Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/owmr7QaXK1y6U4-XSjPdpWwcanw.roa
File:                     owmr7QaXK1y6U4-XSjPdpWwcanw.roa (raw, json)
Hash identifier:          C/n54kNJkyNzZYehMw2o3qRNPx320HRaD/Opl/ZC3Fg=
Subject key identifier:   A3:09:AB:ED:06:97:2B:5C:BA:53:8F:97:4A:33:DD:A5:6C:1C:6A:7C
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01823A345A64025ADC6A7A84FA4D12AAA647
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/owmr7QaXK1y6U4-XSjPdpWwcanw.roa
Signing time:             Tue 26 Jul 2022 11:11:25 +0000
ROA not before:           Tue 26 Jul 2022 11:11:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203888
IP address blocks:        2a06:a005:45a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:3a:34:5a:64:02:5a:dc:6a:7a:84:fa:4d:12:aa:a6:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 26 11:11:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a309abed06972b5cba538f974a33dda56c1c6a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9d:f4:10:5c:ea:3b:67:e7:83:36:29:93:7e:
                    20:d4:ae:46:76:50:9e:bd:8a:87:f1:c0:ab:f9:cd:
                    82:28:87:16:6e:26:46:f1:87:a5:38:ef:8f:70:93:
                    52:2a:92:b5:ef:09:09:a4:b6:60:91:72:6c:2d:2c:
                    a5:9b:5d:4f:da:8b:0e:c0:b8:06:47:05:56:51:54:
                    3a:7c:c8:f5:81:51:3d:d8:19:de:25:8f:34:1d:62:
                    27:7d:6e:e7:da:03:65:5f:b5:b8:fd:fc:49:f6:4d:
                    12:b2:e5:c6:86:26:e1:fd:b4:e3:4f:5e:68:38:c4:
                    b0:9c:df:f7:1a:81:cd:de:20:e8:44:21:99:65:e3:
                    b1:11:56:78:1e:5f:ed:f5:c1:cf:6b:43:3e:93:e9:
                    05:a6:87:ca:17:c5:9f:7f:4c:0c:9b:f4:ca:41:41:
                    be:ca:eb:c5:70:0a:8a:44:df:db:e3:8a:d0:5d:40:
                    79:76:96:12:fc:08:be:00:58:a4:87:2e:d2:f3:1a:
                    97:26:0a:45:61:22:82:8c:32:30:e5:e0:cc:3b:a8:
                    e1:6b:77:62:05:bc:4b:be:ee:93:6e:a0:1b:81:9a:
                    76:ba:6b:fb:4a:0d:e7:00:07:a3:e3:1b:fd:20:9b:
                    ba:d4:36:75:ca:bb:aa:24:e2:0f:e0:a4:db:a6:8d:
                    93:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:09:AB:ED:06:97:2B:5C:BA:53:8F:97:4A:33:DD:A5:6C:1C:6A:7C
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/owmr7QaXK1y6U4-XSjPdpWwcanw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:45a::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:c4:74:58:2e:7d:9d:a6:2e:78:22:d8:67:8d:83:1a:9f:d4:
         2a:e2:24:96:ff:90:92:ae:17:18:ae:4f:86:4a:ab:c0:81:0b:
         f7:89:0e:05:7b:90:0e:02:dd:6d:31:66:d9:e7:f2:dd:46:ed:
         a4:dc:bc:a0:6f:90:d2:a1:95:66:66:46:f6:cb:6c:f0:ee:c7:
         4c:b5:da:a7:76:8f:61:c6:3e:66:d6:28:f2:c9:69:8f:46:b8:
         b5:28:36:9d:05:8c:bb:18:e9:b2:46:55:5e:15:c7:1b:7e:f2:
         49:5e:27:46:04:ac:da:b0:db:a9:ce:a8:f5:8a:e8:c0:67:cd:
         f9:af:74:14:ed:d2:21:08:e6:e4:c6:46:22:1e:b7:be:60:69:
         90:78:d5:cd:c7:dc:1a:61:7a:d5:32:a9:c7:63:fd:7c:51:18:
         00:dc:24:63:fd:f1:18:90:d1:9a:02:ea:2c:5e:32:df:98:5f:
         6c:09:69:06:44:7b:da:73:7b:c4:4a:b1:09:93:1c:71:19:ba:
         98:f4:c4:8a:a8:33:ad:41:02:5e:7d:bf:ea:82:9c:98:4f:8b:
         a3:1a:e3:87:9b:ac:6d:10:4d:55:a1:91:71:19:31:e4:5c:e0:
         ef:43:e0:2b:21:38:98:cd:6a:19:af:e3:97:26:ce:a1:7c:12:
         ab:31:8d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----