Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/oAJDmHLOGisHMruDUna2U4wKN54.roa
File:                     oAJDmHLOGisHMruDUna2U4wKN54.roa (raw, json)
Hash identifier:          UiE/RTUJ3xL7BM20lXbEozMA2/O5+taOoPEeM5Akt9E=
Subject key identifier:   A0:02:43:98:72:CE:1A:2B:07:32:BB:83:52:76:B6:53:8C:0A:37:9E
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       187309A9
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/oAJDmHLOGisHMruDUna2U4wKN54.roa
Signing time:             Wed 20 Apr 2022 23:38:17 +0000
ROA not before:           Wed 20 Apr 2022 23:38:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208223
IP address blocks:        2a06:a005:4de::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410192297 (0x187309a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 20 23:38:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a002439872ce1a2b0732bb835276b6538c0a379e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3d:3a:92:fb:5b:c2:61:f5:2d:1d:ea:71:98:
                    96:34:ed:69:e5:ee:01:24:5c:e1:97:90:05:a3:79:
                    90:23:5f:71:20:7e:af:58:af:f7:6b:4c:69:fd:c8:
                    d4:29:04:bf:ae:44:d9:d0:12:c9:90:f4:74:e5:51:
                    c2:46:3d:a8:3d:57:26:67:7f:a9:e7:9b:9a:cf:aa:
                    45:02:9a:75:8c:dd:17:36:a9:9c:fa:3a:ee:b0:5b:
                    31:02:5a:42:a8:e9:ab:03:4b:9d:12:0c:15:cd:bb:
                    12:6b:5a:61:85:85:42:be:ab:87:70:98:ca:9c:27:
                    4e:4d:d0:17:61:44:04:b5:41:1c:48:ab:cd:6f:7c:
                    97:2a:24:ef:06:46:05:d7:52:67:b2:6c:ba:ea:b3:
                    b7:52:21:c7:30:46:e6:ef:4b:bd:53:8c:98:e0:e5:
                    b1:a9:fb:3d:5f:49:0d:98:cc:d8:9e:d0:6a:35:1c:
                    6a:0f:3d:8c:86:f5:f7:f3:db:53:16:f1:03:44:2b:
                    da:2d:5d:05:74:ed:17:9b:e2:4b:42:be:fc:9a:c6:
                    e1:2a:0c:51:e8:ba:65:ab:52:df:04:77:bc:99:69:
                    35:f8:36:30:39:f4:c3:b5:dd:fc:15:c4:7d:f1:e0:
                    1e:eb:bd:e4:ea:cf:34:d4:e0:a8:61:64:2d:5e:f0:
                    f8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:02:43:98:72:CE:1A:2B:07:32:BB:83:52:76:B6:53:8C:0A:37:9E
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/oAJDmHLOGisHMruDUna2U4wKN54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:4de::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:af:00:12:94:de:b6:93:af:98:4e:75:0c:71:a9:6c:c6:f6:
         67:e6:9a:a9:fe:ef:8d:03:c0:7d:58:b8:e8:3a:7f:fe:56:75:
         de:cd:3c:ac:33:34:3f:d3:0d:ce:a0:c8:3d:5c:1f:40:2a:9c:
         d7:83:28:f3:9d:84:8c:33:bc:83:30:45:1a:fd:3f:f8:a1:26:
         db:54:f3:aa:70:34:b7:4e:75:f3:16:52:f0:68:b2:bf:d2:28:
         6a:92:f0:df:44:03:c5:49:9f:f5:48:2c:68:ed:98:84:3d:e0:
         f8:66:24:ff:07:5c:2a:4e:75:44:67:cd:cd:63:90:3d:78:82:
         86:6f:fc:ee:d5:87:5f:1d:12:ce:4a:ba:7f:39:86:02:d2:b4:
         81:73:92:e2:c4:58:b0:1c:83:0f:32:0a:00:cb:08:07:b4:7e:
         b8:ab:d6:7a:1f:7d:9f:43:3b:e9:15:87:fb:84:a4:24:33:92:
         3f:ac:b5:77:1d:b5:31:9b:ac:0e:84:20:8e:1a:47:7e:d1:83:
         a5:ac:8c:3e:52:77:ac:d7:94:e6:88:c2:b2:34:3a:8f:07:cc:
         de:c8:60:e8:a0:86:00:b8:69:46:28:ae:85:05:9f:c5:41:80:
         5d:ac:c0:91:94:ba:a6:b8:53:76:87:9d:0d:0a:d0:ac:c7:27:
         5b:80:30:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----