Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/i85a2XVAKzP644pG6ma01IdJlNw.roa
File:                     i85a2XVAKzP644pG6ma01IdJlNw.roa (raw, json)
Hash identifier:          ztZpnHDAbeSlZD5TVHQJf98B52BLgkgxvARoWVgma38=
Subject key identifier:   8B:CE:5A:D9:75:40:2B:33:FA:E3:8A:46:EA:66:B4:D4:87:49:94:DC
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1818DE29
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/i85a2XVAKzP644pG6ma01IdJlNw.roa
Signing time:             Thu 14 Apr 2022 03:05:22 +0000
ROA not before:           Thu 14 Apr 2022 03:05:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211954
IP address blocks:        2a06:a005:434::/48 maxlen: 48
                          2a0a:6040::/32 maxlen: 48
                          2a06:a005:450::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404282921 (0x1818de29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 14 03:05:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8bce5ad975402b33fae38a46ea66b4d4874994dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a0:fb:07:f1:ff:c2:84:84:23:81:71:96:c1:
                    89:5b:fe:0a:84:9c:d8:93:f6:44:6c:1e:87:0e:f0:
                    c8:cd:8e:03:05:5e:c8:02:75:52:dc:e7:84:87:88:
                    86:95:c0:a5:98:19:0e:dc:6e:fa:76:d6:d2:1b:f1:
                    df:a2:9c:7a:55:af:e1:e9:23:b0:7b:3e:bd:d9:d9:
                    40:5d:ee:a3:1b:09:9f:40:77:3e:80:cd:f8:0a:41:
                    04:bf:2f:66:59:40:34:40:83:fc:5e:6a:a2:8f:29:
                    78:3a:fe:5f:29:47:7d:73:42:3a:57:e1:35:70:c6:
                    5f:ff:c4:52:9f:fb:30:69:86:c3:fc:e7:c5:d1:dd:
                    40:36:f0:46:d0:90:11:34:73:2b:33:55:7e:2b:9e:
                    20:86:f7:01:b3:b5:19:49:e1:8f:7c:45:4c:48:89:
                    9e:57:b5:80:39:83:96:45:5d:42:09:eb:df:5c:b6:
                    c9:0b:f7:60:4b:89:f1:11:2f:94:02:28:56:d3:7c:
                    6f:d4:c8:cc:cf:12:dd:c2:99:aa:10:76:be:4a:e6:
                    4b:15:02:b1:98:5f:58:6f:24:0c:f9:5d:f3:3a:44:
                    d2:17:b1:ce:94:b1:98:9b:f0:d9:6a:c6:3d:5a:ac:
                    2d:8e:b0:d9:64:fb:7d:b4:06:a8:aa:7d:0e:c7:85:
                    86:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CE:5A:D9:75:40:2B:33:FA:E3:8A:46:EA:66:B4:D4:87:49:94:DC
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/i85a2XVAKzP644pG6ma01IdJlNw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:434::/48
                  2a06:a005:450::/44
                  2a0a:6040::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:7e:01:0d:6f:e4:ef:d7:70:7e:4f:06:5b:0f:8b:b0:11:60:
         78:cd:8b:56:1b:70:37:69:27:f8:0e:45:f5:d5:bf:a3:f6:b2:
         d9:db:c1:c0:46:2c:a2:bd:68:21:8c:92:33:bd:15:02:fd:d1:
         72:69:25:68:4f:a7:86:77:f3:41:5d:c1:a4:23:36:50:53:f9:
         28:0a:97:d8:31:e9:52:5b:5c:03:b4:d6:fc:32:18:5f:b6:b3:
         04:c5:6f:5d:33:7a:0d:f9:a3:2e:4e:fa:c8:ce:7d:93:42:6f:
         ba:83:ea:c7:5e:28:7f:a5:5b:e0:62:b2:7a:65:7c:5d:59:7b:
         96:54:2e:5c:7f:11:8e:05:92:84:f8:2e:2f:2a:21:6f:d5:98:
         9c:c3:ce:2d:b3:89:9a:62:67:bc:a3:2f:22:7b:af:10:5c:4e:
         6f:16:f4:49:02:e9:40:91:a3:f9:7c:16:a5:b1:45:3c:19:4b:
         0d:b7:e5:66:1c:90:7c:07:f6:c7:b7:88:6a:52:fb:f0:61:61:
         bd:ae:2d:47:8f:7f:ae:8f:c8:03:c2:f7:4a:5f:d4:e6:2f:e1:
         65:ed:24:4c:75:0a:18:e1:fe:b7:62:57:4d:ed:5d:d5:bf:3f:
         8a:d5:27:24:f7:ef:7f:fc:b2:0a:a3:bb:78:87:83:65:49:ec:
         b7:0c:ef:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----