Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/h1KaiFpHBAJFjcZ4FU67_JHiHEM.roa
File:                     h1KaiFpHBAJFjcZ4FU67_JHiHEM.roa (raw, json)
Hash identifier:          LxYO3u+gNT7X3crPRtIxhFCCS+Wfdvgrhz+HIzfBBXM=
Subject key identifier:   87:52:9A:88:5A:47:04:02:45:8D:C6:78:15:4E:BB:FC:91:E2:1C:43
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1AB10B01
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/h1KaiFpHBAJFjcZ4FU67_JHiHEM.roa
Signing time:             Wed 08 Jun 2022 18:44:03 +0000
ROA not before:           Wed 08 Jun 2022 18:44:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206023
IP address blocks:        2a06:a005:5e6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447810305 (0x1ab10b01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun  8 18:44:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=87529a885a470402458dc678154ebbfc91e21c43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a7:5c:e5:90:01:43:48:14:c8:3d:04:58:ff:
                    60:80:84:d5:b7:16:fb:86:ef:f3:3f:56:fb:fb:d9:
                    53:a3:9c:dd:c5:a2:4c:a8:11:eb:df:c7:2f:ea:d2:
                    1b:cf:68:50:66:89:0b:06:79:f0:64:0b:f7:2f:f3:
                    49:13:d5:f4:1d:dd:f9:b9:49:38:93:6f:65:3f:c4:
                    3f:47:0c:54:10:a2:dc:a6:96:a5:bf:3f:be:62:06:
                    ba:07:ef:d4:1b:b8:1b:3f:81:7c:19:e5:1f:83:c5:
                    5a:cf:b7:ce:cb:5a:18:8a:1f:ba:81:8a:e6:b7:7e:
                    51:39:91:0b:69:ab:86:11:f2:04:dc:a9:37:43:c3:
                    6f:1d:55:5f:26:f1:af:c8:c0:ba:82:46:8c:de:86:
                    0a:a0:e7:60:b3:82:7c:67:b8:8a:c8:c4:27:30:59:
                    1b:3c:e0:76:af:bf:d5:a9:23:aa:7c:18:ee:d6:74:
                    e5:5e:97:36:4a:9e:bc:16:97:12:32:cf:5d:f4:bc:
                    93:da:3a:48:45:2f:40:72:1a:5b:48:25:75:d4:ba:
                    d6:bb:e8:24:c4:7f:06:e7:24:c3:a3:cc:f5:28:8a:
                    2a:04:1c:3a:79:84:08:1b:8b:41:27:30:a5:b3:a5:
                    c1:d7:5f:40:62:ee:44:54:91:7e:bb:7c:f3:4b:07:
                    a1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:52:9A:88:5A:47:04:02:45:8D:C6:78:15:4E:BB:FC:91:E2:1C:43
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/h1KaiFpHBAJFjcZ4FU67_JHiHEM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5e6::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:fa:44:c0:b6:96:11:17:f7:d8:5b:79:6b:d9:fd:58:cd:80:
         6d:f7:e9:3c:e6:50:36:6b:51:fa:b7:3f:95:42:05:09:a8:dd:
         9f:46:f1:3e:e2:99:92:97:dc:5f:c3:a1:d9:f2:e7:8b:e5:ae:
         c4:29:e5:13:8a:2f:3c:2f:a7:f8:88:69:e7:af:ea:0d:dd:8a:
         11:73:41:e9:39:40:a1:26:4d:11:06:b5:48:4e:45:4f:73:c3:
         93:d6:23:1e:bb:2f:13:71:cc:e1:fb:ac:dc:58:a7:00:76:9b:
         41:b9:f5:07:63:9b:60:09:b0:35:b9:63:68:a2:a1:e3:d5:16:
         ec:b4:28:bb:b9:ff:a2:70:7a:50:83:37:48:5a:24:ea:6a:4c:
         03:28:97:d6:92:76:28:71:62:0f:28:e8:91:c0:75:5a:c7:79:
         36:88:a5:25:af:05:88:15:f1:f8:44:dc:a3:d3:50:36:e2:04:
         9d:b9:61:51:91:ac:71:8c:13:8a:43:7f:39:90:e3:db:23:39:
         86:9e:49:2b:d8:27:32:bd:a4:d1:6e:43:8d:37:0c:3f:ce:83:
         89:b4:a3:de:a3:37:7a:72:1d:2c:33:db:80:f2:87:dd:98:0d:
         96:7d:22:1a:97:c7:2c:fb:dd:e7:32:44:69:11:d8:f5:95:00:
         45:c5:e1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----