Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/mw6-q9F8op8qmqA_t-RV0FxCHPY.roa
File:                     mw6-q9F8op8qmqA_t-RV0FxCHPY.roa (raw, json)
Hash identifier:          g64aHtsPBVz2GvPCp2HSrjnHxdgONY2PXiy32XOopFI=
Subject key identifier:   9B:0E:BE:AB:D1:7C:A2:9F:2A:9A:A0:3F:B7:E4:55:D0:5C:42:1C:F6
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01828D32583B93D4A4168067BC7B4F970EE0
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/mw6-q9F8op8qmqA_t-RV0FxCHPY.roa
Signing time:             Thu 11 Aug 2022 13:57:42 +0000
ROA not before:           Thu 11 Aug 2022 13:57:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     398057
IP address blocks:        2a06:a005:5f4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:8d:32:58:3b:93:d4:a4:16:80:67:bc:7b:4f:97:0e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug 11 13:57:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9b0ebeabd17ca29f2a9aa03fb7e455d05c421cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fc:b1:fe:98:2c:0d:b5:4e:e3:a6:1f:32:4f:
                    28:25:7d:29:5b:4a:68:de:33:88:b3:52:4a:69:e2:
                    d3:10:28:33:1b:61:77:d8:9c:66:88:9b:7e:e2:5a:
                    fb:c6:21:29:c7:ea:d1:a6:44:e2:44:87:7e:24:56:
                    d7:1a:46:d8:ae:d3:6c:37:ee:8f:f2:a6:2d:e5:d7:
                    4f:fd:ac:56:16:87:d8:e9:c9:9e:70:43:8c:d9:d2:
                    34:12:c6:13:c9:62:10:96:9c:a9:5f:aa:09:22:1f:
                    d3:80:60:a2:b3:0c:d4:59:c7:41:80:49:30:10:04:
                    98:b3:4d:63:5c:c7:21:ab:09:24:8b:15:5f:47:da:
                    c9:2d:a7:85:61:08:57:df:ee:8b:58:35:9a:27:89:
                    3a:cb:0e:ff:5a:35:35:0b:fd:95:99:d5:14:36:4c:
                    43:cb:6c:ef:50:83:b1:28:1e:9c:22:a8:41:3f:da:
                    a2:a0:1d:e7:f8:b1:32:eb:58:01:08:df:b2:90:62:
                    69:78:6d:ff:48:0e:47:f8:e8:70:79:3b:8f:38:8a:
                    76:69:60:b8:1f:f6:d4:f1:0c:7c:47:ab:8e:0e:e8:
                    83:67:d6:ae:70:57:4f:e5:00:95:15:76:a9:7c:26:
                    a0:79:51:cd:b5:36:e5:a4:29:e6:08:74:08:f8:84:
                    25:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0E:BE:AB:D1:7C:A2:9F:2A:9A:A0:3F:B7:E4:55:D0:5C:42:1C:F6
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/mw6-q9F8op8qmqA_t-RV0FxCHPY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5f4::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:d7:14:af:53:ed:ee:c9:50:9f:2c:f6:69:eb:76:b6:fe:d4:
         27:e0:00:c3:3f:90:8d:d6:ac:b7:07:11:41:8a:40:6d:f9:bb:
         e6:8b:fb:74:7c:e0:7f:f3:f5:93:d7:7a:bb:0e:34:54:a9:4c:
         14:5c:6a:6b:8b:03:1d:99:96:6e:2e:b9:a7:d0:3d:f0:b8:a3:
         82:ee:2c:97:5c:61:a1:70:3c:f1:38:72:01:86:31:be:0c:22:
         cf:a5:9d:c9:d3:ef:48:31:49:8e:fd:f3:f7:4f:46:b6:5a:53:
         a6:7b:84:f3:5b:ae:9f:4b:28:f0:38:5c:4f:1e:bd:0f:3e:8b:
         99:60:3f:d7:73:de:38:d0:b4:dc:35:a0:cd:bc:4e:e5:7d:db:
         cd:f7:73:f0:21:da:5c:72:43:81:2c:b4:bc:52:a9:1a:2c:b5:
         0a:0c:fa:60:75:bc:78:05:35:14:f3:4a:19:5a:a5:47:66:6a:
         a1:78:69:c2:e5:13:1d:ed:c5:c2:ca:62:3a:21:bc:36:15:0b:
         28:9b:e8:11:01:39:07:59:24:fb:f9:fe:ad:42:da:ac:5b:53:
         a2:03:9a:88:a7:3f:57:34:2d:ec:c8:ac:e6:00:e2:92:8f:35:
         25:d9:42:48:a5:96:83:8f:f2:58:ce:74:f5:c1:6f:71:e5:0c:
         bf:10:da:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----