Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/j80OS1hYKp8nC4mzn9wsnfHmClA.roa
File:                     j80OS1hYKp8nC4mzn9wsnfHmClA.roa (raw, json)
Hash identifier:          NfbeAMOSWXWTfc3uDOp5mcX1ncxHJ+//xMba3ILFM0c=
Subject key identifier:   8F:CD:0E:4B:58:58:2A:9F:27:0B:89:B3:9F:DC:2C:9D:F1:E6:0A:50
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182C62A49CA22289B2EC838A86E90ACBEBE
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/j80OS1hYKp8nC4mzn9wsnfHmClA.roa
Signing time:             Mon 22 Aug 2022 15:27:16 +0000
ROA not before:           Mon 22 Aug 2022 15:27:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204160
IP address blocks:        2a06:a005:1940::/44 maxlen: 48
                          2a06:a005:1930::/44 maxlen: 48
                          2a06:a005:18b0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:c6:2a:49:ca:22:28:9b:2e:c8:38:a8:6e:90:ac:be:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug 22 15:27:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8fcd0e4b58582a9f270b89b39fdc2c9df1e60a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b5:3a:3a:0f:86:fe:64:a9:e5:cc:89:8f:9f:
                    90:02:e1:92:f4:52:ae:43:fe:05:ff:dd:0e:72:87:
                    6b:db:ee:2e:cc:a7:9e:d3:1b:17:0f:f9:6b:97:a7:
                    b7:5e:48:5a:84:8e:e1:00:ed:37:e9:ea:73:92:cd:
                    9c:20:24:18:4b:ca:f8:e1:b6:29:d1:9c:9f:df:2b:
                    b3:17:d3:a7:a0:4d:d5:da:79:21:01:0b:b1:de:b3:
                    31:e7:3c:22:fb:84:0d:bb:be:83:72:56:e5:d1:c0:
                    d3:0f:57:ae:c3:dd:f9:f3:c3:4d:c7:c4:66:39:4a:
                    0b:a7:b1:74:bd:35:5f:70:ad:dc:58:f2:4b:c5:83:
                    f6:6c:33:e4:98:2d:9e:a0:d4:58:45:8d:28:e9:68:
                    f0:48:44:9a:af:f2:88:a8:ea:ab:30:d3:42:ac:ff:
                    1c:90:4f:56:f7:ff:ca:38:63:9b:80:48:13:55:c2:
                    3d:0b:ab:74:60:0c:e6:cb:d8:35:cf:b6:78:c2:86:
                    8e:59:2e:bc:e9:c4:88:98:2f:e1:3b:a9:2a:08:40:
                    f3:56:01:1e:ce:2f:db:7c:e6:73:50:bf:45:47:1d:
                    f8:56:88:71:a3:13:44:61:67:54:00:be:fb:e3:b1:
                    f0:11:e6:e9:27:db:87:82:01:27:45:c1:f5:c9:a9:
                    5f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:CD:0E:4B:58:58:2A:9F:27:0B:89:B3:9F:DC:2C:9D:F1:E6:0A:50
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/j80OS1hYKp8nC4mzn9wsnfHmClA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:18b0::/44
                  2a06:a005:1930::-2a06:a005:194f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         98:1a:c1:c0:3a:94:c6:5e:b9:6a:4a:62:7b:45:82:7e:a4:b5:
         a2:c3:e3:5e:61:b6:2c:88:6a:78:2d:6b:c5:c4:d6:1b:a6:66:
         cd:7e:75:c3:0a:59:5a:34:94:51:5d:4d:3a:28:b4:14:27:05:
         d8:9a:f5:c3:77:a3:15:d2:0b:64:ee:75:cb:f5:18:1c:74:41:
         f9:14:af:24:a8:ab:1d:95:8b:59:c7:78:a5:ba:69:f7:d5:bc:
         a3:c7:3c:6f:ce:88:43:b3:11:d3:f7:41:75:47:4c:0e:ff:a0:
         8e:09:80:1a:d5:0d:78:6e:ca:b1:5d:fb:c9:0b:60:ce:eb:54:
         d2:a3:37:5d:22:be:fe:c6:ee:1f:65:ac:24:76:c6:f0:15:f5:
         06:e3:89:3f:a5:94:32:3c:51:80:6b:7c:39:05:8d:d7:4f:74:
         82:ab:bf:5c:8b:55:3f:2a:b3:30:9e:38:1c:d9:54:0f:88:1f:
         8c:8a:75:f3:1f:45:f0:53:99:ff:a4:ff:00:ad:fd:56:c9:ab:
         3b:fb:03:d2:bb:fa:31:8a:ea:a6:38:11:ab:6e:2a:2e:8b:68:
         ac:3d:2b:cc:6c:60:f0:66:97:90:1a:56:10:64:30:54:c6:03:
         4a:77:a6:3f:cc:6e:f2:77:2d:20:7b:e5:d5:76:bd:09:1b:7b:
         28:ab:01:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----