Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/oR7EVZ5UU7bd_TZ9kTo_acrEk1c.roa
File:                     oR7EVZ5UU7bd_TZ9kTo_acrEk1c.roa (raw, json)
Hash identifier:          DPxhjKg1jiEPui/GYYzFL8YxuKjXZKs5Xy+FX63/3hc=
Subject key identifier:   A1:1E:C4:55:9E:54:53:B6:DD:FD:36:7D:91:3A:3F:69:CA:C4:93:57
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       183E8565
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/oR7EVZ5UU7bd_TZ9kTo_acrEk1c.roa
Signing time:             Sun 17 Apr 2022 15:22:14 +0000
ROA not before:           Sun 17 Apr 2022 15:22:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        2a06:a005:4f0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406750565 (0x183e8565)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 17 15:22:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a11ec4559e5453b6ddfd367d913a3f69cac49357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f8:21:29:ee:d8:2a:7d:17:a8:51:90:2a:c9:
                    e4:df:74:37:1d:93:6a:f7:9d:e4:44:f0:79:7d:55:
                    b3:87:7f:70:e9:a9:3c:b4:8d:87:8e:7d:37:5f:b5:
                    74:2d:e6:73:60:30:1f:2c:fe:e4:06:26:8a:1f:75:
                    ee:0a:4c:15:f0:99:43:4c:c5:eb:ac:d2:42:9d:dc:
                    b0:f4:b5:16:b4:5f:58:a1:1f:ba:9d:33:1c:d1:cd:
                    44:12:4e:52:55:23:1c:1d:a7:ff:97:ea:18:da:24:
                    48:13:44:74:9d:d5:07:17:c5:a3:2c:67:95:78:b4:
                    3f:bc:ca:8e:e3:56:10:cf:aa:64:54:56:0b:5e:f5:
                    04:da:6c:af:e5:c2:17:d9:74:48:fc:46:09:1b:32:
                    14:9c:c0:a7:e7:07:1d:fe:8a:a2:91:a6:1f:d6:15:
                    a0:6c:00:df:6c:f8:e8:27:d5:98:aa:ee:e5:cb:62:
                    18:9c:79:b1:4e:21:43:8c:c4:d0:4e:13:7a:e0:bc:
                    e2:2e:dd:d1:82:bf:84:98:51:3d:95:51:9c:fd:dd:
                    fc:fd:23:c3:60:e0:37:a3:17:57:97:c7:ba:07:78:
                    04:eb:7a:ff:b5:48:ab:29:15:86:5f:6c:8d:58:3c:
                    33:cb:22:9b:65:91:42:77:1c:08:ff:e4:52:fc:6b:
                    55:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1E:C4:55:9E:54:53:B6:DD:FD:36:7D:91:3A:3F:69:CA:C4:93:57
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/oR7EVZ5UU7bd_TZ9kTo_acrEk1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:4f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         16:62:af:ea:4f:40:b6:e7:cd:41:38:b1:d8:09:90:8b:c3:bd:
         42:7c:8e:eb:31:0b:0b:01:60:b8:76:19:9f:74:81:f0:63:a9:
         b5:c4:64:b1:ba:40:3d:32:8c:b4:82:d3:c5:9d:b1:5f:2e:f5:
         ac:ea:f1:13:30:1d:7c:98:d5:d2:b8:45:05:d7:5c:83:44:95:
         c4:39:49:1e:1d:6e:28:68:73:ea:9d:e7:b2:9c:17:f3:e7:57:
         45:aa:a1:f1:db:94:f1:21:54:3c:87:8e:5f:49:91:c0:20:36:
         0a:e7:c2:ca:5d:02:50:2e:b5:f9:e0:58:9b:91:44:0f:48:0e:
         3f:c3:fa:7d:d5:a6:7d:98:e2:f1:62:d7:a8:fa:e4:7b:ac:5d:
         7a:30:f0:c4:ec:34:27:15:42:41:29:6d:10:18:50:60:2e:68:
         59:c9:09:28:e0:74:c9:ab:c7:06:11:39:74:87:5d:c0:93:ef:
         d3:af:3c:ba:5d:98:d7:a6:8c:bb:a6:b5:18:68:c3:61:3c:39:
         36:93:b7:18:f8:f4:75:df:46:55:92:bb:a7:50:ca:91:fd:26:
         6c:a3:9f:f5:4d:0b:c1:a8:d9:3e:20:0d:ca:ff:f7:18:4c:a4:
         65:85:88:f7:72:b0:d1:54:76:96:e9:a8:0b:22:1b:e2:36:e7:
         4e:54:cf:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----