Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hIukE1NJCm3e9yOukjaw2s-zroY.roa
File:                     hIukE1NJCm3e9yOukjaw2s-zroY.roa (raw, json)
Hash identifier:          R3d7rOtRI5XgF/F8dzeEXK6j6qB61B9WGG0JNvqJiWs=
Subject key identifier:   84:8B:A4:13:53:49:0A:6D:DE:F7:23:AE:92:36:B0:DA:CF:B3:AE:86
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1A806D95
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hIukE1NJCm3e9yOukjaw2s-zroY.roa
Signing time:             Thu 02 Jun 2022 01:25:21 +0000
ROA not before:           Thu 02 Jun 2022 01:25:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205092
IP address blocks:        2a06:a005:980::/44 maxlen: 48
                          2a06:a005:930::/44 maxlen: 48
                          2a06:a005:970::/44 maxlen: 48
                          2a06:a005:960::/44 maxlen: 48
                          2a06:a005:940::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 444624277 (0x1a806d95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun  2 01:25:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=848ba41353490a6ddef723ae9236b0dacfb3ae86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:86:0c:d2:64:68:60:52:e2:77:12:c7:29:97:
                    8f:0b:bc:2a:45:c7:cc:bd:2c:e7:20:0f:b4:a0:d9:
                    42:f6:bf:1e:c1:2f:49:8e:37:9a:61:0b:00:07:f8:
                    6c:89:9c:9f:49:bd:99:f7:6b:10:d7:29:f1:bf:1d:
                    0c:29:2c:ef:e6:7e:90:6e:df:ac:a2:d3:13:62:74:
                    55:87:26:2d:e0:d4:b9:b5:46:78:fb:46:b5:29:d8:
                    05:df:f6:34:7e:05:86:a8:4f:55:d2:87:74:61:90:
                    b0:fc:37:0b:b6:44:14:c3:70:94:2f:d0:85:eb:f5:
                    9d:3b:c7:27:8c:ba:bc:30:86:57:0e:3b:35:6f:be:
                    0a:07:8d:cb:9a:89:06:dd:75:1e:0c:a9:9d:a2:be:
                    2d:5d:4b:61:86:a8:d8:78:ff:d7:c2:6c:2d:f4:de:
                    9f:b1:7f:12:33:73:cd:31:9b:a8:9f:3d:d1:21:24:
                    e9:96:70:8c:3b:04:99:dd:8f:d8:f7:99:14:1c:3a:
                    8d:d2:47:f8:e2:cd:4e:61:14:32:96:fd:61:12:71:
                    d4:01:22:fd:78:7a:88:b5:44:74:02:8f:78:13:2c:
                    8a:70:18:4e:2f:c0:31:6d:4c:52:f1:ea:0f:9b:0f:
                    86:35:68:d7:47:9f:5a:80:8a:29:41:c2:e1:56:b2:
                    45:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:8B:A4:13:53:49:0A:6D:DE:F7:23:AE:92:36:B0:DA:CF:B3:AE:86
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hIukE1NJCm3e9yOukjaw2s-zroY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:930::-2a06:a005:94f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:960::-2a06:a005:98f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         1d:ed:24:f2:8a:81:91:22:66:9d:10:c2:f1:19:1d:72:12:dd:
         8e:65:4c:9a:7d:b6:9a:43:91:62:9b:87:1a:ca:0a:f5:17:6f:
         f5:af:43:65:cd:44:ee:f2:3f:ca:66:58:f2:2a:43:45:cd:ef:
         a7:be:b4:1d:82:17:0e:8b:e9:57:26:2e:20:0c:01:dd:9f:f6:
         e3:ee:37:07:60:b7:3e:da:2c:b3:ff:a4:e4:ab:0b:09:80:0a:
         a1:ba:ae:8c:1e:d2:b8:f6:93:f5:40:19:91:0e:75:9e:40:e3:
         7f:8f:24:cb:d9:02:f8:ef:8c:03:63:78:65:d7:f2:6b:76:ab:
         d7:9f:c8:24:a1:82:41:6e:b8:01:46:ee:2a:83:e7:6a:80:0c:
         b9:ea:6f:2f:ac:12:91:ea:7e:a0:6d:cb:15:fd:97:95:92:81:
         0c:33:7d:6e:6d:73:7e:2d:84:91:a8:b4:02:b7:1d:59:b4:45:
         2d:b0:ee:6a:42:36:1b:c8:ea:6e:a3:dc:44:3a:97:69:fa:47:
         97:0c:f3:94:f1:2b:8a:a8:b7:08:b4:9c:ed:74:e8:2a:d1:86:
         ab:dd:aa:92:44:11:64:d4:3d:8a:37:c6:8f:38:d0:c6:28:d9:
         97:33:c2:86:5f:7c:09:7b:70:82:d6:86:2f:7e:b6:a0:9b:cc:
         33:33:ba:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----