Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hHvil_9Eqm0RLEH5hqDnSUC2eHU.roa
File:                     hHvil_9Eqm0RLEH5hqDnSUC2eHU.roa (raw, json)
Hash identifier:          4j4/dQamB1n0J4tOzbWJ3rw+JqeSmvZzGGlAb9ua1Po=
Subject key identifier:   84:7B:E2:97:FF:44:AA:6D:11:2C:41:F9:86:A0:E7:49:40:B6:78:75
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183F55D41355C2420D845F432E2FC3A223B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hHvil_9Eqm0RLEH5hqDnSUC2eHU.roa
Signing time:             Thu 20 Oct 2022 12:27:52 +0000
ROA not before:           Thu 20 Oct 2022 12:27:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203577
IP address blocks:        2a06:a005:2020::/44 maxlen: 48
                          2a06:a005:2030::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:f5:5d:41:35:5c:24:20:d8:45:f4:32:e2:fc:3a:22:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 20 12:27:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=847be297ff44aa6d112c41f986a0e74940b67875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4d:68:e2:16:09:96:df:d6:6b:f1:66:d6:97:
                    2c:fe:59:59:55:04:06:30:57:b1:41:e5:6f:f9:98:
                    f0:ec:e4:b2:f6:eb:95:19:1e:98:ee:af:30:21:a2:
                    d4:14:37:7c:47:e9:86:19:6f:ba:2b:7a:6d:bb:10:
                    9c:ef:1a:10:51:92:e9:2d:60:dc:bf:08:e9:f3:27:
                    bd:17:25:f1:11:30:f5:2a:26:23:ef:b4:ad:e6:3c:
                    87:b5:93:8c:dd:8f:3f:17:48:2f:c0:3c:92:21:71:
                    a5:ab:9c:13:00:c4:7b:69:77:b2:0c:51:a3:81:87:
                    b8:3c:86:d5:b8:9b:cb:58:23:5c:fb:f2:e9:c8:f5:
                    c4:d3:fe:72:4b:66:1e:a9:50:23:ec:e4:dc:5d:c4:
                    02:e3:36:87:c5:2b:86:e4:fd:45:9f:86:64:3d:1c:
                    35:a9:53:52:0f:bb:24:89:df:52:62:f8:4d:fe:b3:
                    8b:b2:56:55:c5:a8:15:3c:cb:2c:44:c3:e0:29:27:
                    4a:34:c4:f7:32:7a:88:2d:ac:c4:e3:96:a2:88:85:
                    50:10:77:ea:26:f4:dc:25:62:15:67:29:17:7f:cc:
                    6f:99:f8:53:f3:99:2d:77:cc:e5:c7:1b:d2:da:8a:
                    2b:d9:41:fd:3b:e9:79:f2:d5:82:89:75:63:b7:f3:
                    e4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7B:E2:97:FF:44:AA:6D:11:2C:41:F9:86:A0:E7:49:40:B6:78:75
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hHvil_9Eqm0RLEH5hqDnSUC2eHU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2020::/43

    Signature Algorithm: sha256WithRSAEncryption
         50:f7:41:52:4a:17:35:5d:dc:96:99:5b:0f:fb:f5:19:e2:41:
         ab:db:22:4a:6c:f8:0b:e4:f1:9b:35:70:d5:c4:46:43:55:26:
         ce:41:d5:76:5b:7a:cc:38:77:a9:05:51:3a:50:91:8c:e4:90:
         22:d7:f2:97:17:b4:da:e9:6a:b3:f3:ac:01:6e:24:92:c3:35:
         da:81:14:39:62:c2:45:08:d3:18:15:66:13:b1:40:af:03:58:
         54:6b:12:03:91:74:f8:63:a5:26:fc:c0:d7:6e:ad:99:f9:d0:
         63:1f:ce:49:c3:57:f2:48:52:37:3c:d6:4d:eb:32:3c:3d:fb:
         f0:0b:aa:28:3c:0d:80:d3:5c:8d:dd:7c:f0:a3:fa:5f:c2:f8:
         1a:ab:ba:57:b7:d7:61:20:70:98:96:e8:ec:8f:e7:20:e2:ad:
         ae:17:6f:b9:31:98:49:69:49:c1:c5:72:8b:9f:78:9f:f8:12:
         18:50:c4:4a:ce:7a:20:98:9a:22:4b:77:fb:c4:b6:07:e3:44:
         68:34:53:48:60:71:50:4a:78:69:ba:37:b2:f7:c8:a6:6c:1d:
         34:44:1c:2f:bc:80:21:44:de:95:31:e2:0a:21:72:69:f1:0e:
         52:2d:7a:da:56:7b:3b:41:b4:b4:51:59:4c:d7:11:c7:48:77:
         4e:0f:aa:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----