Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pnSobYA9I-CZ2cdSkUbStTFfI1E.roa
File:                     pnSobYA9I-CZ2cdSkUbStTFfI1E.roa (raw, json)
Hash identifier:          lOhXMSfzL+Wu1zn68rlXdVNpJuY0SiWHqrcPLMar7Ac=
Subject key identifier:   A6:74:A8:6D:80:3D:23:E0:99:D9:C7:52:91:46:D2:B5:31:5F:23:51
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184E7EB31EF836E15A0A5E2C9A90B6A6E3E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pnSobYA9I-CZ2cdSkUbStTFfI1E.roa
Signing time:             Tue 06 Dec 2022 14:51:01 +0000
ROA not before:           Tue 06 Dec 2022 14:51:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212164
IP address blocks:        2a06:a005:1167::/48 maxlen: 48
                          2a0a:6040:c700::/40 maxlen: 48
                          2a06:a005:1168::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:e7:eb:31:ef:83:6e:15:a0:a5:e2:c9:a9:0b:6a:6e:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  6 14:51:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a674a86d803d23e099d9c7529146d2b5315f2351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:94:e2:fd:42:57:b1:06:e3:ad:91:7d:1a:71:
                    02:75:3b:f2:ac:ea:92:02:9d:be:22:c4:47:78:43:
                    ea:fa:42:e4:06:c2:d2:ab:64:47:60:c9:c1:57:8f:
                    22:09:fe:06:04:26:04:73:6e:d4:17:32:e7:94:a9:
                    a4:c3:f5:78:6e:af:3a:fd:4c:6d:4a:03:91:28:0f:
                    b5:24:5e:f7:21:6f:ab:50:84:db:d2:e9:03:75:f7:
                    38:63:ff:3f:80:36:3a:10:aa:3b:ee:16:be:80:9d:
                    ed:9d:c2:e5:2c:b0:af:4f:eb:0c:f1:fb:fd:6d:71:
                    c8:18:85:be:a7:7f:17:09:b8:42:40:9f:14:51:f4:
                    ac:26:a2:1e:f3:05:47:7b:d8:4c:58:a3:cc:b1:07:
                    0a:71:87:fe:ba:4f:94:0c:7a:76:c7:1c:07:81:8e:
                    6d:dc:92:f5:30:3f:ff:0e:63:d0:f8:eb:01:95:80:
                    5a:65:5d:4f:16:e9:76:ad:a5:7a:f9:f8:97:2e:3f:
                    c8:d4:ba:3b:1f:da:bb:3c:5c:20:37:8b:77:9a:15:
                    fe:8a:07:af:e0:c9:db:b2:d2:f7:36:f8:46:76:cc:
                    b6:b1:52:0f:be:fa:e1:bc:44:10:cb:5f:23:05:a8:
                    97:d3:67:73:c7:eb:dc:21:66:12:62:84:55:63:66:
                    cf:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:74:A8:6D:80:3D:23:E0:99:D9:C7:52:91:46:D2:B5:31:5F:23:51
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pnSobYA9I-CZ2cdSkUbStTFfI1E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1167::-2a06:a005:1168:ffff:ffff:ffff:ffff:ffff
                  2a0a:6040:c700::/40

    Signature Algorithm: sha256WithRSAEncryption
         6c:66:da:e0:12:cc:53:d1:8a:53:dd:88:19:32:38:83:dc:c9:
         7d:91:0a:41:28:f3:a3:7e:7e:41:40:ae:43:4f:73:58:a0:19:
         db:93:a0:8c:68:3b:ed:42:1b:06:6d:4c:ec:83:ac:70:fb:e7:
         37:d2:68:c1:20:46:d1:36:1e:0a:03:7a:0d:c1:25:e0:b5:1c:
         f6:58:99:bf:92:6a:f0:b1:76:38:21:8a:92:45:45:6d:57:98:
         35:5a:0d:e2:de:36:a5:38:31:38:41:f7:a0:70:e7:c4:b5:0e:
         3c:84:b9:05:6f:cb:2f:0c:0c:de:18:92:f4:06:51:b4:96:89:
         b3:2c:0a:36:06:a1:cf:15:24:28:c5:7c:d4:7f:ef:c8:c8:5f:
         22:0a:cd:77:43:77:b2:cf:09:26:d0:00:5f:a9:57:3e:92:ed:
         65:6c:35:eb:54:6c:94:ec:70:ae:d6:1e:09:8e:4c:84:d9:2b:
         5d:b2:8b:59:68:72:64:ed:ee:1a:62:9a:be:65:24:d9:55:b6:
         1f:27:37:3a:2a:6e:45:21:92:8a:70:c0:73:33:c0:11:d6:21:
         f3:aa:95:79:b0:22:66:79:d5:1e:00:3f:fe:35:b2:5c:2d:c3:
         48:dd:3f:45:be:e8:7f:fd:cc:8f:f3:6a:a5:54:bc:26:7f:14:
         4e:59:0c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----