Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/lAsnjGtalKgvfubYZt4ECk0qdd8.roa
File:                     lAsnjGtalKgvfubYZt4ECk0qdd8.roa (raw, json)
Hash identifier:          IV/r7g0AfY+4dJWpzZ+nt8Ezy5nu7zlnnQS43n9sFGw=
Subject key identifier:   94:0B:27:8C:6B:5A:94:A8:2F:7E:E6:D8:66:DE:04:0A:4D:2A:75:DF
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1B3FBE85
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/lAsnjGtalKgvfubYZt4ECk0qdd8.roa
Signing time:             Wed 22 Jun 2022 23:30:32 +0000
ROA not before:           Wed 22 Jun 2022 23:30:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204466
IP address blocks:        2a06:a005:ed0::/44 maxlen: 48
                          2a06:a005:d2b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 457162373 (0x1b3fbe85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun 22 23:30:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=940b278c6b5a94a82f7ee6d866de040a4d2a75df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ec:16:ec:28:d1:e8:b5:d3:51:78:62:f8:71:
                    32:3a:d6:4e:b9:0d:d6:d7:69:20:d6:57:56:a7:23:
                    82:7d:c2:32:1a:4b:83:5c:92:ff:7b:11:bf:9d:88:
                    f7:c9:a2:8c:db:20:02:37:a2:f0:f4:57:d0:09:9f:
                    94:90:78:d4:c6:dd:dc:75:17:1c:75:35:eb:a0:8f:
                    44:68:cd:2b:36:26:d0:32:4f:7b:35:30:49:39:d4:
                    60:2f:d4:fb:f2:9d:54:72:eb:3b:8c:1b:f6:a8:06:
                    5f:a6:a8:08:57:23:15:12:ba:4b:1f:10:84:ed:54:
                    92:c8:18:4b:59:8c:e1:48:f5:c0:68:37:6e:26:95:
                    71:b9:6d:40:7d:ff:52:46:c2:61:a1:02:3d:20:ef:
                    5d:bb:fe:de:79:8d:47:5e:14:83:35:52:cc:f7:63:
                    01:23:b6:ba:f0:86:18:8c:2c:47:69:01:a1:a4:15:
                    1e:3c:b4:d4:5d:7f:f8:e2:b4:eb:23:58:88:24:fb:
                    be:83:4b:bb:7a:95:c6:a5:06:8c:92:26:8d:2e:98:
                    91:05:f4:71:66:2d:6c:ce:f3:a3:fa:c7:68:52:2b:
                    9b:aa:f3:2d:8a:fb:e5:3b:23:59:8d:5c:7d:08:ff:
                    0b:e7:55:18:3b:da:45:ac:d5:20:7f:29:f5:cc:f8:
                    fd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0B:27:8C:6B:5A:94:A8:2F:7E:E6:D8:66:DE:04:0A:4D:2A:75:DF
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/lAsnjGtalKgvfubYZt4ECk0qdd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d2b::/48
                  2a06:a005:ed0::/44

    Signature Algorithm: sha256WithRSAEncryption
         02:1f:71:36:30:c3:72:db:25:9f:62:fa:c4:f0:b3:a3:45:0b:
         78:9a:f1:30:68:0f:93:67:4d:6d:71:9e:50:54:a0:9a:48:41:
         03:c4:9e:7c:da:b7:b8:84:cc:13:0e:ef:9f:e4:35:0f:a9:61:
         fb:ef:7e:3d:fd:ad:c0:42:81:9c:63:b2:46:31:12:43:3d:21:
         86:66:c0:04:46:7e:18:7b:e4:9f:2b:72:b2:a7:4d:98:92:85:
         36:73:9f:9e:3b:2b:20:eb:99:98:4b:e3:74:30:16:7b:ad:b6:
         31:0e:ff:15:62:01:85:d9:d8:79:af:be:2d:29:d8:e2:f3:4c:
         5e:66:0d:bb:06:04:42:2a:67:7e:9e:f6:61:ca:5a:27:74:5c:
         34:b8:ea:b4:7f:3e:68:55:33:1b:a3:a8:0a:71:f0:5a:56:a1:
         98:b3:ef:64:a6:dc:d1:5e:e8:ea:1c:4f:c5:d8:54:b8:dc:44:
         c1:f3:42:84:78:a4:5b:5a:c7:be:43:cf:b2:ff:ab:6c:46:55:
         d8:25:3f:22:c3:74:44:ac:ac:eb:50:ed:53:98:62:c3:33:19:
         91:72:0e:8b:a0:32:64:d8:8c:63:37:cf:26:e7:c6:74:f9:87:
         d4:3f:77:6e:b5:e6:6a:9f:cb:83:9f:79:b4:b7:c8:7e:a9:7b:
         51:67:81:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----