Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pfFTN2Al4_KoyuNckYUpj0rOygo.roa
File:                     pfFTN2Al4_KoyuNckYUpj0rOygo.roa (raw, json)
Hash identifier:          UmRC7xn7R0A3ezXeaPa3qtRtZBGV0AGDnQBEl+TXwu4=
Subject key identifier:   A5:F1:53:37:60:25:E3:F2:A8:CA:E3:5C:91:85:29:8F:4A:CE:CA:0A
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       18E3E169
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pfFTN2Al4_KoyuNckYUpj0rOygo.roa
Signing time:             Fri 29 Apr 2022 01:38:40 +0000
ROA not before:           Fri 29 Apr 2022 01:38:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205779
IP address blocks:        2a06:a005:43c::/48 maxlen: 48
                          2a06:a005:5e0::/48 maxlen: 48
                          2a06:a005:5bb::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417587561 (0x18e3e169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 29 01:38:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a5f153376025e3f2a8cae35c9185298f4aceca0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0a:54:c1:57:d9:99:b8:a2:30:e8:e7:bf:38:
                    06:8d:a6:12:c3:4e:e8:4e:0e:47:15:fb:7f:94:77:
                    3c:e6:e2:a5:57:4b:c0:39:1b:20:6f:af:e8:f8:4f:
                    84:7f:59:92:e2:2c:b6:ae:73:f9:f5:59:9e:dc:c7:
                    55:fa:85:d9:33:fa:8f:7a:2d:35:b8:8b:19:09:24:
                    ed:16:09:5b:69:c3:23:32:ac:54:a1:92:df:c8:3a:
                    2d:1d:a5:e6:55:a2:bf:2f:9c:22:42:19:0a:bb:03:
                    f9:c6:f1:55:f3:28:5f:49:b8:cb:46:76:b8:3f:7b:
                    56:b4:0e:7f:fa:1e:24:23:30:fc:e1:41:e0:26:22:
                    22:27:d7:91:fc:a7:d9:c2:de:0a:80:be:23:22:b2:
                    69:d4:49:3e:91:a5:7d:9f:f2:0f:52:9f:50:db:b4:
                    05:a0:01:ef:f0:81:3f:86:5b:d1:41:f6:89:c6:9a:
                    32:59:28:8c:df:14:82:4d:f1:25:ce:17:cb:e8:12:
                    e4:81:70:61:76:04:f0:e6:26:bc:35:84:56:b6:96:
                    14:a5:dd:58:27:f5:06:9c:9c:c9:ab:00:08:2e:38:
                    a1:f3:5f:44:a3:3d:cc:37:ba:4b:79:1a:f2:95:9c:
                    ba:a2:38:82:a7:49:21:57:ee:cb:51:0e:df:e6:fb:
                    3a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F1:53:37:60:25:E3:F2:A8:CA:E3:5C:91:85:29:8F:4A:CE:CA:0A
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pfFTN2Al4_KoyuNckYUpj0rOygo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:43c::/48
                  2a06:a005:5bb::/48
                  2a06:a005:5e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:8a:0e:2d:5b:74:7d:ff:ec:da:0f:84:c1:0f:70:a2:7e:3c:
         38:e9:87:ac:5f:cf:5e:ee:b0:3e:cf:bf:69:e9:60:53:6f:cc:
         18:77:cc:89:4a:0d:7a:60:b8:b4:6d:1b:95:12:3a:1f:ea:87:
         af:f4:22:fb:d5:a8:39:93:d9:bd:aa:23:0b:d0:b3:d0:66:ce:
         f4:8f:e8:64:b0:ee:42:31:44:7b:8c:4b:33:a6:cf:82:81:ca:
         97:f7:30:06:d9:e7:8b:2c:26:65:52:f2:3c:12:77:ed:08:0a:
         13:6e:c1:59:42:65:f4:1d:b6:28:c6:35:b7:6c:f6:32:b0:ef:
         7e:de:f9:8d:91:1a:1e:4f:20:3c:1c:3e:55:ce:e4:70:72:69:
         92:93:85:a0:dd:f3:b5:44:2f:c5:1a:1e:af:13:21:26:4e:b2:
         0f:6f:57:a7:2d:57:ba:5b:98:7e:f2:18:5d:35:d9:87:2e:42:
         7b:7e:c1:4c:29:79:76:71:1f:73:ba:3f:8e:e3:a9:23:c1:87:
         28:48:75:d3:4b:8e:53:aa:4a:bc:28:e6:f6:ee:d2:14:a6:82:
         ca:ea:e1:c8:9c:e7:36:d5:91:cf:ef:73:5b:c1:d7:e0:8c:3c:
         06:73:c7:08:14:32:83:62:b5:60:1b:68:ff:f3:9c:b9:25:d3:
         8e:db:9b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----