Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/p2lRnD9IE8gS-WvkahM1V3PfgwU.roa
File:                     p2lRnD9IE8gS-WvkahM1V3PfgwU.roa (raw, json)
Hash identifier:          DHzISykjyuDP0yTihIPK6xbhSun2xna+zNRgg268c3c=
Subject key identifier:   A7:69:51:9C:3F:48:13:C8:12:F9:6B:E4:6A:13:35:57:73:DF:83:05
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018411B4BEC1C66ADBD639E84502B62CB5BB
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/p2lRnD9IE8gS-WvkahM1V3PfgwU.roa
Signing time:             Wed 26 Oct 2022 00:32:48 +0000
ROA not before:           Wed 26 Oct 2022 00:32:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201938
IP address blocks:        2a06:a005:5a9::/48 maxlen: 48
                          2a06:a005:5a2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:11:b4:be:c1:c6:6a:db:d6:39:e8:45:02:b6:2c:b5:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 26 00:32:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a769519c3f4813c812f96be46a13355773df8305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:09:4e:cc:b0:f1:63:fd:a7:06:80:08:ad:4c:
                    d0:e8:b7:eb:2f:7d:0d:a9:ad:06:88:ec:4c:b4:1d:
                    27:ad:87:3e:cf:92:34:a6:b8:64:5f:d6:0d:77:0b:
                    72:1a:4b:40:f1:88:ad:85:bd:d0:0a:18:67:b7:9c:
                    57:e5:52:75:6e:9e:1f:52:9d:00:d7:ba:93:6d:1d:
                    e4:8f:65:e0:f1:4d:8c:42:10:f7:45:f7:be:2e:88:
                    52:09:31:56:8e:c0:4d:44:c1:7f:ca:aa:b8:31:3f:
                    64:e6:bb:0e:b4:6a:bf:f2:5a:69:89:25:10:a0:e2:
                    82:d2:06:d1:34:ec:98:20:28:3c:e9:20:f4:ec:6c:
                    5d:d5:de:18:59:cb:51:c3:c6:3c:d3:18:76:a2:0e:
                    4e:26:59:ec:a6:b5:3a:67:10:e5:b4:4d:e1:f2:04:
                    c8:72:f0:f0:03:31:29:ed:7d:c9:38:f1:22:f4:41:
                    0b:d3:f1:da:63:e4:02:f1:36:0f:b5:e6:b7:3e:e8:
                    74:8f:ac:a7:e2:25:f7:86:6d:ab:69:72:3c:1b:2d:
                    3d:73:10:13:f7:bc:04:89:61:6e:2d:74:aa:f3:9e:
                    1f:ad:8f:68:dc:34:54:5d:8a:ca:67:41:ce:07:a3:
                    a6:a8:ce:e1:be:dd:b8:aa:d2:7f:3f:97:5c:ab:b3:
                    e2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:69:51:9C:3F:48:13:C8:12:F9:6B:E4:6A:13:35:57:73:DF:83:05
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/p2lRnD9IE8gS-WvkahM1V3PfgwU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5a2::/48
                  2a06:a005:5a9::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:f6:a4:e5:b4:6b:99:5a:22:d9:28:dc:6c:28:13:db:7c:d7:
         2e:08:dd:b6:e5:cf:70:15:99:12:3b:fa:d3:4a:3a:6c:50:b4:
         06:42:55:0b:be:4e:40:2b:01:85:0a:2c:79:da:28:ae:74:ae:
         c5:d5:f6:7b:b6:3c:33:54:37:c2:31:bc:3e:bd:48:58:30:00:
         81:0e:bc:21:fa:d8:27:6a:23:d7:56:96:45:61:ca:2d:86:fc:
         b0:51:c4:ee:9b:5c:97:09:b4:2c:b3:9c:28:2b:f2:0e:63:f6:
         03:c1:51:b1:87:72:dc:d1:27:23:56:b1:a3:7c:44:95:0d:99:
         17:3d:be:33:22:c9:4a:4d:12:97:fa:76:36:b2:12:3d:0b:d0:
         c2:fe:d5:b5:53:34:63:07:68:83:d4:65:59:ab:e6:81:52:a1:
         f0:f8:e6:7e:72:e8:51:55:0c:7c:b7:23:b4:05:77:29:c5:86:
         50:f4:7d:aa:6c:94:85:c0:6f:45:ed:4c:e0:f6:f4:1d:42:39:
         b6:aa:58:f8:80:64:e8:69:8d:0a:85:60:c9:c0:29:5f:b1:da:
         95:a0:ac:d1:1a:dc:c3:d3:96:2c:70:4d:8e:11:1c:dd:96:e2:
         a9:d0:06:70:85:17:3b:09:62:21:fa:46:38:76:2c:09:67:bd:
         d5:a3:37:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----