Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/sETRqVAxBFKWPwMtRTBgW0ndRBQ.roa
File:                     sETRqVAxBFKWPwMtRTBgW0ndRBQ.roa (raw, json)
Hash identifier:          l5dRnGrSUnjDGOd7DvsDPL23+e2+w8oS1eOkK50ml9o=
Subject key identifier:   B0:44:D1:A9:50:31:04:52:96:3F:03:2D:45:30:60:5B:49:DD:44:14
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183212A4F9C984A51CC19273AD15FA2BF46
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/sETRqVAxBFKWPwMtRTBgW0ndRBQ.roa
Signing time:             Fri 09 Sep 2022 07:32:44 +0000
ROA not before:           Fri 09 Sep 2022 07:32:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     54681
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48
                          2a06:a005:1980::/44 maxlen: 48
                          2a06:a005:f00::/44 maxlen: 48
                          2a06:a005:1960::/44 maxlen: 48
                          2a06:a005:ee0::/44 maxlen: 48
                          2a06:a005:f20::/44 maxlen: 48
                          2a06:a005:18a0::/44 maxlen: 48
                          2a07:54c7::/32 maxlen: 48
                          2a06:9f80::/29 maxlen: 48
                          2a06:a005:1970::/44 maxlen: 48
                          2a06:a005:ef0::/44 maxlen: 48
                          2a06:a005:1950::/44 maxlen: 48
                          2a06:a005:f10::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:21:2a:4f:9c:98:4a:51:cc:19:27:3a:d1:5f:a2:bf:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep  9 07:32:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b044d1a950310452963f032d4530605b49dd4414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5e:c4:6c:6b:6f:52:54:94:01:75:c8:c4:dd:
                    d0:9b:9a:ae:73:15:ad:ed:00:2c:05:e7:3c:75:ea:
                    22:57:43:a8:79:d6:a4:aa:dd:ed:01:45:7a:66:75:
                    88:a0:6d:4e:5e:4e:8d:0d:1f:e6:d3:bb:37:06:c5:
                    4f:8e:80:48:59:6f:ea:2a:83:f0:88:0b:cd:c2:dd:
                    2c:26:b5:28:56:78:af:a0:c7:d3:e5:a9:12:35:8e:
                    bd:2d:d4:f2:d3:b6:84:42:29:5f:96:5b:cd:10:e1:
                    ce:73:35:80:c0:c7:70:cc:9f:91:bc:cb:c4:8e:a2:
                    0e:d6:e2:9a:2a:ad:d2:8d:49:89:46:c4:79:1a:d3:
                    8c:69:8a:8d:94:07:83:6c:c1:4e:d2:3d:50:96:b3:
                    4b:b5:d3:c4:7e:8e:be:72:69:92:80:f5:47:6b:e0:
                    a5:41:f8:f5:d0:ed:f2:2b:1e:cc:40:1e:f1:02:c4:
                    ff:05:01:85:31:e7:91:c1:e8:59:31:59:be:4c:ad:
                    a5:e3:95:cf:31:52:19:02:b7:c6:cb:30:e5:e0:fe:
                    57:15:a4:2b:18:87:ed:7a:de:cd:bb:4b:8e:cf:02:
                    c8:25:88:2d:a5:18:8f:b1:bd:00:98:d9:d9:de:8e:
                    03:52:a5:40:5d:46:78:8e:af:19:f7:f1:aa:f3:b2:
                    bb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:44:D1:A9:50:31:04:52:96:3F:03:2D:45:30:60:5B:49:DD:44:14
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/sETRqVAxBFKWPwMtRTBgW0ndRBQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f80::/29
                  2a06:a005:ee0::-2a06:a005:f2f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:18a0::/44
                  2a06:a005:1950::-2a06:a005:198f:ffff:ffff:ffff:ffff:ffff
                  2a07:54c2:b00b::/48
                  2a07:54c7::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:86:74:ea:44:86:ac:51:4c:a5:5c:af:7b:88:c4:d3:1f:82:
         0e:df:81:69:6d:37:a8:0d:1e:f2:f5:ee:27:f3:64:ca:a7:92:
         4a:b7:00:2c:b7:22:31:a2:98:da:27:bd:a8:92:16:3c:71:a5:
         fb:df:6a:47:15:c3:f1:77:98:4e:b6:cb:12:b3:b1:59:9b:54:
         33:8b:e7:a3:c3:62:d3:2a:35:3a:f0:c7:14:43:b3:06:90:c9:
         64:10:e8:a5:f9:d6:ed:a8:b1:37:52:e5:e2:11:5b:3e:ae:9b:
         22:44:df:be:b6:87:22:d1:fa:52:04:a5:7b:a0:e5:07:c8:dc:
         10:3d:f3:9a:72:69:f3:5c:50:4f:1d:ce:e1:78:86:b0:ec:34:
         7f:1f:23:aa:c3:9a:ee:e2:a2:66:3f:19:43:1c:39:5a:89:60:
         fb:0e:0f:c8:7f:87:59:d5:51:f9:26:bc:bc:4d:87:80:68:8a:
         63:1f:98:ba:f2:a0:11:1f:8f:fc:6f:4e:ac:94:09:00:30:c3:
         ed:58:8e:11:80:57:00:87:66:9b:c0:cb:42:10:b1:e0:86:96:
         b2:21:56:2e:24:f5:2a:2b:2d:c9:65:95:27:8d:44:73:58:b8:
         73:6b:f8:77:1d:96:c3:de:f9:6e:33:25:a6:29:d3:26:8a:13:
         24:55:ed:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----