Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pQvuMm7ydTA10GWpG6rcdqPWrHY.roa
File:                     pQvuMm7ydTA10GWpG6rcdqPWrHY.roa (raw, json)
Hash identifier:          bC2vJZxbFtOqHKDLz6YU7BaQuoq7T2S3a57mZdlyTNM=
Subject key identifier:   A5:0B:EE:32:6E:F2:75:30:35:D0:65:A9:1B:AA:DC:76:A3:D6:AC:76
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018301B5033FB44FCEA688F9DA0C45959B2A
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pQvuMm7ydTA10GWpG6rcdqPWrHY.roa
Signing time:             Sat 03 Sep 2022 04:56:23 +0000
ROA not before:           Sat 03 Sep 2022 04:56:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203069
IP address blocks:        2a06:a005:1b20::/44 maxlen: 48
                          2a06:a005:1b10::/44 maxlen: 48
                          2a06:a005:1b00::/44 maxlen: 48
                          2a06:a005:1af0::/44 maxlen: 48
                          2a06:a005:488::/46 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:01:b5:03:3f:b4:4f:ce:a6:88:f9:da:0c:45:95:9b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep  3 04:56:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a50bee326ef2753035d065a91baadc76a3d6ac76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:be:b3:45:c9:46:9f:ff:97:a4:20:71:23:3c:
                    43:dd:ea:d2:cc:d2:83:eb:73:af:ac:7a:fc:df:03:
                    b6:af:fb:88:04:36:15:b4:0d:01:61:04:07:c9:39:
                    0f:b0:76:69:b6:d8:9a:56:e9:41:6c:ae:9f:17:af:
                    04:84:d3:b3:58:91:f6:8b:84:17:9c:77:38:51:22:
                    7c:40:65:de:42:56:72:b1:d0:a0:8f:97:1a:a5:c0:
                    96:97:8a:85:cc:c3:fb:87:0b:03:f0:cd:08:72:f6:
                    94:49:a9:ee:08:e4:cd:21:7b:53:e1:af:86:3e:07:
                    f7:e1:f9:ba:5c:36:dc:f7:30:28:9c:99:bb:42:3c:
                    72:84:d3:03:51:7e:53:d5:b3:73:af:2c:20:e2:ef:
                    d3:59:09:9c:39:c4:bb:df:b9:d2:aa:88:03:f7:4e:
                    36:36:ad:c6:f0:ca:0c:fb:1a:65:66:01:92:a2:1b:
                    09:ef:12:f9:0c:03:82:96:25:9d:ea:45:e7:51:3d:
                    5a:31:c0:2b:5a:1a:07:07:bf:a5:30:63:b4:da:b6:
                    71:41:54:74:34:c3:f8:9c:19:bc:ed:b4:39:0d:c2:
                    01:2c:f8:2b:fc:2a:57:b2:79:3f:0a:b3:42:6d:65:
                    86:15:c4:3d:fe:eb:fb:bd:58:25:8d:f6:d5:e2:59:
                    9b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:0B:EE:32:6E:F2:75:30:35:D0:65:A9:1B:AA:DC:76:A3:D6:AC:76
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pQvuMm7ydTA10GWpG6rcdqPWrHY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:488::/46
                  2a06:a005:1af0::-2a06:a005:1b2f:ffff:ffff:ffff:ffff:ffff
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:65:83:e3:a8:61:6f:b4:81:98:14:62:47:9a:c1:56:6b:c6:
         3c:7e:ef:35:41:d5:03:97:ca:c2:b7:ba:89:94:a0:e9:6b:79:
         4b:a9:14:36:12:0e:24:1a:b3:fa:2f:05:36:fb:34:64:80:88:
         bc:cb:c7:14:d7:f0:b0:d9:74:b8:14:0b:30:41:9a:ff:7b:b1:
         72:3b:a7:37:f6:34:79:30:38:a3:b1:e1:bc:c0:0d:f8:3a:88:
         ce:2c:c3:a0:94:e4:e5:f6:20:af:c0:2d:51:45:28:99:f4:27:
         bf:ea:9e:69:59:74:71:90:84:0c:ca:f4:46:a3:14:36:6f:a2:
         ef:7d:5f:3a:c9:d0:fa:c0:f0:ee:01:40:80:ef:73:81:ad:9c:
         cc:d9:6e:28:0e:87:a7:58:8d:52:bd:77:de:de:be:a5:7f:e0:
         ff:c0:27:99:fe:5f:e7:03:2a:ea:d6:30:af:7a:92:3e:e0:5e:
         0a:8c:20:90:ad:d7:ce:e4:3d:33:a0:25:c0:e5:e9:11:07:4c:
         9c:d1:82:24:ca:7e:7e:a0:4f:ed:2c:cb:f3:6e:17:47:89:cf:
         11:33:3e:8e:df:0b:3d:1a:2b:37:99:12:5c:f3:47:04:fe:11:
         ac:ff:34:48:a6:14:71:ea:ee:10:e8:3c:e5:1a:23:95:27:81:
         ca:e6:be:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----