Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/h7zjtvN0yMk_7ixzBaRSHqm_aBw.roa
File:                     h7zjtvN0yMk_7ixzBaRSHqm_aBw.roa (raw, json)
Hash identifier:          3v8edKpaJyWBu4o0eB2EGtcH6b7yfgNMJzt7hAZwLms=
Subject key identifier:   87:BC:E3:B6:F3:74:C8:C9:3F:EE:2C:73:05:A4:52:1E:A9:BF:68:1C
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184B91DDD3DB4BD666FFE7129097BE38DCD
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/h7zjtvN0yMk_7ixzBaRSHqm_aBw.roa
Signing time:             Sun 27 Nov 2022 12:44:12 +0000
ROA not before:           Sun 27 Nov 2022 12:44:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61228
IP address blocks:        2a0a:6040:cf00::/40 maxlen: 48
                          2a06:a005:5ad::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:b9:1d:dd:3d:b4:bd:66:6f:fe:71:29:09:7b:e3:8d:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 27 12:44:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=87bce3b6f374c8c93fee2c7305a4521ea9bf681c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7a:ed:18:13:20:9a:88:e1:66:9d:ca:f1:00:
                    b1:4f:89:f5:5d:bf:f6:e3:c7:91:ec:9e:c7:e3:d9:
                    6b:7f:35:86:a3:92:1d:65:8c:61:5f:db:55:da:ff:
                    b1:9c:7f:12:5d:dc:61:ee:4f:a7:a1:54:81:d4:9c:
                    d9:a4:61:02:40:17:68:9f:6c:94:36:ab:6d:65:f6:
                    06:2a:dd:83:cb:60:c2:0b:93:1a:31:00:ac:0e:f7:
                    93:2d:30:25:da:4d:ea:20:e0:58:80:bb:fe:ec:88:
                    ab:c7:bd:bd:7d:4f:ce:3e:e5:87:ce:c8:ec:5c:a1:
                    48:74:73:76:c8:24:7d:2b:6b:f4:96:bd:20:3f:94:
                    07:27:49:f0:95:d3:06:fa:a8:4c:59:51:1c:29:2f:
                    ab:26:c7:9c:82:a0:c0:f3:d9:ad:27:02:0f:7d:13:
                    50:49:a0:29:79:5c:96:75:dd:62:57:e9:0e:92:a2:
                    34:b7:e2:47:e4:31:db:04:36:61:4e:1a:76:78:63:
                    c3:52:70:c7:9f:86:26:f8:91:af:5a:fe:7d:61:6e:
                    a4:0b:12:08:52:2f:95:9c:ae:26:3b:c5:1c:a0:2f:
                    11:f9:24:56:8c:a2:63:94:63:30:e3:18:0e:f1:7d:
                    10:5e:db:3e:ad:6f:9a:e4:a3:38:10:d5:1c:e1:5f:
                    9b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:BC:E3:B6:F3:74:C8:C9:3F:EE:2C:73:05:A4:52:1E:A9:BF:68:1C
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/h7zjtvN0yMk_7ixzBaRSHqm_aBw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5ad::/48
                  2a0a:6040:cf00::/40

    Signature Algorithm: sha256WithRSAEncryption
         1c:3e:3a:0d:30:bc:7c:72:9e:f8:e5:89:c2:df:14:97:dd:c3:
         cf:be:bc:df:8a:94:98:a7:c6:ea:a5:d0:23:5d:81:ad:0d:2b:
         3b:a0:90:9e:b5:a1:21:4f:0b:ef:8a:67:9b:a9:18:2a:35:58:
         d1:c8:fa:7e:67:ca:33:5c:df:15:43:72:30:a8:88:57:13:f4:
         db:dd:ec:cb:23:97:c8:60:3b:58:8c:f5:a8:9a:ad:d4:c9:e3:
         2e:ed:4f:f4:56:ab:16:af:de:33:d5:be:e5:5e:ba:3e:b9:4d:
         9b:a6:70:92:f8:27:d3:49:1f:16:1d:d8:98:f6:08:fa:8a:14:
         8e:db:75:8b:67:74:d5:9f:87:c1:92:0b:2d:40:2f:ab:d9:6f:
         5b:de:45:a4:4b:91:25:4c:d7:44:f7:3d:44:24:d4:e2:9f:37:
         22:48:ed:87:7e:4f:47:18:60:a9:a5:6d:9f:84:86:da:95:fe:
         a1:99:93:a1:9d:20:3d:2d:23:53:e9:08:e0:3c:6d:47:c3:d6:
         a2:a6:0c:a7:65:6d:f2:24:18:d6:94:db:a6:9a:d7:43:b0:c2:
         bd:c2:ea:e1:f7:ee:e1:48:7a:37:71:c8:fb:67:f0:0e:6f:82:
         b7:4f:40:3f:d0:02:b2:ab:1c:87:ed:88:75:b4:43:ae:1e:60:
         af:8e:72:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----