Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qxAylDXPIQOsuNHCqa27elK9_1o.roa
File:                     qxAylDXPIQOsuNHCqa27elK9_1o.roa (raw, json)
Hash identifier:          VXRnkWstpwAwv93e1QD5geYr7oMlDbrEoNM2FPccftI=
Subject key identifier:   AB:10:32:94:35:CF:21:03:AC:B8:D1:C2:A9:AD:BB:7A:52:BD:FF:5A
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182697E21DEF37E6ECD8748178FE2145183
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qxAylDXPIQOsuNHCqa27elK9_1o.roa
Signing time:             Thu 04 Aug 2022 15:34:10 +0000
ROA not before:           Thu 04 Aug 2022 15:34:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203979
IP address blocks:        2a06:a005:454::/48 maxlen: 48
                          2a06:a005:45a::/48 maxlen: 48
                          2a06:a005:455::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:69:7e:21:de:f3:7e:6e:cd:87:48:17:8f:e2:14:51:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug  4 15:34:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ab10329435cf2103acb8d1c2a9adbb7a52bdff5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e6:b5:4b:49:02:18:8b:35:00:a9:d7:00:63:
                    32:8a:ec:2c:56:36:28:fd:e6:49:c2:b3:84:b0:f4:
                    2f:0c:c9:d3:69:9a:b8:23:eb:cb:8a:b9:83:c5:34:
                    9b:38:38:fe:77:35:10:29:23:53:ca:4d:db:f0:89:
                    9c:5c:46:e3:20:d9:62:3d:3c:4f:09:d2:4c:fd:55:
                    8a:4a:5d:5c:04:d1:67:d2:63:9a:6d:6e:0b:70:00:
                    40:83:d0:0a:f7:5b:4c:b5:55:c9:29:88:4e:c2:a3:
                    fb:16:64:53:af:c6:a5:29:8f:e6:b9:cd:ce:8d:4f:
                    97:80:10:14:f9:e5:14:e5:99:7a:fe:57:80:a3:a1:
                    9d:36:ca:e1:2c:47:47:55:a0:d8:7f:de:a3:36:a4:
                    7c:e7:d1:10:0f:bc:34:c3:9d:91:df:b2:a7:b6:5a:
                    b9:a2:15:83:58:47:78:26:e2:22:50:e9:ea:7b:9f:
                    7c:f4:87:cb:04:4d:72:1b:47:e5:4e:ff:71:21:dd:
                    09:ae:99:78:09:98:43:ba:66:45:a0:bf:29:6b:25:
                    17:f5:9e:d2:35:20:66:ff:17:68:07:18:b3:c1:a0:
                    a3:55:28:b2:28:0b:93:9f:bb:72:b4:5c:e9:0c:08:
                    ce:5d:62:d3:83:99:04:a6:3b:c2:48:54:79:42:f4:
                    57:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:10:32:94:35:CF:21:03:AC:B8:D1:C2:A9:AD:BB:7A:52:BD:FF:5A
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qxAylDXPIQOsuNHCqa27elK9_1o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:454::/47
                  2a06:a005:45a::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:fa:f6:b2:ca:fc:1e:85:c2:ab:c3:77:07:c9:6f:96:f1:7a:
         1a:d9:a7:00:10:a8:6b:05:68:1b:30:25:1b:d3:53:d2:22:d0:
         a6:da:39:62:a6:df:76:46:f7:0b:9c:86:f9:f3:c1:e1:fa:db:
         61:30:7b:84:5f:cb:21:4d:31:bb:0b:4f:9a:30:5a:5c:5f:37:
         50:37:ff:0e:d9:39:ec:94:ac:09:5a:46:c7:45:f8:09:9a:b4:
         d4:be:5b:be:a5:0b:0d:dc:87:c1:ea:05:a6:03:09:db:b9:4b:
         b5:10:46:7b:c0:b4:4d:ad:ad:cf:4d:81:09:ab:c6:a8:e6:b5:
         fb:32:09:ae:e9:4e:97:35:8a:ea:ff:4a:6a:53:b9:99:3a:a2:
         3e:8b:8a:84:f7:77:b0:ba:56:a5:ae:96:eb:39:b9:21:4c:71:
         0c:31:a6:76:e6:24:21:d6:73:78:6a:02:03:87:5d:2a:3c:71:
         2f:05:7b:23:94:fa:0e:b9:4e:4d:a6:1c:cf:2b:60:75:aa:73:
         c2:50:78:89:cf:76:c4:56:bf:07:65:a3:db:b1:05:3a:d2:36:
         cd:d6:46:21:b0:b3:3a:f5:cd:c3:4f:ab:53:a6:78:5e:94:f8:
         d3:4f:a1:33:04:72:9d:3e:72:08:66:b2:3e:70:48:7d:58:90:
         ff:12:7c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----