Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/irLKQDzJiioi0nY2_WWS4sITwPQ.roa
File:                     irLKQDzJiioi0nY2_WWS4sITwPQ.roa (raw, json)
Hash identifier:          BFUf8hl0lbj7oZWuV/h/V801EaTMNCNAtW3kieXD0sM=
Subject key identifier:   8A:B2:CA:40:3C:C9:8A:2A:22:D2:76:36:FD:65:92:E2:C2:13:C0:F4
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       187E586A
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/irLKQDzJiioi0nY2_WWS4sITwPQ.roa
Signing time:             Thu 21 Apr 2022 11:09:57 +0000
ROA not before:           Thu 21 Apr 2022 11:09:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60326
IP address blocks:        2a06:a005:590::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410933354 (0x187e586a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 21 11:09:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8ab2ca403cc98a2a22d27636fd6592e2c213c0f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:85:1b:76:d3:57:a6:52:2d:ff:57:ba:ae:26:
                    8c:2a:f7:e4:35:a0:aa:b3:70:0a:2a:5b:da:2d:9c:
                    cb:0f:35:cb:b0:e5:67:81:90:a4:5c:31:87:c1:12:
                    88:c9:2b:b8:6a:b2:97:02:f2:98:cd:87:be:74:e1:
                    58:56:7e:06:a6:88:a2:d1:dd:77:f8:f1:07:1d:d1:
                    46:3d:da:30:7a:f8:c5:bc:14:84:2e:f6:08:95:81:
                    fa:93:41:36:ad:5c:59:c4:63:96:85:e0:94:07:eb:
                    fd:52:b7:81:20:f8:b4:e5:95:9f:5e:56:36:cc:90:
                    b2:5d:32:9a:78:2e:5a:78:63:ed:d8:94:80:25:19:
                    86:20:64:55:d6:a4:69:c6:af:a6:70:62:a7:3b:eb:
                    d6:02:4e:2f:2d:79:3b:c9:e4:22:34:8c:84:d3:78:
                    a9:13:85:db:54:c6:e8:73:63:9a:9e:93:7b:d4:4d:
                    28:17:64:c8:32:79:3f:ef:b2:2d:be:57:7e:8a:38:
                    2d:ed:bc:2a:4c:3f:e6:5f:33:3b:20:b5:f8:0c:32:
                    9d:d5:84:60:cf:d6:83:60:5c:79:bf:7b:5c:85:10:
                    29:36:ab:cb:86:23:04:a8:e9:42:64:58:d4:4b:e2:
                    de:b5:8f:11:56:36:84:2e:3f:cc:c6:b4:a8:d8:7c:
                    4c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B2:CA:40:3C:C9:8A:2A:22:D2:76:36:FD:65:92:E2:C2:13:C0:F4
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/irLKQDzJiioi0nY2_WWS4sITwPQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:590::/44

    Signature Algorithm: sha256WithRSAEncryption
         81:d3:a0:0f:91:28:d9:24:1c:39:95:c4:eb:a3:7e:c7:27:6e:
         a5:05:e9:7c:15:c9:c0:99:db:74:b2:84:ff:7e:39:5b:7f:49:
         cc:cd:0c:a1:0b:ca:57:43:80:97:33:7b:7f:70:21:14:3e:c1:
         e8:e9:31:32:60:3c:e7:25:bc:a1:f2:f8:d5:0c:99:cb:40:45:
         a2:02:f0:e2:8e:36:69:f5:63:b3:7e:93:48:13:9c:82:80:b5:
         35:92:ef:ce:29:e9:ac:e6:0f:52:fb:f5:21:ac:37:1a:16:65:
         51:c1:62:5e:c5:a6:ea:fa:b6:98:4f:ea:87:f1:7b:7a:b0:13:
         c7:06:a7:3b:8b:2d:d1:c5:a5:c9:2a:aa:b9:4d:64:0e:44:aa:
         c4:1f:b8:ae:cd:9e:8e:06:a1:24:56:52:a1:fe:ab:46:57:13:
         ac:63:60:ef:ae:dc:97:78:0d:d3:13:ea:e9:e5:b3:9f:56:f4:
         f9:fa:26:7d:6c:35:78:07:fe:52:bc:46:12:ca:7f:71:59:39:
         50:3c:17:c6:3e:77:45:4b:ec:38:a4:fd:69:2e:b7:5a:3c:f6:
         c1:cc:8d:4f:2b:cf:4d:8d:87:3d:56:dd:94:7e:bb:51:a4:66:
         b8:bb:a3:82:27:1f:a5:cb:fa:59:54:9e:37:a9:7c:01:aa:5d:
         dc:3e:c6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----