Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/r8aQYPKZAaeH4QpDeenTb58A8vo.roa
File:                     r8aQYPKZAaeH4QpDeenTb58A8vo.roa (raw, json)
Hash identifier:          mc0SuVgys7Rz5pGyL/FcB4qkEvgqFxm2ZlZrJvpXryI=
Subject key identifier:   AF:C6:90:60:F2:99:01:A7:87:E1:0A:43:79:E9:D3:6F:9F:00:F2:FA
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183A504F4C1726AAF2BEACE4F332F6A0F44
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/r8aQYPKZAaeH4QpDeenTb58A8vo.roa
Signing time:             Tue 04 Oct 2022 22:01:48 +0000
ROA not before:           Tue 04 Oct 2022 22:01:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62430
IP address blocks:        2a06:a005:19::/48 maxlen: 48
                          2a06:a005:840::/44 maxlen: 48
                          2a06:a005:5ab::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:a5:04:f4:c1:72:6a:af:2b:ea:ce:4f:33:2f:6a:0f:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct  4 22:01:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=afc69060f29901a787e10a4379e9d36f9f00f2fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c7:ff:d3:5a:39:c7:39:02:53:4e:22:97:1c:
                    ec:2e:f3:74:8c:61:df:45:ad:d9:d0:27:c2:fe:1d:
                    7f:34:b2:11:87:b0:36:1d:2a:3d:b1:44:f8:36:d3:
                    29:5f:89:3e:24:09:00:de:52:61:65:73:f3:3e:ff:
                    b7:43:ab:0c:20:8d:b8:f7:3d:e5:03:54:89:12:42:
                    a4:e3:15:d0:1c:b3:b3:1d:02:18:e9:57:b4:1b:4a:
                    be:0f:85:6b:71:2e:4a:49:3c:cf:d1:d5:80:68:e7:
                    61:70:a4:37:22:e4:57:fd:9f:a9:28:ac:dc:77:c4:
                    ab:68:5a:78:24:39:cb:c7:66:f2:0b:ab:7f:bf:f9:
                    f5:cb:43:f5:94:50:f4:30:79:c7:60:b9:e5:73:98:
                    a1:7c:16:da:53:5a:34:87:d8:c0:81:c3:0b:e8:44:
                    99:f1:8f:11:71:b8:ce:15:16:55:e9:74:dd:85:f5:
                    19:2f:fb:a6:40:a7:01:6c:5e:0b:60:4c:6f:05:92:
                    9a:b1:91:24:4a:05:f2:d1:e3:d5:40:28:b7:34:87:
                    2c:6a:de:11:37:e5:19:b4:b7:80:0c:bf:70:79:a8:
                    21:6e:a4:52:c2:79:02:85:5c:2d:22:74:bf:48:6d:
                    b7:5d:fb:09:26:95:b5:c0:34:5f:36:fb:04:1b:75:
                    e8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C6:90:60:F2:99:01:A7:87:E1:0A:43:79:E9:D3:6F:9F:00:F2:FA
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/r8aQYPKZAaeH4QpDeenTb58A8vo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:19::/48
                  2a06:a005:5ab::/48
                  2a06:a005:840::/44

    Signature Algorithm: sha256WithRSAEncryption
         9d:a4:60:9c:4f:26:5b:56:2c:54:da:8c:46:30:66:5f:2f:b9:
         4a:86:bb:56:fd:6a:b9:8d:7e:33:67:74:89:ad:6f:7a:30:bc:
         ea:92:03:c7:1d:09:a5:fb:92:49:3f:52:2c:61:2e:1b:62:38:
         bc:15:c8:fe:2d:98:20:1f:5c:d7:2d:15:e3:e2:4d:67:48:f2:
         bb:8c:4c:74:c7:a8:bd:c7:83:ee:8e:36:24:0b:ff:45:08:30:
         c3:4e:0e:7f:cc:bf:26:8d:f0:1b:48:a4:3e:d7:ae:7f:90:a8:
         a5:05:ac:66:3a:d8:80:bd:a4:33:ce:b1:93:d7:48:81:8b:33:
         5d:8d:b9:0f:5d:1f:e7:dc:c6:97:eb:1e:80:b9:56:21:24:58:
         f9:ce:ea:c5:b3:af:f2:1a:0f:20:ef:4b:e4:99:06:2a:8b:d3:
         d2:85:5c:12:be:bb:7e:89:4b:6f:d7:df:df:d3:36:29:ba:9d:
         5d:f2:e9:bf:9e:56:d8:55:09:b4:ac:4d:f1:84:ff:30:a4:37:
         29:19:70:5e:af:fa:52:a0:c7:44:b7:65:28:b4:41:65:c0:9b:
         c7:06:23:ad:dd:27:8f:ed:e9:23:75:81:30:cb:08:1e:af:3c:
         17:1e:85:64:d9:fd:00:45:a7:27:c3:e9:14:8c:93:8e:2d:b6:
         84:33:1f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----