Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/lF5yOLLRy_JO0uRrWqtYaFW3gFg.roa
File:                     lF5yOLLRy_JO0uRrWqtYaFW3gFg.roa (raw, json)
Hash identifier:          /RWECprpmCkkL7VpTVfrYl1/Sj/HXOs1sOTyGjMEDVw=
Subject key identifier:   94:5E:72:38:B2:D1:CB:F2:4E:D2:E4:6B:5A:AB:58:68:55:B7:80:58
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       18C5E0FE
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/lF5yOLLRy_JO0uRrWqtYaFW3gFg.roa
Signing time:             Tue 26 Apr 2022 18:12:43 +0000
ROA not before:           Tue 26 Apr 2022 18:12:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205431
IP address blocks:        2a06:a002::/32 maxlen: 48
                          2a06:a005:5e2::/48 maxlen: 48
                          2a06:a005:650::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415621374 (0x18c5e0fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 26 18:12:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=945e7238b2d1cbf24ed2e46b5aab586855b78058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1d:89:75:42:8d:40:9c:6d:4e:2f:24:6e:b7:
                    dd:ba:16:7c:b6:0c:0d:d5:77:f7:10:24:ef:87:d7:
                    c8:f1:6f:f4:bc:9e:8c:30:ae:9b:c6:43:9c:cd:5a:
                    04:dc:80:15:ae:45:f2:97:51:be:2a:7b:71:0c:09:
                    34:14:ea:5f:34:15:a8:08:d2:e9:ca:97:98:60:09:
                    ec:9a:9c:8f:5b:d2:2e:23:4d:1f:93:32:ef:ca:b0:
                    e5:75:ba:8c:16:7f:6d:09:c5:d5:5d:a6:94:92:32:
                    20:42:a5:5c:2a:21:9b:fd:81:d2:dc:02:ea:3e:56:
                    15:9e:44:6c:f8:e9:9a:f9:e5:06:d3:a2:18:c1:02:
                    ec:ea:88:60:24:dd:71:4d:1a:e1:b0:9d:91:c5:86:
                    45:a2:54:8f:27:67:b8:68:d2:cf:06:f3:f8:e3:4d:
                    21:1f:12:44:83:2d:4b:5f:3a:6c:b3:af:58:5d:86:
                    7f:fa:8e:fa:89:f5:cf:5d:ae:f1:18:08:48:3b:05:
                    74:50:c7:53:80:5e:4b:9e:13:aa:b9:82:e2:39:54:
                    24:b3:9b:0f:76:bf:d4:48:29:08:40:b8:fd:45:04:
                    81:57:43:e2:ee:ad:50:37:ae:9e:ab:4d:57:31:bc:
                    d5:34:47:a9:69:83:22:83:68:cb:c5:ff:8e:a4:d4:
                    63:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:5E:72:38:B2:D1:CB:F2:4E:D2:E4:6B:5A:AB:58:68:55:B7:80:58
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/lF5yOLLRy_JO0uRrWqtYaFW3gFg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a002::/32
                  2a06:a005:5e2::/48
                  2a06:a005:650::/44

    Signature Algorithm: sha256WithRSAEncryption
         05:69:c8:75:af:6f:43:4c:af:a3:be:58:2e:ea:64:18:aa:d7:
         16:11:d9:00:f0:e5:13:ab:9a:eb:1b:97:69:fa:ca:37:1f:d3:
         de:6d:93:4f:a8:21:0a:cd:b1:ab:5f:5a:31:b6:3d:56:14:30:
         a7:b6:ae:67:11:05:41:a6:c5:b7:2f:ab:57:2a:aa:36:9a:b4:
         e0:2f:dd:52:14:d5:45:c3:11:e0:68:36:ce:6f:52:46:4f:2b:
         3f:22:73:01:c6:0a:42:ea:30:45:70:9f:55:04:0d:55:64:9c:
         6f:e2:d0:df:da:6a:36:fc:f9:70:3f:e8:3a:ab:81:58:ad:c4:
         fc:93:5a:5f:03:61:64:89:9a:cb:e4:a0:da:a6:14:f8:83:46:
         55:4f:9f:6f:ea:2e:9b:59:a9:4b:45:d7:47:2e:29:59:85:7d:
         f7:0c:74:76:38:cf:b5:e5:ee:0a:b8:f9:88:ff:57:66:15:ba:
         43:cf:87:e1:97:c9:ed:f8:da:8c:93:29:d5:cf:6b:eb:bd:48:
         3c:ef:39:a0:7c:d8:2c:ef:a8:5c:30:e2:00:b8:b1:db:13:14:
         dc:54:cd:0c:33:57:b1:e9:35:12:4d:91:9a:b7:e7:63:8d:a0:
         13:30:38:aa:fd:09:dc:e0:3c:be:55:a3:cc:9e:9f:d5:0a:48:
         41:c1:f7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----