Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/mpwwyDGnTFvCNsPw9VaMf6AyC2c.roa
File:                     mpwwyDGnTFvCNsPw9VaMf6AyC2c.roa (raw, json)
Hash identifier:          EBjPm6fvrq/pooFO+PWpgU7D9ebVTEchWdBVz0DJuNw=
Subject key identifier:   9A:9C:30:C8:31:A7:4C:5B:C2:36:C3:F0:F5:56:8C:7F:A0:32:0B:67
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018272EF0B47D2AFE57C0FDFAD184CA48B84
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/mpwwyDGnTFvCNsPw9VaMf6AyC2c.roa
Signing time:             Sat 06 Aug 2022 11:34:04 +0000
ROA not before:           Sat 06 Aug 2022 11:34:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203472
IP address blocks:        2a06:a005:600::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:72:ef:0b:47:d2:af:e5:7c:0f:df:ad:18:4c:a4:8b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug  6 11:34:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9a9c30c831a74c5bc236c3f0f5568c7fa0320b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1b:03:bd:08:22:1e:ee:ac:e2:30:3e:9a:1c:
                    10:8e:cf:f4:4e:c8:9f:fa:17:31:23:21:f9:58:4b:
                    a7:99:e1:d0:ca:aa:33:5a:05:ba:e9:fd:4a:a4:2d:
                    56:cc:aa:47:63:f5:bd:74:1a:70:b6:80:8c:5a:71:
                    75:da:2b:7d:80:63:c3:02:5e:de:1e:a5:f1:33:24:
                    16:23:06:46:91:77:fd:ec:9e:21:38:ff:5c:03:fe:
                    f1:f6:c3:33:bc:54:26:96:39:e2:64:33:19:77:b5:
                    a9:8a:8a:fd:00:06:4f:1b:d2:82:de:6d:96:0d:52:
                    d5:a7:9b:a0:e8:23:a6:80:45:e2:a7:ba:c3:79:89:
                    45:61:2c:00:04:47:26:bf:5e:fa:73:04:d2:45:73:
                    72:2d:6d:5d:65:6a:b1:d9:fe:6e:3f:d4:f9:e5:19:
                    01:5b:8c:f6:5d:a1:47:46:45:20:4b:7b:78:54:3f:
                    d4:c9:c5:7e:5b:8d:df:5a:09:e9:07:0a:3a:48:9f:
                    52:85:17:2d:24:24:6c:50:52:ed:06:1d:52:7a:03:
                    d3:55:19:88:19:82:a0:f3:e4:fd:4a:70:dc:9c:e4:
                    0c:1d:cc:0c:d6:7e:78:7b:83:cb:9c:8e:f0:73:35:
                    aa:a4:b4:01:fb:9f:a0:0e:ad:1c:1c:bd:c7:58:6c:
                    0a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:9C:30:C8:31:A7:4C:5B:C2:36:C3:F0:F5:56:8C:7F:A0:32:0B:67
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/mpwwyDGnTFvCNsPw9VaMf6AyC2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:600::/44

    Signature Algorithm: sha256WithRSAEncryption
         4e:a8:45:ba:b2:c2:24:4c:2d:71:a3:19:52:02:52:03:b8:93:
         e3:4d:c5:f7:e2:cd:56:a1:c0:01:ed:cc:6f:f7:42:36:bf:82:
         ee:4c:4d:90:e1:93:19:7a:c2:97:15:ad:de:89:dc:4c:f8:f0:
         6d:29:e2:9f:94:39:c1:a9:53:f2:5a:ac:b4:15:c0:9e:19:9a:
         ce:d5:4a:78:54:97:3d:4b:c3:fc:75:64:73:a1:44:f2:f8:2d:
         d7:f0:c4:55:6c:f0:b9:15:e7:39:52:06:0c:2b:3b:42:c2:8c:
         d0:39:b3:ab:18:28:0b:6b:9b:08:a1:35:e3:01:c3:fa:00:62:
         05:7f:2c:e1:7c:ec:8f:e4:6c:8a:57:ba:3e:ce:58:46:0a:ae:
         2a:cd:91:a5:f9:1e:b4:98:53:b0:ae:cf:82:61:b2:b2:ef:2d:
         68:e0:26:b5:60:8a:68:11:97:19:26:2b:ed:eb:53:0a:67:63:
         c7:2b:40:52:08:5b:81:ca:b1:57:6e:79:8b:fe:04:41:43:ff:
         77:16:0f:23:43:23:ad:37:75:72:ee:51:5d:22:e5:92:8e:22:
         4a:77:20:4c:1f:79:52:af:d0:67:34:6b:b0:8c:16:9f:06:e1:
         c4:44:88:0b:33:36:c5:42:e7:08:cf:b6:af:34:8c:e8:db:4c:
         6c:6e:56:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----