Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/m_zRGXaSAOqdwEWXtpssOldmgIs.roa
File:                     m_zRGXaSAOqdwEWXtpssOldmgIs.roa (raw, json)
Hash identifier:          Ir0b3JNOtI5pzh9F5D2Qv9+1Z2lbqaUFnm9r0wY37Y4=
Subject key identifier:   9B:FC:D1:19:76:92:00:EA:9D:C0:45:97:B6:9B:2C:3A:57:66:80:8B
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184CD7E127494F1F6F8610852F1E3590B34
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/m_zRGXaSAOqdwEWXtpssOldmgIs.roa
Signing time:             Thu 01 Dec 2022 11:41:42 +0000
ROA not before:           Thu 01 Dec 2022 11:41:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211390
IP address blocks:        2a06:a005:2370::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:cd:7e:12:74:94:f1:f6:f8:61:08:52:f1:e3:59:0b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  1 11:41:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9bfcd119769200ea9dc04597b69b2c3a5766808b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b7:ad:b8:e7:66:5b:0a:eb:9d:dd:98:b3:b5:
                    5c:f3:27:ca:34:9e:bb:70:a9:dc:13:f0:e7:95:76:
                    64:8c:1e:26:92:eb:b1:f1:af:36:2a:e6:83:48:ec:
                    de:5e:52:67:54:f4:68:19:20:5e:cf:1c:c7:e0:cb:
                    a1:5a:10:45:f1:99:67:60:1b:8e:4e:45:7f:de:b7:
                    43:65:e3:52:8d:17:83:1b:b7:c1:2f:c7:54:76:2f:
                    cf:3d:37:57:b4:47:07:ae:7c:46:d7:d9:fd:1b:9f:
                    45:77:04:49:c3:ab:8c:1d:ab:c0:f5:8c:25:e1:ab:
                    70:a0:9c:e5:ab:8c:95:79:1c:e6:75:f6:57:a2:f6:
                    4c:90:3f:0c:c1:ae:ce:81:9e:ea:c5:d3:89:29:16:
                    8e:83:4a:fc:29:aa:f9:47:e8:dd:a4:19:5a:9c:98:
                    91:1e:b2:1e:7b:9e:e9:6e:13:6d:40:37:b2:b8:78:
                    a3:fb:fd:58:d3:1f:82:f4:22:4c:23:ed:d3:79:6c:
                    ef:b7:55:c3:88:53:8c:73:7e:57:4c:9b:1d:50:c5:
                    99:66:33:7f:c9:71:89:19:f3:63:9d:c6:fd:22:95:
                    28:dc:65:72:ea:63:c1:7b:89:93:bb:f6:b8:b5:88:
                    a2:41:d6:6b:a2:62:24:3b:31:cb:7b:e1:20:33:39:
                    84:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FC:D1:19:76:92:00:EA:9D:C0:45:97:B6:9B:2C:3A:57:66:80:8B
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/m_zRGXaSAOqdwEWXtpssOldmgIs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2370::/44

    Signature Algorithm: sha256WithRSAEncryption
         8f:da:f0:ce:f9:48:3b:4c:e3:ba:8d:77:af:91:ea:ce:1d:86:
         ad:09:9d:6f:65:f0:9f:9e:94:1c:f9:e2:a3:ae:86:7d:bb:8a:
         98:f4:f4:2f:77:12:01:6a:de:13:5d:8d:ed:bc:c3:b7:f0:3b:
         7e:ce:9e:35:d4:77:ac:2e:7d:20:76:ce:2c:92:c5:ce:5a:00:
         ff:d3:1d:7e:35:51:73:96:c4:b7:e4:6f:e9:7e:4a:4e:ca:11:
         a6:cb:de:72:48:6b:db:25:54:6d:35:67:c2:f3:27:b6:06:3c:
         90:c2:46:8d:1b:b1:42:48:88:3a:75:3f:55:d1:a0:9c:da:8d:
         e8:53:79:12:e6:2b:65:5e:9b:1c:83:8c:45:46:34:0e:e3:f9:
         bc:0e:cb:a5:d4:08:8a:a4:53:94:9f:e8:ac:c8:b8:0d:8c:25:
         c4:86:aa:05:7f:ba:ec:1e:fb:a1:07:0f:e6:42:0c:b2:87:b7:
         8d:b7:24:4b:e2:24:c8:0a:6b:2a:e0:2c:f6:6c:8f:47:0a:c8:
         fb:5e:a2:d6:c7:48:af:2c:0a:e8:d0:02:f1:96:2b:67:9b:58:
         67:e8:05:00:05:a7:ca:e1:d4:47:bb:8a:91:52:26:6e:96:2b:
         46:98:65:a3:5e:e8:60:25:08:4d:c8:47:05:54:36:f5:84:9a:
         5a:6a:5d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----