Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/nAPZKIMIKTN7t4yjVFuCc0w2kOg.roa
File:                     nAPZKIMIKTN7t4yjVFuCc0w2kOg.roa (raw, json)
Hash identifier:          jLffo/wpuiVsUK8VZgq28NBK07GIoY2s/znEsN4f24M=
Subject key identifier:   9C:03:D9:28:83:08:29:33:7B:B7:8C:A3:54:5B:82:73:4C:36:90:E8
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184971D1BE4AE52F1EF98AF898916D0303F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/nAPZKIMIKTN7t4yjVFuCc0w2kOg.roa
Signing time:             Sun 20 Nov 2022 22:16:18 +0000
ROA not before:           Sun 20 Nov 2022 22:16:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212715
IP address blocks:        2a06:a005:2380::/44 maxlen: 48
                          2a06:a005:2390::/44 maxlen: 48
                          2a06:a005:23a0::/44 maxlen: 48
                          2a06:a005:23b0::/44 maxlen: 48
                          2a06:a005:2370::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:97:1d:1b:e4:ae:52:f1:ef:98:af:89:89:16:d0:30:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 20 22:16:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9c03d928830829337bb78ca3545b82734c3690e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ac:cc:8f:7a:25:a9:93:a2:04:1c:36:15:b5:
                    0e:03:30:4e:1b:16:8e:46:0a:8c:d7:e7:63:7b:82:
                    97:bf:df:19:8b:37:dc:c8:c0:83:e4:e0:9f:44:6a:
                    f8:cf:43:14:76:b2:6c:d4:da:c8:eb:c2:57:21:2e:
                    4f:f9:68:7c:4c:eb:74:f7:6e:3a:40:38:56:2e:b0:
                    b4:a2:9f:52:75:71:9e:18:c4:8b:c3:86:61:7f:6a:
                    50:d1:30:54:27:d7:54:53:2f:47:65:b4:a7:07:2d:
                    f7:8a:5e:56:f4:f6:ec:18:65:b4:29:ed:f0:9e:46:
                    78:3a:a7:59:ff:8d:3d:41:39:7f:1f:73:20:56:e6:
                    d7:c4:ad:d8:62:ed:e3:cd:8f:e3:83:e3:bb:8f:5e:
                    bb:54:63:46:47:b0:58:27:ae:8f:9b:c3:98:8b:2e:
                    9e:6a:c9:04:6a:c8:ff:aa:f4:7e:4f:5f:62:57:85:
                    99:d3:db:57:29:8d:c0:a4:7c:49:13:c9:8e:e6:36:
                    2a:a0:20:35:e3:43:e6:95:56:10:97:2a:59:7a:66:
                    4e:0a:0b:e0:ea:11:dc:59:f8:ea:5f:56:d7:e9:36:
                    ed:9d:95:70:5d:0b:d1:eb:d4:3b:1c:88:e7:75:24:
                    4d:b2:a8:35:37:5f:a3:49:39:fe:97:25:bf:53:f3:
                    c3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:03:D9:28:83:08:29:33:7B:B7:8C:A3:54:5B:82:73:4C:36:90:E8
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/nAPZKIMIKTN7t4yjVFuCc0w2kOg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2370::-2a06:a005:23bf:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         2e:b7:ca:b8:80:ec:c6:b8:62:02:cb:2c:5f:86:25:2a:c2:d5:
         e7:ba:ce:36:fa:21:db:81:0d:9c:a5:73:65:db:54:c6:b1:31:
         bd:fc:5c:c1:2e:db:2e:74:5f:43:5e:5a:88:8b:9b:11:51:58:
         cf:ae:b2:4d:27:20:0b:21:30:cc:e3:b3:0a:0b:5e:7b:a6:66:
         00:35:06:ab:b2:ff:57:22:13:c3:7f:36:2e:2a:a5:0a:39:f2:
         2d:8b:05:59:91:3a:2d:26:ad:2a:07:ad:39:3e:77:76:7f:86:
         63:ce:81:9a:9f:4c:c3:bc:e5:f8:52:69:2c:28:f6:dd:ea:8e:
         2d:ed:0c:9c:c2:d6:b4:fa:52:94:6f:24:a4:7d:75:a0:e7:2a:
         2b:d8:ce:79:01:cb:1f:77:58:74:99:87:45:ef:b2:33:04:f7:
         31:51:d9:f4:8e:57:c4:b5:9e:94:4e:16:af:07:6d:d9:a7:26:
         fb:bb:11:b0:f4:ef:53:01:af:a1:b9:e7:e6:8d:c1:fa:1a:8f:
         fd:aa:2e:b9:60:cd:f8:8a:96:07:f7:68:7b:43:e2:5a:05:c2:
         88:54:c0:58:de:9a:39:b7:99:c2:f0:fc:78:41:b5:9f:cd:24:
         03:5a:5e:86:81:63:07:a0:50:19:dc:e1:60:0e:6e:5b:9d:43:
         9b:f4:45:11
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----