Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qNsnc9lhjOYHKm9MInnqpk5gnVo.roa
File:                     qNsnc9lhjOYHKm9MInnqpk5gnVo.roa (raw, json)
Hash identifier:          J2NArCrG5FZBnl921TATaHx5mo9OmgReQFNt3eU/c2w=
Subject key identifier:   A8:DB:27:73:D9:61:8C:E6:07:2A:6F:4C:22:79:EA:A6:4E:60:9D:5A
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184F11B341F2E8664C12301A5BB6E2E080E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qNsnc9lhjOYHKm9MInnqpk5gnVo.roa
Signing time:             Thu 08 Dec 2022 09:40:02 +0000
ROA not before:           Thu 08 Dec 2022 09:40:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200853
IP address blocks:        2a0a:6040:c600::/40 maxlen: 48
                          2a0a:6040:e00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:f1:1b:34:1f:2e:86:64:c1:23:01:a5:bb:6e:2e:08:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  8 09:40:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a8db2773d9618ce6072a6f4c2279eaa64e609d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:00:36:f8:a7:1b:63:06:a4:9f:db:74:21:e6:
                    82:c1:40:f2:b5:3c:ce:81:bd:89:03:b2:a2:98:93:
                    ac:83:1f:a3:5b:73:6d:75:1b:fd:c9:26:ec:10:af:
                    5e:e2:45:83:db:cb:8d:14:bf:5b:c8:a1:88:b7:83:
                    63:e4:e6:e0:8f:38:78:6e:56:ba:ab:a4:f8:85:85:
                    7c:c1:fd:f4:a5:38:64:40:22:12:91:b9:5f:06:13:
                    1e:b4:5b:e5:ee:9f:1e:0b:ab:c5:21:2d:ec:49:3f:
                    99:08:2a:7b:d0:c4:c3:e9:a1:ef:5b:07:f4:fa:91:
                    a6:ef:1e:7e:2a:a0:8b:ff:ba:27:7e:9d:ed:2d:6d:
                    69:38:bb:03:d6:d3:e5:1b:7f:28:2a:fa:ea:71:55:
                    04:02:0a:bf:25:0e:1b:bc:7a:8c:d7:9b:04:5b:6c:
                    8c:45:72:0b:0d:02:20:22:aa:d2:25:06:aa:2b:1d:
                    01:5a:04:1b:7c:eb:64:65:32:db:27:9a:a8:d0:c0:
                    17:66:43:9f:c4:7a:3b:dc:6d:5c:9c:1d:95:c6:16:
                    fd:88:12:dd:a7:25:6c:c2:ec:77:15:91:77:94:1b:
                    77:d2:5d:2d:28:be:18:f1:d1:6b:d4:af:0e:d1:a4:
                    ff:65:0e:e7:d8:32:a1:eb:f7:92:8c:01:79:9e:68:
                    10:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DB:27:73:D9:61:8C:E6:07:2A:6F:4C:22:79:EA:A6:4E:60:9D:5A
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qNsnc9lhjOYHKm9MInnqpk5gnVo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:e00::/40
                  2a0a:6040:c600::/40

    Signature Algorithm: sha256WithRSAEncryption
         4b:62:7b:cc:fe:7d:94:65:4b:86:1e:eb:bc:3a:ee:f5:da:17:
         47:63:b9:22:2a:64:7c:2a:c7:13:91:6e:e8:3d:6b:3a:93:44:
         8b:56:49:c4:7a:5e:8f:4f:5f:ba:8d:a3:02:f8:b7:20:eb:2f:
         86:b0:0b:ce:3e:fb:47:8a:5b:91:84:37:9d:48:ef:9d:53:4c:
         73:92:5f:52:72:d8:c5:71:57:ae:00:72:ad:14:7d:82:f1:32:
         fe:4d:64:3a:41:01:23:ed:db:1d:1d:98:b0:18:2b:e1:e8:66:
         f5:cc:31:80:35:7c:43:db:cf:5b:25:87:26:1b:ed:25:ab:c3:
         64:c9:b4:29:45:09:e6:4b:78:9a:83:ae:69:13:ac:54:4b:5a:
         3a:02:22:ac:90:93:69:85:9c:78:c8:f8:b1:49:78:13:c0:53:
         4b:26:2a:61:02:50:1c:dd:22:06:80:47:55:ce:ee:cb:d9:d3:
         08:77:36:f7:ae:a5:03:8f:bd:91:d3:91:ee:0c:57:0c:cc:05:
         22:95:68:27:da:50:1f:45:27:05:66:59:91:10:c1:d1:5d:b9:
         6d:94:9b:32:01:e8:34:d3:1c:ee:d4:c8:52:4f:65:7e:9f:2a:
         c6:41:a9:b4:bd:a7:fe:d0:46:6a:3c:d4:1a:f0:06:6b:a2:15:
         e0:4e:06:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----