Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/nHlK6mKSqfzFbj0TOmGDTOgO6GE.roa
File:                     nHlK6mKSqfzFbj0TOmGDTOgO6GE.roa (raw, json)
Hash identifier:          obm8eD5FnOk/lDQbDpMnlVZi+PWBnmTAmsSfHzW83KQ=
Subject key identifier:   9C:79:4A:EA:62:92:A9:FC:C5:6E:3D:13:3A:61:83:4C:E8:0E:E8:61
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1A4C69D8
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/nHlK6mKSqfzFbj0TOmGDTOgO6GE.roa
Signing time:             Mon 30 May 2022 12:27:57 +0000
ROA not before:           Mon 30 May 2022 12:27:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203857
IP address blocks:        2a06:a005:5ec::/48 maxlen: 48
                          2a06:a005:11::/48 maxlen: 48
                          2a06:a005:851::/48 maxlen: 48
                          2a06:a005:a02::/48 maxlen: 48
                          2a06:a005:856::/48 maxlen: 48
                          2a06:a005:4d6::/48 maxlen: 48
                          2a06:a005:5e9::/48 maxlen: 48
                          2a06:a005:5ee::/48 maxlen: 48
                          2a06:a005:4d3::/48 maxlen: 48
                          2a06:a005:a01::/48 maxlen: 48
                          2a06:a005:4d2::/48 maxlen: 48
                          2a06:a005:432::/48 maxlen: 48
                          2a06:a005:12::/48 maxlen: 48
                          2a06:a005:4d7::/48 maxlen: 48
                          2a06:a005:10::/48 maxlen: 48
                          2a06:a005:850::/48 maxlen: 48
                          2a06:a005:4d5::/48 maxlen: 48
                          2a06:a005:5eb::/48 maxlen: 48
                          2a06:a005:4d4::/48 maxlen: 48
                          2a06:a005:2d4::/48 maxlen: 48
                          2a06:a005:5ea::/48 maxlen: 48
                          2a06:a005:5ef::/48 maxlen: 48
                          2a06:a005:5e8::/48 maxlen: 48
                          2a06:a005:5ed::/48 maxlen: 48
                          2a06:a005:5e3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441215448 (0x1a4c69d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May 30 12:27:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9c794aea6292a9fcc56e3d133a61834ce80ee861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:83:9d:4e:05:ca:d7:ee:31:ba:64:de:5f:10:
                    41:23:96:70:9f:5a:72:0e:83:0c:5b:2a:5d:70:60:
                    2b:19:75:c2:1f:9c:96:c1:4d:77:ff:85:b4:e6:c0:
                    d8:a1:ad:96:b6:61:10:95:f3:07:09:87:62:e5:b3:
                    02:6d:ab:79:e9:d5:f4:1c:f8:0d:3f:fb:ff:08:df:
                    e5:fd:79:df:e1:41:85:ea:05:20:27:09:c2:ea:66:
                    22:08:d7:c1:e2:43:9f:de:5c:d3:f7:bb:d7:a9:ab:
                    81:4c:a9:77:dd:33:82:5e:96:f8:28:21:5f:eb:ac:
                    f4:d0:fe:50:55:1a:af:3c:58:5e:38:e4:e4:af:d6:
                    9c:b7:90:8f:57:83:7a:f1:a7:a3:01:80:20:c0:78:
                    e2:ad:e5:7a:f3:6f:00:37:38:f0:f2:40:9d:dd:d6:
                    a9:06:57:3d:16:1e:2a:da:4d:d0:62:f1:7a:99:d0:
                    8a:ec:77:20:db:98:aa:11:8f:99:a6:66:9f:6c:a5:
                    a4:8d:04:be:1e:3a:0c:21:7e:c5:53:47:fe:1e:17:
                    d4:33:af:c6:d7:94:42:8c:52:ee:5a:87:8f:3a:f3:
                    63:06:0c:c1:61:c3:15:c0:71:e7:de:65:19:d5:21:
                    7f:fb:54:90:0d:0f:01:aa:fc:df:82:51:fa:1d:af:
                    67:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:79:4A:EA:62:92:A9:FC:C5:6E:3D:13:3A:61:83:4C:E8:0E:E8:61
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/nHlK6mKSqfzFbj0TOmGDTOgO6GE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:10::-2a06:a005:12:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:2d4::/48
                  2a06:a005:432::/48
                  2a06:a005:4d2::-2a06:a005:4d7:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:5e3::/48
                  2a06:a005:5e8::/45
                  2a06:a005:850::/47
                  2a06:a005:856::/48
                  2a06:a005:a01::-2a06:a005:a02:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         7b:92:ca:2a:8d:18:e3:db:df:23:ff:6e:9d:91:51:5f:18:e1:
         94:56:e6:1a:8f:c2:c6:da:42:6e:72:a3:bd:d6:c3:14:5e:b4:
         ae:5f:32:4b:e6:5e:83:77:38:19:4e:16:ae:11:fe:94:c4:76:
         2d:d3:66:a1:58:5c:da:8b:7d:f6:60:36:07:79:08:0c:ff:aa:
         2a:15:c3:b9:54:6f:81:ec:f3:1e:2d:6d:cd:52:f7:51:55:f7:
         01:38:46:4a:46:e0:81:15:62:5a:00:4e:38:53:87:f2:3b:3a:
         8c:1d:2a:04:e8:d1:2e:90:69:8b:f4:67:8e:a1:e7:ef:d7:41:
         d3:da:6e:5a:c4:56:de:dc:53:29:b5:8d:7f:b4:fc:c4:08:d5:
         ed:91:31:92:f6:63:57:93:fc:b5:3e:9e:c6:77:8c:f5:98:b6:
         40:32:1f:aa:3c:c2:e7:b7:b3:d8:48:89:e4:56:fa:18:df:b0:
         8e:4b:ee:8e:f3:ed:0d:e5:6d:f0:6b:c6:6e:db:38:c4:52:15:
         cd:13:63:b9:68:af:d7:32:a7:de:78:b2:b0:dc:6d:fe:a0:11:
         d8:95:67:03:0a:9b:54:8d:c2:b8:36:a7:84:8d:a7:3c:d1:63:
         85:86:1b:49:e9:3d:bc:51:9e:31:b6:7d:86:b8:ea:79:46:82:
         9d:a9:96:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----