Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pDE0yGTD_OTznI1IBwS53a5_YkM.roa
File:                     pDE0yGTD_OTznI1IBwS53a5_YkM.roa (raw, json)
Hash identifier:          5TkpIF7waxxu8p9bIqXkx+3Qqhzac7l7t23KqU54NYE=
Subject key identifier:   A4:31:34:C8:64:C3:FC:E4:F3:9C:8D:48:07:04:B9:DD:AE:7F:62:43
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0181E68FF8E8E3008A5FB7C1EDDB705FC9DF
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pDE0yGTD_OTznI1IBwS53a5_YkM.roa
Signing time:             Sun 10 Jul 2022 05:23:23 +0000
ROA not before:           Sun 10 Jul 2022 05:23:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47689
IP address blocks:        2a06:a005:a18::/45 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:e6:8f:f8:e8:e3:00:8a:5f:b7:c1:ed:db:70:5f:c9:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 10 05:23:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a43134c864c3fce4f39c8d480704b9ddae7f6243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:24:eb:f1:a3:3c:75:5c:27:78:0f:d8:b5:5e:
                    75:c5:c6:95:9c:88:d9:e9:87:0f:8e:9e:1c:9d:37:
                    18:bb:a0:d9:1b:3a:5d:09:5e:8f:78:43:5a:56:af:
                    bb:36:d4:df:3a:b8:50:d8:9d:c0:27:c4:6c:87:6f:
                    e6:c5:f0:6c:1c:85:a0:41:12:6f:38:3b:15:78:63:
                    7b:bd:08:dd:a6:ba:c0:4e:88:47:e6:3a:28:5b:9e:
                    e1:07:7a:d7:f4:05:1e:44:64:ab:c0:f1:29:17:92:
                    b3:cf:de:ad:c4:86:78:17:fd:fb:9f:db:e3:9d:92:
                    06:6c:4d:b5:e5:5b:12:18:26:7b:d9:6d:5d:7d:e4:
                    38:4d:a6:f1:a1:4f:52:cf:15:d5:8a:e7:0d:33:db:
                    d2:b9:4f:c6:14:0a:21:4d:a1:f9:fe:6e:3c:8a:56:
                    25:4c:a3:6f:30:94:9c:9a:53:e0:9b:68:2c:2d:85:
                    56:80:e1:3a:66:75:d4:6a:64:ee:58:12:63:0e:ae:
                    9e:68:1a:98:87:b8:99:64:ab:22:0e:17:90:63:d3:
                    fc:d3:3e:9a:ba:6d:fc:2e:d5:5a:de:41:1a:7f:74:
                    26:62:a9:0a:b0:4d:49:ce:41:0d:ec:fa:4e:24:f5:
                    9e:cc:81:fd:1c:74:4d:66:9e:eb:a7:0c:7e:d3:b6:
                    19:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:31:34:C8:64:C3:FC:E4:F3:9C:8D:48:07:04:B9:DD:AE:7F:62:43
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pDE0yGTD_OTznI1IBwS53a5_YkM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:a18::/45

    Signature Algorithm: sha256WithRSAEncryption
         75:f2:f3:f4:c6:47:47:60:79:f6:db:18:e4:bb:26:44:8e:ca:
         5a:9e:79:92:e6:a3:81:b8:b5:af:cc:49:a2:52:5a:0e:fe:cb:
         62:69:a8:42:4d:82:e1:be:8f:b8:24:16:c9:45:f3:ed:53:28:
         f6:c0:1f:c0:0e:be:eb:b9:58:26:c3:fd:80:9b:0a:19:16:98:
         5e:55:01:3e:1b:21:47:4b:54:48:1b:75:83:ca:0c:89:38:f5:
         7e:de:f4:38:82:46:ce:f6:0c:e6:49:f2:56:80:54:68:94:c1:
         8c:9d:42:c5:0f:a7:a2:37:1f:5b:1e:15:c8:cc:ce:c0:d2:c8:
         5d:f1:22:f0:53:66:ab:d3:70:53:54:e8:56:c3:2f:bc:62:5e:
         f3:d5:67:c6:42:d1:65:d2:ff:94:09:85:11:e6:f8:dc:df:cf:
         72:71:56:27:39:3a:05:e8:3f:03:46:d2:6b:f5:f0:e1:2e:2a:
         1d:3c:7f:73:5d:d3:b3:2c:0c:af:e0:43:aa:24:0a:22:12:a9:
         2b:de:56:a0:b8:e1:5b:c3:d3:6e:8f:7c:26:56:7d:25:20:ef:
         ed:9c:3f:84:ba:ab:ae:6f:04:9a:a2:cb:14:2f:8c:7b:78:0e:
         9e:f1:5b:1e:67:c3:5a:67:13:cf:c2:68:f7:9a:08:f7:bf:96:
         bf:e7:57:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----