Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/naUPoTBY5TRfEqLqhv1P_0vF6EA.roa
File:                     naUPoTBY5TRfEqLqhv1P_0vF6EA.roa (raw, json)
Hash identifier:          IA3d9Eml75SJObf8vm/zxLN83/hnrBU/bFmdRIhOFyo=
Subject key identifier:   9D:A5:0F:A1:30:58:E5:34:5F:12:A2:EA:86:FD:4F:FF:4B:C5:E8:40
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       19B476B6
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/naUPoTBY5TRfEqLqhv1P_0vF6EA.roa
Signing time:             Tue 10 May 2022 23:24:04 +0000
ROA not before:           Tue 10 May 2022 23:24:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     149506
IP address blocks:        2a06:a005:8b0::/44 maxlen: 48
                          2a06:a005:8c0::/44 maxlen: 48
                          2a06:a005:8d0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 431257270 (0x19b476b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May 10 23:24:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9da50fa13058e5345f12a2ea86fd4fff4bc5e840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:17:6a:e0:c2:d0:1e:32:3c:17:39:b2:b8:19:
                    61:89:31:8e:62:01:96:f6:1d:77:6a:bb:7c:6c:a0:
                    1f:5d:51:5e:64:a0:23:72:84:75:73:66:99:b8:f1:
                    20:d0:2e:b9:72:3b:07:00:d0:67:57:c3:02:69:62:
                    6a:d8:97:47:59:22:9e:20:db:20:88:2f:e8:41:0f:
                    15:4b:d9:b5:fe:3c:89:b4:b7:3a:da:ed:13:5d:68:
                    67:c7:01:db:dc:3e:33:58:ae:08:8e:42:47:ad:a9:
                    d4:6c:38:52:34:2f:f7:a8:4d:ba:1e:42:8f:18:ee:
                    5e:ff:9e:b5:ab:c5:63:05:37:74:34:fe:49:08:c3:
                    68:f1:0e:8c:21:71:14:1a:a3:72:9a:91:ac:2a:ae:
                    4d:df:0e:59:e8:20:6c:2a:9b:b1:c8:c1:5c:24:ec:
                    ec:01:60:16:43:27:a5:53:8d:a8:c3:9a:4a:de:f9:
                    8f:c5:e1:4b:25:3e:a4:ed:f8:3f:43:02:1d:e7:3c:
                    6d:b4:5b:4d:46:87:80:80:c7:e7:d8:3d:f6:9c:1e:
                    29:50:11:ad:09:e8:9f:67:0a:72:25:1e:e5:7f:f8:
                    cb:dd:eb:62:73:6d:d6:fd:eb:29:89:91:1e:1b:a1:
                    96:51:06:05:0a:bf:a4:e5:55:b1:63:6f:11:07:86:
                    21:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A5:0F:A1:30:58:E5:34:5F:12:A2:EA:86:FD:4F:FF:4B:C5:E8:40
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/naUPoTBY5TRfEqLqhv1P_0vF6EA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:8b0::-2a06:a005:8df:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         3e:5b:27:5e:d8:7e:39:0b:0f:61:ec:a9:08:80:0c:30:b4:a9:
         21:4c:41:29:e8:11:73:2a:fb:bd:53:15:6f:32:1d:1b:a2:f7:
         61:a9:7c:b4:2c:21:59:75:8f:49:20:16:5e:0b:d8:fa:b7:4b:
         61:ef:e2:db:8f:41:7f:f4:f1:a3:16:e4:6c:a7:7c:2b:27:56:
         05:22:5c:95:dd:e7:f3:88:5a:d3:49:30:a3:0b:08:ae:08:5c:
         14:0e:8f:f9:24:44:03:d5:09:ad:88:63:1b:1d:e4:5e:e3:30:
         ad:34:8e:f2:f2:cd:b7:47:70:de:94:21:4e:08:77:e0:27:65:
         4a:a3:c8:cf:fe:28:d0:99:b4:31:d6:39:6b:29:04:dd:0b:62:
         d0:4b:70:71:8c:0e:43:fb:03:f7:08:1d:bc:cd:a0:a7:cb:7e:
         5b:cf:dd:85:df:45:7d:d7:f9:a9:88:75:7b:38:53:db:52:bc:
         7b:ef:ac:ca:a0:94:4b:97:e4:40:dc:a4:13:fc:ec:e9:30:ff:
         e1:c5:b9:7d:1e:62:91:2b:fc:37:20:71:bd:8b:68:8a:a2:55:
         c6:7b:a7:55:cc:70:9d:e4:4f:ab:b2:7c:e1:92:d0:ed:a0:31:
         35:4c:3d:ab:12:33:b9:fe:2c:63:b8:1c:8a:91:ad:60:a1:7d:
         3d:d5:53:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----