Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hL8GxVkdhLc7pPpACtmOsEVCyow.roa
File:                     hL8GxVkdhLc7pPpACtmOsEVCyow.roa (raw, json)
Hash identifier:          HfprJUElnQFZeSEkxJBYP42qmQy4d7PoqoraXgpq0gU=
Subject key identifier:   84:BF:06:C5:59:1D:84:B7:3B:A4:FA:40:0A:D9:8E:B0:45:42:CA:8C
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1A635A9E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hL8GxVkdhLc7pPpACtmOsEVCyow.roa
Signing time:             Tue 31 May 2022 18:21:14 +0000
ROA not before:           Tue 31 May 2022 18:21:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211411
IP address blocks:        2a06:a005:b60::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 442718878 (0x1a635a9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May 31 18:21:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=84bf06c5591d84b73ba4fa400ad98eb04542ca8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:24:be:73:01:5f:cd:f6:7f:1c:1a:8e:28:a0:
                    b1:a7:a8:af:d7:33:fa:44:bf:1a:3b:3a:5c:ef:58:
                    7b:1a:8e:d8:e0:cd:7c:a3:59:30:76:43:49:b5:99:
                    8b:a6:30:9e:c2:f5:71:36:e2:0c:4b:63:3d:af:57:
                    17:19:c1:34:41:23:05:22:29:19:fe:64:bf:5d:ba:
                    d0:cb:bf:d5:ec:ba:d9:13:ef:71:71:85:25:f4:2a:
                    58:b4:3f:54:bf:4e:b0:3d:a0:1b:d6:9e:71:a4:77:
                    cb:f5:89:05:3b:52:03:1c:29:8f:cb:0c:d1:ff:9e:
                    42:7a:79:f9:ba:c2:95:4c:4b:73:fb:65:2e:1c:db:
                    86:44:80:50:e3:f7:f3:92:54:c1:40:7d:02:ff:8c:
                    c7:33:58:7d:91:0b:b7:5b:22:7d:98:cb:14:f9:a0:
                    3d:33:09:cd:45:e0:dd:6a:f0:8a:ae:45:99:26:d9:
                    72:c2:a6:f8:bf:cb:fc:15:64:3b:db:1e:31:53:29:
                    81:ee:0d:25:b6:1c:55:0e:07:f2:a7:68:f2:13:f4:
                    48:41:25:86:60:40:80:4a:a2:44:ea:5d:cc:fe:17:
                    ab:8c:f3:b8:1f:35:9d:06:bf:6d:63:13:50:61:f3:
                    61:2a:7d:24:23:05:1c:a1:fd:1d:6d:c0:4a:f0:38:
                    9e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:BF:06:C5:59:1D:84:B7:3B:A4:FA:40:0A:D9:8E:B0:45:42:CA:8C
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hL8GxVkdhLc7pPpACtmOsEVCyow.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:b60::/44

    Signature Algorithm: sha256WithRSAEncryption
         2b:f1:28:ff:17:02:cd:3d:67:63:b7:d6:4a:97:74:1d:03:ae:
         e2:8e:5e:9a:40:3e:4b:52:a2:93:e9:3f:2a:96:bf:7a:23:ee:
         cf:4a:be:c7:01:84:94:02:0f:c4:08:58:9f:76:7a:ea:44:67:
         9e:9e:33:64:b3:2c:a9:4c:c1:3a:80:c5:56:0c:7c:dd:d2:14:
         f2:e2:81:bd:af:fe:c6:09:c2:62:3e:9e:82:7e:de:f4:68:47:
         a3:63:31:8c:6d:ac:06:21:1b:f2:9b:be:44:cb:40:ca:19:58:
         6e:2b:91:ee:20:df:6b:ee:58:6a:79:1b:15:82:c6:e5:01:c9:
         28:40:66:b2:51:d9:02:fe:bf:f5:37:3c:86:03:97:43:7a:12:
         03:a4:66:d6:f5:6a:be:2b:dd:ec:81:3f:d1:ea:ce:87:17:d0:
         37:de:f1:fe:4a:0e:5c:ff:f5:14:0a:b0:6e:5b:1a:11:e3:85:
         d4:de:4e:3e:a0:5b:a8:b9:92:99:66:3c:69:4a:14:c0:cd:f5:
         57:9a:89:0b:97:5c:9a:2c:20:32:c5:4a:f5:53:82:e5:a1:74:
         e0:f7:9f:f4:39:bb:ab:ec:93:8f:41:3f:68:07:10:ff:a2:2a:
         ae:f4:fa:81:94:1f:ae:10:2b:32:a6:f4:25:53:ab:a8:49:4e:
         c5:4e:d2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----