Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/iqH0Ki1dhlbm1eJlhj41bEtizp4.roa
File:                     iqH0Ki1dhlbm1eJlhj41bEtizp4.roa (raw, json)
Hash identifier:          G52ak9YGgXvxso2NP0s7DaFDb3PgzR54v7njcbfYHiY=
Subject key identifier:   8A:A1:F4:2A:2D:5D:86:56:E6:D5:E2:65:86:3E:35:6C:4B:62:CE:9E
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01828285854AA688CB86682ED1083C311743
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/iqH0Ki1dhlbm1eJlhj41bEtizp4.roa
Signing time:             Tue 09 Aug 2022 12:12:44 +0000
ROA not before:           Tue 09 Aug 2022 12:12:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44570
IP address blocks:        2a06:a005:4::/48 maxlen: 48
                          2a06:a004::/32 maxlen: 48
                          2a06:a000::/32 maxlen: 48
                          2a06:1280:1000::/36 maxlen: 48
                          2a06:a003::/32 maxlen: 48
                          2a06:a005::/32 maxlen: 48
                          2a06:a005:a::/47 maxlen: 48
                          2a06:a005:43d::/48 maxlen: 48
                          2a06:a005:5::/48 maxlen: 48
                          2a06:a005:6::/48 maxlen: 48
                          2a06:a005:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:82:85:85:4a:a6:88:cb:86:68:2e:d1:08:3c:31:17:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug  9 12:12:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8aa1f42a2d5d8656e6d5e265863e356c4b62ce9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a1:66:df:d8:33:36:0f:0e:f0:30:a8:ad:00:
                    9e:b3:0d:f2:f8:06:26:ac:b3:69:8c:ac:3e:03:44:
                    90:76:2a:6f:35:d2:e5:f5:26:55:b2:07:9a:21:c1:
                    68:ec:54:09:09:86:72:de:26:3e:0d:8b:55:fe:53:
                    9e:9a:d6:e3:ae:fe:60:e9:d7:72:29:77:5c:9c:37:
                    a1:c1:ff:15:1d:b8:c9:63:66:55:fc:d5:1d:a7:73:
                    ac:3b:35:9b:2a:2b:53:74:ee:ff:b7:3c:ae:2a:8c:
                    c2:75:35:ce:a5:03:ba:39:fb:3e:8b:8e:69:9c:cc:
                    6d:c9:37:8e:87:04:c9:af:2d:ad:56:40:a0:33:d1:
                    d8:9b:56:13:00:d6:85:c8:df:2b:c7:60:4c:4f:3a:
                    74:52:f7:72:1e:98:9f:c1:95:d0:65:cb:89:a9:40:
                    8a:dd:ac:1a:6f:61:46:27:4d:0d:65:e8:96:5d:2e:
                    04:c6:ab:59:11:ec:c5:d1:8f:da:5e:c4:cb:e0:06:
                    fe:a8:63:56:e8:cb:f5:ea:0a:d3:ac:f9:ec:3c:1c:
                    f0:b3:54:61:6e:25:42:f3:12:5c:43:4e:c9:9c:f1:
                    01:02:88:81:2e:8c:99:ff:6e:2a:0b:97:c6:75:ee:
                    0c:7a:89:0c:ce:15:84:00:db:0e:da:64:c1:1f:83:
                    b0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A1:F4:2A:2D:5D:86:56:E6:D5:E2:65:86:3E:35:6C:4B:62:CE:9E
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/iqH0Ki1dhlbm1eJlhj41bEtizp4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1280:1000::/36
                  2a06:a000::/32
                  2a06:a003::-2a06:a005:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         2d:e4:41:2a:13:eb:1d:0e:93:8b:2f:02:94:81:2b:08:fd:ef:
         00:f0:5d:81:31:be:03:9e:4f:88:f3:52:7b:b3:6c:0f:81:75:
         b7:fe:f5:c7:61:31:5c:0d:c7:3d:76:a3:dd:8d:1d:44:0a:09:
         9e:3b:8d:ae:bf:6a:21:f4:e5:76:be:86:e0:4c:4d:04:0c:6f:
         04:52:52:a3:bd:63:ff:73:33:cd:b2:fe:e7:1d:36:f2:cf:af:
         5c:08:fa:b7:de:f4:a8:c3:e3:c5:dd:b7:ff:48:50:ec:f5:90:
         e3:57:0f:14:56:96:a2:fd:6d:0b:a5:4d:60:15:98:d6:27:7d:
         73:31:c4:95:0a:9c:46:f7:83:76:ad:f2:c1:0c:26:0d:6c:ab:
         2c:ca:36:a1:75:c8:1c:8a:0a:cb:77:f9:d2:25:8b:53:25:f5:
         79:c4:6c:1d:92:d8:1a:70:f6:90:d7:1e:c3:cf:ba:de:1a:ce:
         8b:6d:d0:b9:72:d0:30:ba:9b:a7:97:df:bf:f8:bc:78:52:8e:
         22:52:88:3d:f2:87:97:85:b2:9a:16:91:5a:40:73:c1:c4:af:
         1c:71:c1:62:10:65:b2:63:9b:85:03:d9:7e:07:42:19:29:52:
         8c:e7:d6:a2:8a:97:fe:d3:03:47:c7:79:4a:89:b3:d5:02:8a:
         59:32:fc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----