Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/s-PYe7c3rAPqzBkwvOJHosP3v9g.roa
File:                     s-PYe7c3rAPqzBkwvOJHosP3v9g.roa (raw, json)
Hash identifier:          57ODb04Zz8Nqszai6XSpmW6/6KTXbtWbG82owq1wR+w=
Subject key identifier:   B3:E3:D8:7B:B7:37:AC:03:EA:CC:19:30:BC:E2:47:A2:C3:F7:BF:D8
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184ED45BE8AD5BC9B667AAE3F93C2FF3606
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/s-PYe7c3rAPqzBkwvOJHosP3v9g.roa
Signing time:             Wed 07 Dec 2022 15:48:01 +0000
ROA not before:           Wed 07 Dec 2022 15:48:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212164
IP address blocks:        2a06:a005:1167::/48 maxlen: 48
                          2a0a:6040:c700::/40 maxlen: 48
                          2a06:a005:25e0::/44 maxlen: 48
                          2a06:a005:1168::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:ed:45:be:8a:d5:bc:9b:66:7a:ae:3f:93:c2:ff:36:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  7 15:48:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b3e3d87bb737ac03eacc1930bce247a2c3f7bfd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:30:0c:97:46:c0:79:e6:99:cd:dd:fd:7d:8d:
                    e0:ac:4a:c8:f2:06:75:94:d8:1b:d3:16:35:33:f2:
                    de:5b:ff:fc:02:7d:fd:65:56:34:70:53:12:8d:fb:
                    a0:88:ec:7d:94:68:e8:d6:7a:8a:03:81:7f:d9:ca:
                    60:db:fe:59:83:b9:11:b6:fc:e0:9a:00:79:45:e3:
                    c9:38:53:db:a5:19:bd:23:ec:ed:e4:3b:19:d5:97:
                    40:7c:4e:1c:56:e1:13:29:42:4e:81:29:57:4d:8c:
                    55:3f:cc:a6:36:c9:e3:82:0f:09:ff:83:e6:42:d1:
                    04:04:ee:99:b9:be:db:8c:66:8a:6e:3a:01:92:b6:
                    30:5b:37:02:2f:22:1b:f4:3f:8e:32:85:92:aa:ba:
                    50:f6:6e:f2:45:15:95:b3:f9:69:29:c1:4d:1c:e9:
                    dd:1c:ce:2b:b5:ab:e4:a3:43:4e:c2:5c:57:f5:4e:
                    e4:f7:23:17:0a:6d:9c:ae:39:18:b5:db:39:f5:89:
                    8f:79:36:2e:05:2d:ff:6f:1b:1f:72:7f:00:5c:91:
                    ca:1e:15:65:da:1a:d0:25:ca:a6:71:7a:83:f6:f2:
                    5a:0a:cc:f5:5d:0e:77:2c:6a:67:3e:fc:ca:83:32:
                    b0:3a:18:97:01:f3:65:18:98:ef:fc:b4:66:24:e7:
                    2d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E3:D8:7B:B7:37:AC:03:EA:CC:19:30:BC:E2:47:A2:C3:F7:BF:D8
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/s-PYe7c3rAPqzBkwvOJHosP3v9g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1167::-2a06:a005:1168:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:25e0::/44
                  2a0a:6040:c700::/40

    Signature Algorithm: sha256WithRSAEncryption
         7c:e1:41:84:16:99:9c:71:7f:a4:fe:4a:31:0e:cc:d2:19:dd:
         92:0b:89:81:ee:d2:c0:25:48:ce:f4:91:73:b9:3c:ea:43:8f:
         fa:39:37:81:8f:97:43:bf:e1:43:10:52:2f:be:3a:1c:f9:5c:
         52:32:e5:69:a0:04:a2:7c:33:89:7b:f5:8b:19:e9:65:24:81:
         85:4e:73:c5:8a:17:2e:0e:51:fa:cc:b0:98:17:3e:6b:d2:cb:
         6f:45:6a:40:92:bf:18:54:85:30:9d:5a:42:c4:19:16:77:6e:
         40:66:82:41:04:99:5b:69:17:96:32:e7:40:19:ae:e8:0b:24:
         8f:b4:cc:b2:5a:2e:8b:85:19:2b:d7:b7:cb:8a:b6:01:70:83:
         5f:ad:bd:fd:5e:97:5f:17:ec:0b:91:46:af:a3:99:eb:2f:19:
         7a:c5:ff:70:2d:81:95:77:83:17:2a:02:03:f3:ff:b7:53:15:
         94:42:60:84:cd:c9:86:0d:fe:77:ca:8b:9f:9a:a9:c0:6f:32:
         63:57:99:80:8c:1c:5b:17:bd:a5:9f:c2:8e:85:2a:50:a7:64:
         e1:1f:0b:e4:0b:c2:ec:f7:6d:fe:f7:32:7d:3b:aa:f5:16:14:
         5c:54:65:60:e4:b3:f2:e6:85:34:2c:14:23:29:d4:99:b9:2f:
         27:8f:b4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----