Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/k2QsCGn65EraMRuCJdacx1De64s.roa
File:                     k2QsCGn65EraMRuCJdacx1De64s.roa (raw, json)
Hash identifier:          Zyg4j0qH+CW/H4mTmqs6IYh4JjCZqDpwtwAxxEI8Q5E=
Subject key identifier:   93:64:2C:08:69:FA:E4:4A:DA:31:1B:82:25:D6:9C:C7:50:DE:EB:8B
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184A9D6B716EDFC856B3C155C868BAB0F55
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/k2QsCGn65EraMRuCJdacx1De64s.roa
Signing time:             Thu 24 Nov 2022 13:32:11 +0000
ROA not before:           Thu 24 Nov 2022 13:32:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204446
IP address blocks:        2a06:a005:1320::/44 maxlen: 48
                          2a06:a005:a20::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:a9:d6:b7:16:ed:fc:85:6b:3c:15:5c:86:8b:ab:0f:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 24 13:32:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=93642c0869fae44ada311b8225d69cc750deeb8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:20:4f:e3:20:b5:40:b3:6d:44:79:66:8b:47:
                    41:cd:94:5e:57:99:4f:8f:06:8d:f6:da:23:65:1e:
                    2e:62:eb:4c:78:e1:1e:a3:c3:f6:a2:f2:73:f9:9b:
                    f7:db:af:d5:67:37:fe:2f:61:c5:32:ad:a7:74:31:
                    d2:0e:5f:90:a9:a9:c2:ca:70:b4:4d:69:30:dc:7f:
                    33:71:8e:a8:e7:26:eb:2d:fa:a1:6e:f5:a7:25:00:
                    c1:c4:ae:d7:44:b7:6e:0a:30:81:69:73:f4:f7:65:
                    18:ed:2f:ee:39:ee:93:4b:31:27:9f:6d:d9:96:e6:
                    67:b2:9a:ea:71:29:1a:c9:1e:3f:a8:c9:44:2c:a7:
                    7b:83:2b:e8:5b:2e:14:3b:c3:64:0e:f2:7c:56:29:
                    09:74:26:2c:2a:bf:43:87:98:9f:32:96:b1:88:9f:
                    1d:4b:22:cf:d2:cb:9a:e2:67:ec:5b:bb:8a:ab:64:
                    36:70:e0:81:23:73:26:52:c1:cd:d4:78:44:5d:1c:
                    5e:cb:97:6b:e5:48:53:cd:25:5a:32:98:4b:32:4c:
                    1a:2b:2c:f3:ca:13:7e:b7:91:d5:6c:85:2a:82:3b:
                    da:09:7d:29:f5:cd:23:a9:54:4b:b7:b1:e1:a7:e5:
                    ec:99:83:7d:5c:65:d3:5c:5e:08:35:27:de:be:9e:
                    2a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:64:2C:08:69:FA:E4:4A:DA:31:1B:82:25:D6:9C:C7:50:DE:EB:8B
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/k2QsCGn65EraMRuCJdacx1De64s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:a20::/44
                  2a06:a005:1320::/44

    Signature Algorithm: sha256WithRSAEncryption
         75:bd:46:a6:1f:92:05:bf:d9:d6:f5:36:f6:63:3a:31:93:ad:
         d6:25:2c:09:90:16:9b:05:95:a6:c0:20:ce:27:22:ad:bb:51:
         2d:4e:17:36:38:62:20:06:0d:08:5d:23:6c:5b:83:a1:2f:b4:
         c8:84:1c:b5:1a:c7:87:94:b8:71:5a:31:2b:6d:d8:d5:43:04:
         c5:e3:fc:98:1f:52:0b:5b:7a:97:88:69:6a:2d:56:9f:5f:f0:
         7b:de:68:8c:b7:d8:b6:f3:2c:10:df:36:f0:4c:5d:8d:ed:97:
         49:2b:86:28:f8:13:36:e3:e5:06:67:c5:27:e1:04:6f:f4:64:
         58:17:34:cf:9a:83:af:d8:fb:7f:31:0e:ff:35:ce:49:d9:33:
         88:7f:93:b9:16:1c:5b:ec:a3:91:b2:8a:5a:3b:7a:c7:4d:5b:
         91:f4:6c:b1:8c:c8:1e:ed:2f:b0:f4:86:21:d5:31:68:52:80:
         5c:a4:17:8f:22:19:fd:b9:2a:30:90:91:8f:83:b3:be:57:0e:
         7d:a2:23:6c:76:cf:d6:d3:8f:0a:0f:e3:a2:37:ee:31:2c:b3:
         6e:ae:9f:65:53:c9:61:ec:74:0b:4f:6e:a4:f7:ca:b7:c0:78:
         f2:63:6b:03:af:2f:ce:19:16:64:7f:fd:91:d2:a1:77:49:dd:
         6d:9c:81:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----