Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/n401Ow1Z3rHp0RSfvp67Rbn6wNI.roa
File:                     n401Ow1Z3rHp0RSfvp67Rbn6wNI.roa (raw, json)
Hash identifier:          T84C54yQSq42hPf/Bs664n2GnnqC1m5ag+INedq+MkQ=
Subject key identifier:   9F:8D:35:3B:0D:59:DE:B1:E9:D1:14:9F:BE:9E:BB:45:B9:FA:C0:D2
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183D3D5089416B801AED0190A360D378487
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/n401Ow1Z3rHp0RSfvp67Rbn6wNI.roa
Signing time:             Fri 14 Oct 2022 00:11:37 +0000
ROA not before:           Fri 14 Oct 2022 00:11:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44570
IP address blocks:        2a06:a004::/32 maxlen: 48
                          2a06:a000::/32 maxlen: 48
                          2a06:1280:1000::/36 maxlen: 48
                          2a06:a003::/32 maxlen: 48
                          2a06:a005::/32 maxlen: 48
                          2a06:a005:1a70::/44 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48
                          2a05:dfc7:1300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:d3:d5:08:94:16:b8:01:ae:d0:19:0a:36:0d:37:84:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 14 00:11:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9f8d353b0d59deb1e9d1149fbe9ebb45b9fac0d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a9:8b:9c:2b:3d:e7:1e:9f:39:b9:f8:b4:5c:
                    1d:27:61:89:18:5b:37:00:a0:39:56:37:09:ac:f3:
                    a5:a6:6d:d1:89:30:5b:40:cd:1c:a0:cb:d4:9a:03:
                    23:74:07:99:3b:14:b9:85:89:23:c6:16:e0:f6:a9:
                    bd:1b:52:93:85:6d:48:e4:1d:79:d4:7e:ff:f0:f2:
                    bc:32:b8:a5:c0:cf:eb:36:3d:2e:f6:91:c7:e0:fb:
                    fd:ad:ef:d1:eb:a2:ca:cb:83:f7:f4:9c:de:58:4b:
                    e3:e5:dd:9c:5b:cd:1d:6e:55:fb:20:be:93:cb:a1:
                    fb:89:41:a7:75:45:97:6f:35:e0:9d:46:55:d8:cb:
                    17:43:6e:1e:12:66:e1:23:19:62:ed:e3:74:f2:aa:
                    15:64:fb:8d:ce:67:6a:b0:a5:98:ec:fd:70:ea:f7:
                    02:7f:e4:b7:e8:98:1c:7c:3c:28:d2:a8:4e:d1:70:
                    f0:4d:dd:2d:f8:9e:f8:f5:13:a7:66:38:83:84:97:
                    f2:ad:ab:8c:db:64:72:b0:30:1e:bb:df:92:68:0e:
                    96:00:2e:8e:51:bf:44:c5:34:65:a2:b2:9a:f5:53:
                    fb:b7:39:81:29:7c:cc:44:40:46:05:6a:9d:69:67:
                    ac:a0:d9:bd:14:b1:be:26:e3:79:c7:58:a5:2d:87:
                    e6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8D:35:3B:0D:59:DE:B1:E9:D1:14:9F:BE:9E:BB:45:B9:FA:C0:D2
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/n401Ow1Z3rHp0RSfvp67Rbn6wNI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:1300::/40
                  2a06:1280:1000::/36
                  2a06:a000::/32
                  2a06:a003::-2a06:a005:ffff:ffff:ffff:ffff:ffff:ffff
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:66:8f:02:f8:85:dc:a4:72:95:e1:30:9a:1c:69:a2:d3:b0:
         ba:39:3c:f1:cb:44:f3:18:10:9a:c8:1b:83:5c:6b:1d:c9:bd:
         b8:47:3d:c1:67:d9:3c:8c:45:1d:05:d2:7f:ab:35:8d:8b:99:
         fc:99:45:a1:da:0d:73:d5:df:19:c6:3b:99:48:8b:b2:8d:73:
         0c:04:2c:e4:9c:28:16:86:c3:bf:7f:89:33:45:a9:4d:e9:9d:
         3c:c6:ea:13:e6:ff:86:aa:5a:91:5f:e2:2a:cf:56:28:44:0c:
         b8:5a:34:10:b0:77:18:5c:94:b7:60:1d:86:98:87:68:6e:50:
         bb:e5:7b:cd:ab:a2:72:08:94:68:6d:82:50:a7:3e:df:c4:7a:
         0e:f6:0d:e7:a8:b0:7f:92:bb:1e:4f:89:e4:ee:24:4f:c5:a3:
         37:77:27:c3:27:bc:ba:a4:ae:dc:d0:a6:19:dc:c0:66:a0:67:
         0f:b4:81:cf:c4:4d:4b:ac:b4:64:af:60:2b:5f:03:89:21:be:
         97:8e:6b:91:78:e8:ea:07:75:92:2a:b5:7b:a5:17:5a:39:d6:
         7d:82:33:52:3e:60:9a:11:6c:d9:55:71:e9:78:ed:bd:62:8d:
         91:a5:64:04:90:69:7a:ce:5a:49:19:56:e9:69:49:a2:03:4d:
         79:8b:d4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----