Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hy3_q6o-v3gVxk3viEsaRubmxj4.roa
File:                     hy3_q6o-v3gVxk3viEsaRubmxj4.roa (raw, json)
Hash identifier:          b0L3o/Ykt1PY8LjSikNTcT/jgN5s+cuEYJ0vOSZB5MA=
Subject key identifier:   87:2D:FF:AB:AA:3E:BF:78:15:C6:4D:EF:88:4B:1A:46:E6:E6:C6:3E
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018238BECF04BE227D1CA9303659EC41C5FA
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hy3_q6o-v3gVxk3viEsaRubmxj4.roa
Signing time:             Tue 26 Jul 2022 04:23:25 +0000
ROA not before:           Tue 26 Jul 2022 04:23:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203737
IP address blocks:        2a06:a005:1330::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:38:be:cf:04:be:22:7d:1c:a9:30:36:59:ec:41:c5:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 26 04:23:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=872dffabaa3ebf7815c64def884b1a46e6e6c63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f1:67:4c:61:55:39:8d:08:9b:c4:e5:65:44:
                    ce:13:84:dd:b7:a6:a3:fd:8c:3b:23:f9:bf:a4:7a:
                    f7:82:29:a5:f1:a1:86:3c:b4:28:53:dc:12:7a:fc:
                    4f:12:07:9f:af:1f:3b:66:1e:33:3e:5b:b6:3d:12:
                    0b:66:f6:8b:3b:75:ea:b4:84:d8:8b:da:9b:05:f5:
                    42:49:c5:20:76:dc:9f:52:e3:a8:3b:a4:a3:32:f9:
                    47:04:77:4a:89:3e:30:e6:7c:90:14:16:56:f4:6c:
                    c7:80:00:38:03:0e:41:37:29:3d:5b:12:30:9b:01:
                    64:90:62:eb:52:24:68:28:a4:84:9c:f5:43:b4:44:
                    d3:f9:ba:9c:bc:f7:67:0a:ed:76:b3:0b:d1:4c:d6:
                    10:ef:56:6a:f6:f2:87:8f:4c:65:21:4a:9b:23:b2:
                    ec:79:08:c6:0c:97:1c:37:2a:ac:49:eb:01:18:6f:
                    85:19:4f:dd:b7:88:72:f4:6a:f3:21:9f:84:31:0b:
                    38:5e:8f:e9:44:0e:fc:64:17:f8:91:18:ca:31:ef:
                    17:42:5c:c1:e3:b2:9a:c7:68:fd:18:c1:97:0f:e8:
                    8f:7c:4e:b2:09:6d:71:bf:d1:a8:23:56:54:a1:da:
                    71:91:03:76:7a:5a:4f:3f:c4:b1:d4:e7:26:7c:50:
                    5a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:2D:FF:AB:AA:3E:BF:78:15:C6:4D:EF:88:4B:1A:46:E6:E6:C6:3E
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hy3_q6o-v3gVxk3viEsaRubmxj4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1330::/44

    Signature Algorithm: sha256WithRSAEncryption
         0d:f5:ef:29:48:ac:7b:95:fe:8a:74:54:a1:bf:b2:22:10:d9:
         86:d5:71:74:26:4e:61:36:a6:c0:82:27:66:fb:51:6c:6e:38:
         61:55:b0:69:b1:af:4a:67:4b:fd:9b:08:b4:89:bd:40:18:6c:
         b3:42:2b:f4:9e:fa:b0:b8:d1:6d:9e:a7:eb:f1:d7:e4:57:ed:
         1a:59:06:0d:60:f5:52:17:00:60:df:4c:77:e6:e2:7e:85:58:
         d0:de:57:d4:be:d7:6b:5d:ad:83:df:35:39:e3:12:ee:10:66:
         2f:54:6f:e5:8f:6c:58:c5:26:ab:ff:21:2e:48:63:34:84:0c:
         c1:d7:de:fa:06:7e:38:82:80:a1:a9:60:a4:40:f3:66:58:41:
         22:20:cb:9c:ea:58:87:42:77:33:cf:9a:3f:54:74:2e:02:d3:
         ad:4d:73:5a:33:ac:71:fa:93:99:69:cc:c7:94:01:fb:83:c6:
         82:a5:ad:c2:0c:b4:7f:4a:50:c4:43:2d:ff:f6:64:65:05:25:
         ee:aa:18:48:0b:7a:1a:d2:0a:5a:9c:ec:42:7c:3a:4e:08:67:
         50:df:5c:2c:2b:b7:7b:54:9d:09:2d:2c:73:77:07:2d:16:8d:
         3b:83:d1:6a:8e:af:47:51:c5:d6:89:5d:f3:62:a0:1b:11:b6:
         2b:67:08:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----