Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/mw3YbFh4ooKUrtdR4j6MAg9YfNU.roa
File:                     mw3YbFh4ooKUrtdR4j6MAg9YfNU.roa (raw, json)
Hash identifier:          3OnqUFBJ/DI62StWnuiC/zJbTNtByIFXGAxbYSksmHo=
Subject key identifier:   9B:0D:D8:6C:58:78:A2:82:94:AE:D7:51:E2:3E:8C:02:0F:58:7C:D5
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182C119E784677B64EE9D6140B9B92A2ADA
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/mw3YbFh4ooKUrtdR4j6MAg9YfNU.roa
Signing time:             Sun 21 Aug 2022 15:51:16 +0000
ROA not before:           Sun 21 Aug 2022 15:51:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204160
IP address blocks:        2a06:a005:18b0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:c1:19:e7:84:67:7b:64:ee:9d:61:40:b9:b9:2a:2a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug 21 15:51:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9b0dd86c5878a28294aed751e23e8c020f587cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ac:34:31:dd:93:1f:c6:df:9c:85:a9:9b:cb:
                    84:75:dc:be:04:15:0f:0f:d3:5b:5a:52:cc:39:cd:
                    43:96:f2:00:da:83:17:bf:fe:c5:eb:bc:29:a9:9f:
                    38:43:0b:b6:50:6c:3b:40:1f:38:aa:2a:54:14:34:
                    d8:cc:46:35:95:d8:cb:6c:1a:5e:7c:d9:36:73:c9:
                    76:47:40:5e:58:b7:55:99:31:c1:1f:d1:a0:7e:3a:
                    44:08:e9:cc:cf:94:67:af:2d:78:86:47:80:c4:75:
                    28:9a:3b:12:05:87:a1:5f:16:08:76:54:8e:c8:ca:
                    b7:b9:b9:85:37:1f:0b:2a:c5:67:62:90:49:ae:07:
                    16:3c:56:d0:90:4d:7c:db:1d:cb:cc:de:81:36:dc:
                    e1:98:71:50:27:21:19:2a:64:13:64:f8:8a:4c:76:
                    65:e1:0d:3e:aa:a2:44:cb:1c:29:e3:2e:ad:fb:3f:
                    6d:e1:90:5a:f1:64:8c:d3:43:29:cc:43:75:62:82:
                    e8:3a:c3:c6:06:6c:36:cc:04:72:93:d8:b1:af:09:
                    42:ff:38:d0:b5:0a:20:dc:3f:58:5a:f0:46:07:7c:
                    98:e7:2f:b5:74:a3:bd:8b:1a:d6:2d:d3:f7:03:e4:
                    bc:c1:e8:1d:98:cc:ab:03:55:ed:ad:f1:61:29:66:
                    ed:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0D:D8:6C:58:78:A2:82:94:AE:D7:51:E2:3E:8C:02:0F:58:7C:D5
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/mw3YbFh4ooKUrtdR4j6MAg9YfNU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:18b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         7f:f4:83:59:d0:70:2c:8f:2c:dd:97:93:23:4d:76:da:e2:e9:
         7f:fe:73:a9:5f:ab:c9:a2:4f:c5:a8:4a:17:2c:47:8b:27:f7:
         e3:fe:d5:45:2d:62:15:5a:0d:27:6b:11:c0:59:91:4f:b3:c3:
         b8:9a:d6:10:67:9c:cf:19:5b:38:d2:63:23:ce:69:c6:26:7f:
         1e:ef:3c:3e:8b:8d:4c:82:01:57:d6:e4:7b:cd:43:54:c4:92:
         cc:34:0a:d4:21:54:a8:27:3d:20:fb:6a:ce:2d:19:bc:34:4a:
         80:61:d8:06:92:e3:7d:11:99:0b:c9:76:81:57:c4:06:61:57:
         eb:bd:76:24:df:83:08:87:dd:31:b8:ca:19:cf:ea:1b:89:3f:
         8b:2b:d2:25:32:29:57:1a:35:59:5c:5e:1f:3b:3c:39:12:b8:
         84:2c:58:ed:7c:31:7f:4f:79:a0:61:e4:b3:67:80:0b:0e:47:
         53:56:18:41:0a:2c:b3:53:67:87:71:18:77:3a:2e:01:15:70:
         ef:c3:a8:d1:9c:fe:13:7c:4a:e8:83:ce:96:6b:82:9d:62:33:
         29:f2:9c:61:c1:6c:7a:97:be:00:24:41:bb:c6:08:fa:71:84:
         ab:1b:d3:57:90:fe:51:db:95:4e:88:8f:4d:b2:f2:e9:f0:e9:
         64:85:01:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----