Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/j7tyRWo2wWz6bk5C6kCn0vA2mnI.roa
File:                     j7tyRWo2wWz6bk5C6kCn0vA2mnI.roa (raw, json)
Hash identifier:          OE8xjB6TxxlSiTXC50S0AGbY0uOQgEfLq+eYUyPbzek=
Subject key identifier:   8F:BB:72:45:6A:36:C1:6C:FA:6E:4E:42:EA:40:A7:D2:F0:36:9A:72
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184F00C303C8E63CE39DE77340867487B99
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/j7tyRWo2wWz6bk5C6kCn0vA2mnI.roa
Signing time:             Thu 08 Dec 2022 04:44:01 +0000
ROA not before:           Thu 08 Dec 2022 04:44:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203888
IP address blocks:        2a06:a005:150a::/48 maxlen: 48
                          2a06:a005:d22::/48 maxlen: 48
                          2a0a:6040:300::/40 maxlen: 48
                          2a06:a005:2480::/44 maxlen: 48
                          2a06:a005:b60::/44 maxlen: 48
                          2a06:a005:d80::/44 maxlen: 48
                          2a06:a005:24b0::/44 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48
                          2a06:a005:1166::/48 maxlen: 48
                          2a05:dfc7:6400::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:f0:0c:30:3c:8e:63:ce:39:de:77:34:08:67:48:7b:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  8 04:44:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8fbb72456a36c16cfa6e4e42ea40a7d2f0369a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a3:34:33:80:1a:2d:38:a9:02:55:0c:a8:0c:
                    ae:49:d3:01:07:a2:d2:fe:c3:77:df:b1:b0:b0:19:
                    22:c1:18:80:0f:07:41:db:78:e1:53:34:9b:7f:f9:
                    e3:f9:52:0c:e9:14:0d:b1:c9:cd:64:61:3d:4a:45:
                    79:63:ab:66:db:36:1a:57:1f:69:bd:b5:10:7f:d5:
                    d6:98:45:00:0c:8b:4a:92:e3:69:6e:eb:c1:3a:46:
                    f8:03:53:c9:24:d2:25:57:cf:76:04:04:e4:aa:1b:
                    d8:75:bb:50:6d:14:2a:50:79:f1:60:5b:ce:02:ca:
                    c0:58:ae:16:fb:e2:af:36:ee:09:fd:3e:ef:44:ba:
                    13:e1:b5:8a:64:28:6f:41:b3:bf:e8:43:2b:b4:05:
                    ff:34:13:87:90:59:dd:a1:c9:c1:81:6a:2d:ec:9e:
                    fa:1e:e2:09:42:89:0d:f7:ab:ea:2b:c7:54:21:d1:
                    06:96:35:30:ec:bf:f0:e6:91:1a:ec:d2:f0:b6:6c:
                    6b:09:6c:8e:69:cd:96:5a:8b:2e:29:e3:fb:de:2d:
                    e9:5e:cf:22:b4:82:6b:46:11:18:cb:09:53:cb:1d:
                    53:46:ea:47:8d:b6:0c:6e:71:1d:f9:4d:de:f1:c1:
                    2a:97:a9:9d:5c:97:8b:a6:8e:19:5f:b9:59:b7:ab:
                    60:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:BB:72:45:6A:36:C1:6C:FA:6E:4E:42:EA:40:A7:D2:F0:36:9A:72
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/j7tyRWo2wWz6bk5C6kCn0vA2mnI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:6400::/40
                  2a06:a005:b60::/44
                  2a06:a005:d22::/48
                  2a06:a005:d80::/44
                  2a06:a005:1166::/48
                  2a06:a005:150a::/48
                  2a06:a005:2480::/44
                  2a06:a005:24b0::/44
                  2a07:54c2:b00b::/48
                  2a0a:6040:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         6f:d8:97:2f:a0:01:0c:ab:6c:8e:7e:45:b4:23:d6:37:52:74:
         59:4c:79:af:45:23:1e:da:40:2b:27:08:44:c3:ee:b3:58:d0:
         32:bc:0d:48:c8:4d:e4:ab:cc:6d:da:54:11:66:57:61:0c:4e:
         a2:12:fb:a6:8b:c2:67:e7:31:6b:24:82:d8:ed:f5:7d:42:27:
         81:c7:2c:2d:b6:7a:fb:a6:42:08:f0:9c:6f:49:fc:a2:ed:83:
         fb:5f:87:4d:af:ee:04:c3:58:d6:01:65:48:6f:7f:6c:c9:c8:
         71:d6:fb:2a:52:18:1e:40:57:b1:bb:a9:18:4a:39:97:98:07:
         82:19:d0:bc:01:a0:31:5e:b8:1d:21:65:4b:63:e8:0a:94:88:
         aa:b3:a0:9f:c5:8e:e2:13:38:74:d2:47:13:56:ae:bd:17:12:
         fa:2a:17:44:db:84:67:ba:d9:fe:b9:46:7c:26:f9:b6:1a:d4:
         96:6a:81:1a:20:79:7f:ea:8a:17:00:af:85:ff:a5:c1:7a:ed:
         f1:c6:b8:39:41:33:8e:7e:32:5b:5c:43:d9:a5:0a:d6:fb:ee:
         71:93:63:2e:c7:cd:f8:92:76:8b:9e:15:ec:36:07:39:52:9c:
         9f:28:fa:bd:a5:27:70:ad:85:15:99:46:e4:7d:75:b9:da:40:
         eb:31:cf:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----