Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/s2C9MCTQ6hmtYNvDEvk9AtpDH54.roa
File:                     s2C9MCTQ6hmtYNvDEvk9AtpDH54.roa (raw, json)
Hash identifier:          M9auivOt6H8lUCRe+H9qUIZNT0zOO9hxj5ugYTvX3lg=
Subject key identifier:   B3:60:BD:30:24:D0:EA:19:AD:60:DB:C3:12:F9:3D:02:DA:43:1F:9E
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183001F6EFA02DE02135EE3AB38DA998EB9
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/s2C9MCTQ6hmtYNvDEvk9AtpDH54.roa
Signing time:             Fri 02 Sep 2022 21:33:23 +0000
ROA not before:           Fri 02 Sep 2022 21:33:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203145
IP address blocks:        2a06:a005:a0f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:00:1f:6e:fa:02:de:02:13:5e:e3:ab:38:da:99:8e:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep  2 21:33:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b360bd3024d0ea19ad60dbc312f93d02da431f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:dc:80:f0:4e:af:eb:b0:e9:7c:51:bb:31:8b:
                    6a:da:e4:28:40:b4:48:3c:c3:07:f2:eb:ce:00:38:
                    cf:bc:b5:60:46:ec:ca:2e:ca:7d:65:34:09:cf:42:
                    e2:ca:57:4e:35:9e:8c:48:56:73:8e:0c:69:d7:18:
                    22:e0:70:4b:bf:42:a0:55:57:42:7b:aa:7f:95:bd:
                    74:31:17:22:86:fb:9c:26:df:3e:f3:28:ea:fd:cb:
                    24:57:84:b3:cf:b7:69:58:fb:95:5f:e9:da:3c:cf:
                    7f:b8:7e:47:06:b2:ce:6c:d6:99:10:ab:9d:de:ad:
                    b0:d9:cb:e7:a9:61:7c:61:a3:77:a5:48:9a:ed:d6:
                    db:e1:21:7d:ce:81:c9:ef:bf:ac:51:db:27:a3:d5:
                    7a:41:55:3e:0b:96:ac:1f:7f:e8:08:90:91:97:d6:
                    e3:ef:d4:66:92:64:bf:6e:a2:0f:bc:14:1e:62:12:
                    61:7c:1c:f5:b4:2f:16:31:30:04:7e:08:b1:f9:8f:
                    5d:f9:94:21:98:75:73:00:0f:dc:d2:cf:98:44:93:
                    97:ab:7e:7a:5b:e3:ed:2f:f2:ea:4d:28:a7:f4:0d:
                    59:bd:47:57:a8:09:2b:53:a8:25:a5:30:74:2e:37:
                    19:23:2d:78:5d:da:ec:62:be:f1:a7:d8:c5:79:da:
                    b3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:60:BD:30:24:D0:EA:19:AD:60:DB:C3:12:F9:3D:02:DA:43:1F:9E
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/s2C9MCTQ6hmtYNvDEvk9AtpDH54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:a0f::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:bc:82:bd:a9:65:b1:8d:09:34:d3:3c:e2:80:c1:8a:0f:76:
         e8:1e:b9:b7:17:80:83:6f:e5:f6:82:7f:42:b1:c3:1e:9d:bb:
         04:1f:4b:ca:ec:06:4e:15:a1:53:1f:f6:84:4f:d6:81:a4:bd:
         f6:c6:b5:fb:70:39:e6:8b:65:d4:51:d0:07:c2:91:f2:87:09:
         f2:68:a4:c2:3e:ae:ef:b6:59:be:09:53:70:e8:26:78:b5:03:
         ec:e2:bd:9c:7f:ca:85:de:2e:87:be:d9:9b:1c:7d:a0:e1:ae:
         8e:10:62:aa:8b:b4:3a:e5:7b:72:6a:98:82:83:2c:61:0a:ab:
         b4:da:14:ae:8e:1b:21:ae:6a:06:e7:22:4f:fa:77:cf:64:e1:
         1b:f3:ed:22:fb:5d:40:98:39:d4:ca:07:bf:81:3c:a5:6e:63:
         6f:f6:9b:d8:9c:0b:5d:f3:ca:17:71:61:11:4f:c5:b5:64:a7:
         90:52:39:a4:1f:d8:be:18:e6:c2:13:76:e6:a1:21:57:b5:96:
         c7:20:30:f1:73:45:32:02:d8:07:10:bf:f6:1b:75:c9:57:e9:
         68:93:ab:af:18:3b:cb:49:ce:46:b5:14:17:91:d4:73:89:48:
         0a:e3:58:d1:c0:51:33:0f:16:f4:7f:f0:c0:db:10:83:34:9e:
         33:aa:44:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----