Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pubs4Loj19VHEm3B1iDWVxQ7UlY.roa
File:                     pubs4Loj19VHEm3B1iDWVxQ7UlY.roa (raw, json)
Hash identifier:          md5quQ/8okCubGr074xPD5xQ+++4GgMT7ItE3/V28OY=
Subject key identifier:   A6:E6:EC:E0:BA:23:D7:D5:47:12:6D:C1:D6:20:D6:57:14:3B:52:56
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       15C53679
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pubs4Loj19VHEm3B1iDWVxQ7UlY.roa
Signing time:             Sat 01 Jan 2022 05:59:12 +0000
ROA not before:           Sat 01 Jan 2022 05:59:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212085
IP address blocks:        2a06:a001:a070::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365246073 (0x15c53679)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jan  1 05:59:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a6e6ece0ba23d7d547126dc1d620d657143b5256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:62:cd:b0:45:3e:5e:d7:a2:4d:12:0f:75:bd:
                    64:ab:57:53:a1:82:d0:15:96:17:41:b3:b3:76:e3:
                    7f:57:5e:41:77:b7:16:52:ed:b2:cf:00:79:73:d2:
                    7d:d0:6f:e5:c3:29:b8:77:d9:9f:b0:1d:23:c6:80:
                    81:0a:fb:4c:de:ac:06:96:a7:2b:5a:91:45:67:99:
                    50:a3:4a:96:50:54:fc:46:29:13:01:8e:dd:9b:db:
                    31:9a:3c:db:b2:4c:fb:fb:4f:73:95:0b:ab:78:d7:
                    6e:80:de:b7:b6:5d:80:ff:c8:35:1a:0e:08:d0:ed:
                    ff:f4:4b:6d:73:9c:ae:4d:b0:f2:e6:fd:6e:8f:a4:
                    a7:1c:6b:ae:ef:09:ac:cb:d7:9e:13:17:17:b6:16:
                    48:88:11:17:eb:98:d7:37:27:9a:a2:f5:87:75:0d:
                    30:11:cc:96:42:cd:bd:ef:3e:6d:aa:14:3d:11:57:
                    ab:cc:6f:74:6e:f1:ca:1f:a6:b1:ba:7d:b1:44:25:
                    b7:e7:4c:f5:92:55:88:6a:b9:fa:3b:ac:d8:54:d2:
                    6f:86:7a:c3:a1:d6:2c:b4:b4:b4:e2:5b:c9:97:c0:
                    0c:42:8d:42:86:1e:49:5e:0d:c9:eb:af:e8:b0:55:
                    46:4c:1b:67:5f:2e:b7:e6:6f:e1:b3:d5:be:45:4d:
                    7f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E6:EC:E0:BA:23:D7:D5:47:12:6D:C1:D6:20:D6:57:14:3B:52:56
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pubs4Loj19VHEm3B1iDWVxQ7UlY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a001:a070::/44

    Signature Algorithm: sha256WithRSAEncryption
         0f:de:6a:d2:71:8d:34:c5:de:a9:4d:05:0a:9b:7a:11:fc:3a:
         5c:82:ef:98:5e:ef:ef:42:84:b1:c8:7c:68:e3:ba:d1:cc:16:
         df:ba:f2:4b:a2:e3:80:a0:7d:d9:80:ff:27:19:21:7a:9d:c6:
         7a:1a:57:34:05:69:f3:cd:73:29:97:09:3a:fb:4f:90:4f:9e:
         e9:94:75:50:a4:93:5b:e3:0f:71:47:51:dd:5f:4b:45:a1:da:
         45:11:16:6f:c4:d4:3c:bb:28:92:df:7a:f8:ba:ee:1f:08:e1:
         81:23:60:a4:3b:68:d9:08:e1:04:b9:14:57:96:9c:45:1a:dc:
         e6:af:5d:82:ea:da:de:0b:64:c1:28:c7:c2:4c:63:4e:99:2a:
         57:8c:a7:9a:45:95:6f:4a:c4:fe:a0:d3:c6:a5:39:03:3f:bc:
         c3:e9:41:14:d8:e4:d9:1a:b6:ff:54:71:31:a1:78:3d:ea:fe:
         67:61:3a:52:63:97:df:88:b1:43:53:84:a9:79:b5:b9:82:09:
         24:93:c8:eb:ff:86:68:17:2e:50:f8:1f:36:2d:14:71:eb:7c:
         57:99:f9:a8:ea:3a:92:56:8d:fc:57:ef:07:e4:e9:5d:fe:dd:
         92:f8:c5:a2:8a:29:02:ed:d4:42:06:9e:f1:1d:be:58:72:82:
         ab:1b:32:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----