Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/m0LpmBj4v6uRB6QvSwMP25W5Vwo.roa
File:                     m0LpmBj4v6uRB6QvSwMP25W5Vwo.roa (raw, json)
Hash identifier:          rgdsDDi6Vm7AtsU4dRue6B9PHiNshNQZjN9BllaaUPU=
Subject key identifier:   9B:42:E9:98:18:F8:BF:AB:91:07:A4:2F:4B:03:0F:DB:95:B9:57:0A
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018355EE1C4857B8AC0173BE534FE488E8B5
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/m0LpmBj4v6uRB6QvSwMP25W5Vwo.roa
Signing time:             Mon 19 Sep 2022 13:26:51 +0000
ROA not before:           Mon 19 Sep 2022 13:26:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     56808
IP address blocks:        2a06:a005:1273::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:55:ee:1c:48:57:b8:ac:01:73:be:53:4f:e4:88:e8:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep 19 13:26:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9b42e99818f8bfab9107a42f4b030fdb95b9570a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4d:a8:b2:ec:6b:65:38:7f:2e:78:1a:8c:1b:
                    9c:c9:6c:90:56:62:37:66:30:d8:be:a2:6a:6a:e6:
                    77:af:3a:03:7a:2e:13:58:7d:63:19:14:83:24:38:
                    f2:5b:e8:76:6a:3c:ba:ec:b3:94:2e:19:e3:df:23:
                    dc:13:bc:86:c6:22:5b:bc:87:c6:8d:eb:67:58:ca:
                    9b:d8:c5:f7:c6:55:73:2f:a8:67:ee:b0:5b:5e:9a:
                    0d:69:da:fe:71:d8:ee:d9:1a:42:d9:ba:9d:61:d4:
                    e4:60:72:07:11:a8:05:f3:5e:d9:e6:9e:4e:64:74:
                    59:25:d2:b3:9f:6d:a7:5b:4b:94:cb:d6:86:88:52:
                    ad:71:e0:61:26:3a:54:df:a0:13:80:58:59:c9:ee:
                    59:5c:14:d2:57:38:55:78:01:d3:53:7b:22:aa:fc:
                    af:4e:d0:3a:e2:f2:a0:62:4a:76:9e:27:80:21:42:
                    8a:e7:4c:2f:c7:36:93:4f:26:79:17:14:7a:70:eb:
                    39:ca:38:bb:61:58:b6:cb:36:72:31:c4:c4:dc:6c:
                    7d:75:8e:f1:3b:e0:77:c6:09:c7:09:53:78:79:7a:
                    54:4e:c9:d2:08:80:ed:a8:e8:1c:f4:a0:53:20:79:
                    94:0a:94:5b:3c:e7:2a:5a:76:e9:1b:99:4e:88:2f:
                    8d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:42:E9:98:18:F8:BF:AB:91:07:A4:2F:4B:03:0F:DB:95:B9:57:0A
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/m0LpmBj4v6uRB6QvSwMP25W5Vwo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1273::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:59:1c:72:f7:3b:82:97:98:eb:9c:dc:d8:f7:89:95:1d:43:
         1f:9e:36:93:77:db:97:bf:c9:47:35:b1:5e:8c:48:3b:ac:31:
         13:fd:d3:dd:03:58:ba:76:20:a6:d3:60:b4:3a:0c:20:26:df:
         c6:25:57:da:b9:db:bd:4c:92:db:94:5e:a9:e5:dd:93:b6:e9:
         47:22:15:f8:74:db:50:b1:46:77:c5:0e:c6:e5:3d:77:bf:22:
         31:07:83:a9:02:7c:1a:32:ea:2d:19:e3:86:6c:12:31:87:d6:
         18:a9:c0:bf:56:7a:62:1a:50:a6:86:1a:78:8d:b1:ca:37:3d:
         c0:c6:2b:27:5f:e9:b2:13:6d:f5:e6:57:d1:a2:51:a3:0d:5f:
         13:66:f2:65:19:fb:3f:fa:ca:87:c0:e8:52:d8:81:f9:7e:09:
         ea:79:51:15:8c:1d:4d:f0:0f:ca:53:4b:3e:ec:ee:54:a2:71:
         bd:90:07:f1:8c:ad:ef:16:5e:8b:62:b7:ee:aa:17:83:69:2c:
         3e:7e:ed:ca:7c:a3:cf:42:26:8b:b6:f9:7b:4f:7f:40:cc:ad:
         52:f4:c4:cb:da:73:f4:d5:a0:0d:3d:63:7d:34:02:38:c8:b3:
         e5:0a:6e:05:ba:fc:e7:4a:0a:6e:80:75:85:91:4c:eb:68:a2:
         35:d0:15:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----