Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/oicg4EdSN5tWtYVhls0dwJeBBHA.roa
File:                     oicg4EdSN5tWtYVhls0dwJeBBHA.roa (raw, json)
Hash identifier:          BfJANdBOzovqZLkT2PcE4/CB6M4L2jOgEQAaUr8nfg0=
Subject key identifier:   A2:27:20:E0:47:52:37:9B:56:B5:85:61:96:CD:1D:C0:97:81:04:70
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184E763B44698A7C5B4589E83191B07A1E6
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/oicg4EdSN5tWtYVhls0dwJeBBHA.roa
Signing time:             Tue 06 Dec 2022 12:23:01 +0000
ROA not before:           Tue 06 Dec 2022 12:23:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211679
IP address blocks:        2a0a:6040:e800::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:e7:63:b4:46:98:a7:c5:b4:58:9e:83:19:1b:07:a1:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  6 12:23:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a22720e04752379b56b5856196cd1dc097810470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:33:75:1a:ea:66:f2:0e:2a:01:ce:e7:73:a1:
                    6a:99:8f:8e:87:be:e9:ca:d3:4b:f3:29:e2:85:8d:
                    15:7d:cf:c5:77:ba:7d:9d:dd:95:a7:a8:98:f6:2c:
                    96:1f:23:c4:cf:74:09:b0:bc:33:81:3f:cc:33:37:
                    cd:40:60:87:1a:4c:2c:a6:f7:ee:46:a4:4a:c7:de:
                    32:cd:63:46:47:08:c0:23:2d:1c:ca:51:34:f4:92:
                    d0:e1:c4:cd:35:4d:6c:a0:9d:f8:12:8b:94:7e:78:
                    c8:f3:09:88:79:a2:26:6f:f3:8b:fb:f4:59:bb:ec:
                    b9:2a:b8:d8:75:39:6c:03:17:be:bd:4a:8b:14:13:
                    8e:cf:46:7a:e1:5f:75:b6:c3:af:87:9f:c1:89:24:
                    36:78:22:db:2c:d3:10:5c:56:c4:22:19:f5:d1:b0:
                    fc:5e:d3:73:8e:f1:98:ca:a7:31:d0:fe:e8:b5:9e:
                    30:f2:8d:41:00:1c:5c:f8:ed:4f:e5:84:25:07:cc:
                    13:72:b9:a4:dc:fc:94:bc:f0:6f:de:f3:89:57:e6:
                    64:d4:10:2b:d9:fe:1f:3b:0e:a1:49:ec:49:24:53:
                    10:8b:d4:9d:fd:ad:16:cf:13:c9:e8:22:9e:d0:ab:
                    06:64:68:80:bc:78:f8:c1:f3:bc:2c:c3:1a:49:fc:
                    d8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:27:20:E0:47:52:37:9B:56:B5:85:61:96:CD:1D:C0:97:81:04:70
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/oicg4EdSN5tWtYVhls0dwJeBBHA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:e800::/40

    Signature Algorithm: sha256WithRSAEncryption
         2d:b6:a8:ac:75:00:7e:d1:18:6e:06:02:02:ad:d0:ba:57:c0:
         ce:a9:8d:fb:0f:40:03:01:27:24:ad:e0:da:e8:92:9c:12:e4:
         06:73:99:4b:c3:8e:39:da:d0:df:f2:d8:e8:33:7c:65:f1:9a:
         75:77:e4:58:5c:da:4f:4c:13:f3:ed:2c:e3:d9:98:c5:7d:c0:
         53:d7:fa:59:1b:a7:73:97:e0:82:23:4d:4a:04:84:cb:5b:5e:
         01:29:13:c5:e6:fd:8b:bd:ad:50:2a:63:53:82:55:1d:8a:46:
         0d:c4:a0:81:49:83:de:55:0e:f8:c5:ee:29:cd:64:4e:e1:16:
         3e:cf:32:a0:b0:20:1b:ed:5d:85:a6:a4:41:c9:fe:32:58:57:
         58:ca:fe:b5:fd:07:f3:ba:7a:41:b4:1a:b8:be:fa:b6:1a:84:
         8c:34:8b:a1:7a:02:80:05:a0:06:74:3b:e6:10:e8:b2:c7:a7:
         10:3f:bb:70:f5:84:04:d6:b5:b2:33:cc:99:e7:86:01:c4:d7:
         7a:7d:94:5a:01:9b:45:e6:4c:07:5f:97:30:8c:3b:af:01:50:
         33:42:71:a1:84:bd:9f:47:73:e3:ad:88:9c:df:19:30:fa:f1:
         94:d8:72:70:d0:fc:fa:40:63:ad:9c:86:eb:9b:a4:d3:5b:ae:
         65:a2:67:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----