Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kuHrR4wkkTPVq_V-UPSXymFMF4c.roa
File:                     kuHrR4wkkTPVq_V-UPSXymFMF4c.roa (raw, json)
Hash identifier:          tEZzsLenH1Je+wuuTHWYTGiOTpPLjnrCIxNwOynrRUU=
Subject key identifier:   92:E1:EB:47:8C:24:91:33:D5:AB:F5:7E:50:F4:97:CA:61:4C:17:87
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01821994E1A9DFD4CFEFD3E5C54C3C99AD71
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kuHrR4wkkTPVq_V-UPSXymFMF4c.roa
Signing time:             Wed 20 Jul 2022 03:09:23 +0000
ROA not before:           Wed 20 Jul 2022 03:09:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206444
IP address blocks:        2a07:54c0::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:19:94:e1:a9:df:d4:cf:ef:d3:e5:c5:4c:3c:99:ad:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 20 03:09:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=92e1eb478c249133d5abf57e50f497ca614c1787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:45:1d:80:44:b0:ca:d2:40:05:07:dc:ab:99:
                    3b:db:02:50:fe:3a:ad:54:58:fd:9c:e1:fb:91:ee:
                    b2:8f:9c:71:b4:34:cf:c4:25:04:52:64:d7:a8:5b:
                    06:79:b3:6a:33:1a:b3:1c:b3:cc:f6:fd:bd:4f:77:
                    5f:68:36:47:80:df:8f:90:ec:b1:85:4e:de:c6:87:
                    9d:88:77:b0:14:b3:cd:61:a7:b8:ce:44:e5:36:11:
                    6a:5b:5e:b1:af:bd:19:0e:7e:86:ac:9d:a2:c9:58:
                    2c:75:ce:9e:82:3c:db:57:6d:98:a6:8e:fd:6e:31:
                    d3:00:24:fd:12:a6:58:13:be:3b:93:6b:a0:90:03:
                    e6:bc:c6:cf:a6:d2:35:0b:e7:30:d7:65:16:ff:52:
                    b5:3f:f3:5c:80:64:bf:f2:08:02:1d:9f:61:21:51:
                    3b:7b:d7:86:01:54:79:d7:a9:2b:35:60:16:1b:36:
                    95:e6:4d:44:9d:88:71:03:4d:77:c0:92:c1:f4:d3:
                    60:36:61:d8:dd:11:7b:7d:73:48:ef:7c:5b:10:68:
                    f2:3b:e5:07:8a:b6:59:47:09:01:ef:19:8d:a4:d6:
                    ae:ef:70:65:c4:2f:f7:9d:63:63:66:e7:76:f0:eb:
                    ec:c8:65:f9:73:05:9b:13:65:0b:e7:bf:3c:72:ad:
                    4f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E1:EB:47:8C:24:91:33:D5:AB:F5:7E:50:F4:97:CA:61:4C:17:87
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kuHrR4wkkTPVq_V-UPSXymFMF4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         19:dd:3e:94:57:a0:3f:1b:99:f0:e5:9e:ea:52:af:fe:70:af:
         57:9a:54:8d:28:ee:eb:52:1a:7c:ed:56:3b:d4:29:48:be:4f:
         9b:ca:6d:6e:2f:82:04:af:ef:fc:d6:17:25:51:65:35:50:03:
         06:2d:23:91:89:0f:8f:df:2a:66:5d:24:84:8a:01:f7:93:96:
         ff:23:1b:cd:2a:0c:8b:4a:4c:4f:7c:fb:7b:78:ed:99:8e:88:
         10:38:a8:8f:10:bc:2d:4c:d1:80:84:d7:71:1c:58:84:ae:1a:
         8a:d0:db:2e:01:0a:05:40:ac:4f:94:ab:df:9a:f1:1c:75:53:
         eb:ab:d9:f1:99:9a:6d:ce:68:b7:2c:b0:3e:de:86:ab:21:2c:
         df:90:cd:f9:43:62:e2:81:b3:f7:e5:10:be:fc:cd:80:1e:72:
         d5:da:b4:d6:ed:05:f3:05:45:57:60:3a:68:42:35:dd:a0:73:
         ee:01:33:19:64:86:f3:4d:2f:76:2c:91:95:a3:2b:5c:83:4a:
         82:00:8d:1f:f6:17:d4:71:b8:2f:1d:ba:1e:5b:75:07:61:c0:
         7f:a3:d3:b1:2a:84:c2:88:a9:d2:24:d8:64:e8:96:88:d5:76:
         b1:a6:89:6e:50:91:fa:d3:63:e1:34:cf:81:c5:a3:ba:28:f0:
         7d:65:2a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----