:2a:62:1b:41:95:f2:74:10:1a:91:bb:74:
                    81:fe:a1:96:38:da:87:ae:a1:f1:78:43:bb:4f:c2:
                    91:4d:ea:38:15:86:76:88:c7:65:59:1d:b4:1e:98:
                    3c:27:05:15:6b:93:b0:28:be:ab:6b:9c:9a:b1:52:
                    4d:bb:a4:24:78:56:38:87:5e:93:c0:56:e6:28:39:
                    73:96:b0:65:ce:8a:61:18:85:f0:a5:a1:1c:a1:fe:
                    f5:97:de:3c:7d:0f:92:a4:48:25:ba:42:b9:b8:69:
                    4c:a9:e7:72:59:72:e5:c0:af:57:cb:e2:05:5c:5f:
                    bf:1b:a2:fc:7b:a9:87:3b:5d:5d:bb:bc:bc:24:2d:
                    55:1b:12:e7:d9:f0:4a:69:37:58:40:45:de:64:31:
                    17:b3:8f:6a:f1:ce:86:32:65:90:db:b5:5a:0a:bf:
                    1d:35:bd:b9:c8:22:2e:f5:5b:1d:22:cb:8e:17:14:
                    d6:dd:0c:62:23:53:fa:cf:18:6c:48:97:b4:55:18:
                    69:ca:7e:3e:12:1d:77:2a:ea:d8:cf:0a:d7:1c:4c:
                    21:16:51:56:f3:17:80:d3:a9:fa:24:3d:32:fe:19:
                    5d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:5C:1B:21:9A:3E:F2:36:CA:67:82:D7:5F:00:8B:AC:9E:49:14:FA
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/glwbIZo-8jbKZ4LXXwCLrJ5JFPo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:11a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         93:93:5f:02:6e:ec:5b:53:55:a4:8d:da:fd:0b:2b:3e:8f:f2:
         6b:0a:17:54:db:0d:7f:c3:4c:21:b4:b6:ee:15:e3:02:a2:42:
         63:42:41:c1:77:89:83:f7:58:9c:42:49:af:97:32:d3:78:94:
         ea:68:77:12:23:b5:84:3a:d1:44:0d:18:31:a8:32:d7:e6:97:
         b2:dc:23:9c:a8:89:ab:8f:ca:70:73:3e:e2:47:7c:22:e6:bc:
         d7:be:1e:78:a7:71:3c:81:b1:ae:15:b1:ea:4b:31:3d:22:ef:
         c9:a2:70:08:de:86:bc:8c:a0:a0:8c:7d:79:fa:e1:52:9e:a3:
         52:38:6a:3e:2a:f4:8a:f5:d5:c7:72:c2:72:a7:c2:02:50:cb:
         fe:cf:19:93:1c:9d:2e:54:28:18:ed:69:78:05:44:54:15:2d:
         50:65:90:ce:c0:07:68:26:4b:bb:23:88:9d:bd:5c:d1:0f:ae:
         4c:32:c6:66:43:a4:5f:0c:48:31:b2:b5:78:14:20:27:5d:eb:
         27:0e:21:d8:02:38:da:de:e6:91:8d:53:98:98:14:f6:27:65:
         e0:5e:21:cb:d7:95:52:e3:ec:86:76:4e:30:e4:e6:fc:f5:d3:
         f9:73:80:60:c6:8d:10:15:cd:37:56:b7:d8:2a:e2:f4:d1:fc:
         4b:76:77:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----