Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qG6kLyrYQcw30L5qsXlzGy8CHiU.roa
File:                     qG6kLyrYQcw30L5qsXlzGy8CHiU.roa (raw, json)
Hash identifier:          UQgHphn6hPMXB9eZ8TGwskt4GIGtVIKv98/OCW1sreY=
Subject key identifier:   A8:6E:A4:2F:2A:D8:41:CC:37:D0:BE:6A:B1:79:73:1B:2F:02:1E:25
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182402D9217CD9B36A4E45308601B9691DC
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qG6kLyrYQcw30L5qsXlzGy8CHiU.roa
Signing time:             Wed 27 Jul 2022 15:01:44 +0000
ROA not before:           Wed 27 Jul 2022 15:01:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203888
IP address blocks:        2a06:a005:45c::/48 maxlen: 48
                          2a06:a005:45a::/48 maxlen: 48
                          2a06:a005:13b0::/44 maxlen: 48
                          2a06:a005:45b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:40:2d:92:17:cd:9b:36:a4:e4:53:08:60:1b:96:91:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 27 15:01:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a86ea42f2ad841cc37d0be6ab179731b2f021e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:bb:d7:82:16:10:df:d7:77:e0:d3:35:ed:35:
                    cb:1f:fa:55:b7:0d:a4:c3:a1:0e:ad:4f:be:33:bf:
                    30:2b:af:df:04:96:27:18:9a:9c:bb:3d:b3:76:a6:
                    9e:47:ff:d8:ed:b8:69:a6:fa:7f:56:56:4e:53:79:
                    89:ce:32:60:e4:52:b4:99:8a:3c:21:07:15:f7:53:
                    dc:e2:cb:2c:0e:93:fa:f2:21:02:78:d5:a7:c6:a0:
                    19:0e:74:2b:b2:58:c2:30:3a:47:3c:3f:f4:34:9c:
                    58:57:aa:c4:3e:f5:db:7c:39:34:3e:ad:55:20:84:
                    03:cf:9d:63:0f:fe:ef:bd:5f:3d:09:f5:c3:17:53:
                    8e:7c:f5:ac:69:15:a3:b6:ec:46:9b:2d:d8:06:fa:
                    09:bc:51:a0:fe:0d:71:86:3b:0e:91:98:2a:aa:dd:
                    32:7a:a9:76:77:fc:d9:96:70:58:cb:1c:9c:7f:59:
                    d4:05:f7:91:cb:34:26:9d:f0:3a:cd:0a:50:c9:e5:
                    66:95:35:a2:44:f3:83:1a:63:a2:c5:b4:cc:42:91:
                    c8:75:a9:b7:da:be:16:f1:e9:6f:36:c6:60:fc:96:
                    4e:2d:51:15:b0:8e:52:ef:27:f5:3b:fc:c3:20:79:
                    61:3d:48:31:23:45:47:7b:d4:49:ab:01:ff:66:b0:
                    57:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6E:A4:2F:2A:D8:41:CC:37:D0:BE:6A:B1:79:73:1B:2F:02:1E:25
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qG6kLyrYQcw30L5qsXlzGy8CHiU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:45a::-2a06:a005:45c:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:13b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         56:1a:06:01:ec:4b:aa:2a:3c:67:b5:8c:c3:8d:c8:41:19:e3:
         da:db:24:3a:86:4c:6d:1d:35:eb:c7:20:ab:e9:70:95:6a:dd:
         ed:48:d6:ba:4e:26:22:5f:8c:4b:8e:a1:d2:d2:14:aa:df:19:
         4d:c9:83:c5:38:f0:ea:2f:93:fc:3b:c0:6f:5e:ca:e4:61:6f:
         2d:a6:84:ef:5e:9b:5e:34:66:14:91:ab:73:ab:a0:64:5e:6e:
         e2:81:ff:b3:d6:d1:c2:c6:45:4d:47:d8:4d:36:f5:3f:02:70:
         1d:18:e4:7a:63:ee:1c:69:99:6c:35:5e:ef:c9:fd:98:94:a2:
         fb:b5:97:3e:40:ba:4e:33:0c:72:a5:33:92:d9:8f:f8:80:ac:
         3d:48:86:56:7a:71:31:1b:1a:48:bd:3e:44:a1:fe:eb:af:6d:
         c9:e2:f9:44:f1:e3:b0:4d:cb:6e:1c:41:5c:9f:a4:43:69:18:
         de:90:8a:51:7a:f7:ee:ac:4b:d2:0f:4f:f5:a6:a1:7e:dc:da:
         e6:42:57:72:ad:34:3a:0f:51:ab:26:96:1c:4d:78:a3:5d:d3:
         7f:74:c7:ac:ec:b0:c6:c9:17:4d:33:ee:4c:61:a1:69:8d:6c:
         6d:40:23:ff:0e:00:17:34:a6:e5:da:59:53:e4:46:74:d0:d1:
         49:ad:d5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----