Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/oq-Ea_MJbiYS8p52DEVgktSi_yQ.roa
File:                     oq-Ea_MJbiYS8p52DEVgktSi_yQ.roa (raw, json)
Hash identifier:          fJOZYSbVW5pERYla3HXDSvhnOiJSs7Eo2+ElV/rmk9g=
Subject key identifier:   A2:AF:84:6B:F3:09:6E:26:12:F2:9E:76:0C:45:60:92:D4:A2:FF:24
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01847557927B033E8CA8ED75C10309AB476D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/oq-Ea_MJbiYS8p52DEVgktSi_yQ.roa
Signing time:             Mon 14 Nov 2022 08:53:04 +0000
ROA not before:           Mon 14 Nov 2022 08:53:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206131
IP address blocks:        2a06:a005:1c78::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:75:57:92:7b:03:3e:8c:a8:ed:75:c1:03:09:ab:47:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 14 08:53:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a2af846bf3096e2612f29e760c456092d4a2ff24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8b:8f:b3:03:e5:98:87:46:23:00:8d:4c:92:
                    0a:74:25:04:14:51:bd:57:9e:2a:75:e3:3b:ee:59:
                    5a:f7:2d:44:66:9b:91:30:0e:6e:e6:ce:9f:68:25:
                    e8:2d:87:c7:a3:70:42:39:6d:a7:36:b6:65:a7:76:
                    e1:e8:fa:44:65:74:ce:9f:ad:6d:d8:05:11:0b:52:
                    e7:fc:22:04:8b:4f:46:a7:b9:8a:5b:9e:4e:7b:de:
                    05:d0:b6:72:31:74:91:0f:4f:13:d4:82:e7:d9:78:
                    d0:67:ad:25:e6:74:30:a9:12:a0:a7:85:a7:34:39:
                    5c:86:6e:d5:05:d3:d5:df:33:11:af:82:14:7e:25:
                    cb:d1:e7:9c:32:3b:f7:6a:7e:a3:29:18:6e:48:c2:
                    19:5d:17:74:ee:72:1f:63:88:85:a9:f3:1d:4d:54:
                    02:55:9d:41:90:37:05:66:15:11:c3:1c:25:39:91:
                    65:4a:45:3e:72:07:36:bf:7d:2d:43:4b:8b:13:56:
                    7f:05:73:76:7a:27:a6:0a:24:a9:95:60:a9:08:d5:
                    aa:42:48:5f:d5:8b:1d:6a:27:96:79:f2:6f:be:b4:
                    a8:0a:de:e1:6c:7f:d5:2a:53:3a:2b:83:4e:7a:43:
                    64:fb:99:b2:dc:4b:b2:35:fb:58:4d:a0:60:97:be:
                    5e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AF:84:6B:F3:09:6E:26:12:F2:9E:76:0C:45:60:92:D4:A2:FF:24
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/oq-Ea_MJbiYS8p52DEVgktSi_yQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1c78::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:3c:79:85:5a:76:8b:93:7a:fd:d0:60:77:b8:e5:ed:ba:4b:
         b0:dc:13:ee:a0:e4:c1:a9:61:d3:3a:ba:2e:58:b8:fb:f7:34:
         9a:11:5e:4e:fc:ce:af:ef:e2:58:09:aa:7b:d1:bb:68:02:e0:
         48:34:d4:07:da:cc:54:72:57:7c:0e:71:ea:02:fc:fa:01:27:
         4d:a5:e6:49:a3:09:8b:5e:cc:63:23:ec:47:3b:bc:db:6c:41:
         70:82:be:63:c0:40:42:9f:c3:5d:92:ef:3d:c8:6c:ed:7a:9a:
         97:ad:5c:94:29:4c:e3:7f:7c:23:1d:22:6a:2a:10:e4:50:7f:
         c3:ac:e3:2c:ad:00:51:28:aa:77:41:08:1c:4d:84:23:48:15:
         5a:c2:d9:d7:04:32:3a:b0:2c:1d:f8:78:5c:36:6c:2b:43:90:
         d3:8a:de:32:50:fc:2e:66:57:7a:c6:c6:10:ba:9d:d8:a2:aa:
         e5:38:93:b8:ad:20:c6:9c:15:b0:e8:de:f0:9d:f5:ae:6a:d9:
         96:4b:d8:74:73:d0:bb:7a:0e:1b:73:55:6d:83:0a:5b:c7:c3:
         d3:d9:3f:c9:65:4c:4c:20:54:20:ac:e0:7d:45:cc:ea:59:fc:
         55:ba:05:b6:c3:ad:36:f3:f5:a4:9e:4f:43:21:7d:99:0e:2d:
         cc:2f:c5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----