Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/sbs6vQ7eiiuv-ZNb4zYv0mNYTkI.roa
File:                     sbs6vQ7eiiuv-ZNb4zYv0mNYTkI.roa (raw, json)
Hash identifier:          TpyFpnMj06N3WYzwefqz6ch3c4j5Qv7M88pjX+Q7/6Y=
Subject key identifier:   B1:BB:3A:BD:0E:DE:8A:2B:AF:F9:93:5B:E3:36:2F:D2:63:58:4E:42
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184E2E0BC4CD998152E0D2ACA4F8098FD56
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/sbs6vQ7eiiuv-ZNb4zYv0mNYTkI.roa
Signing time:             Mon 05 Dec 2022 15:21:29 +0000
ROA not before:           Mon 05 Dec 2022 15:21:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200879
IP address blocks:        2a0a:6040:f200::/40 maxlen: 48
                          2a06:a005:6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:e2:e0:bc:4c:d9:98:15:2e:0d:2a:ca:4f:80:98:fd:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  5 15:21:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b1bb3abd0ede8a2baff9935be3362fd263584e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c6:a4:35:2f:e0:f8:7d:95:1b:9c:7d:8a:21:
                    88:ce:81:b6:0b:b2:cc:6c:5f:5b:b0:d1:c8:9f:7a:
                    db:8a:5b:7c:74:c8:be:10:ab:0d:a2:44:51:af:0d:
                    93:c1:f2:52:b1:c9:96:15:2e:36:50:b1:39:b7:27:
                    be:33:36:9a:2b:23:5c:f7:f4:31:10:77:37:88:2f:
                    e3:0f:d3:fe:d0:78:f7:b0:53:45:4e:ac:ca:59:ed:
                    02:84:9a:40:80:1f:39:20:48:e3:77:9c:78:02:83:
                    e5:51:f1:86:ff:dc:25:72:e4:00:03:0a:d0:f2:15:
                    81:39:c0:53:07:a7:85:2a:75:04:a1:f8:45:d1:af:
                    e0:30:26:14:d1:c1:f6:dc:1d:0d:ce:84:69:25:31:
                    77:61:f0:a1:11:86:ad:40:80:88:5f:bb:a3:ed:1a:
                    59:aa:55:c8:3f:3a:24:70:1c:56:42:00:83:ce:d7:
                    59:76:06:d6:95:c4:33:f0:a6:6d:97:8c:bd:46:a8:
                    4c:0a:b6:81:f7:5a:fc:98:de:15:7e:db:d7:77:fd:
                    95:8c:02:88:59:eb:ee:29:42:48:25:dd:19:dc:78:
                    bc:8e:cb:91:85:a5:ac:1d:f2:dd:34:62:33:8a:29:
                    a0:78:3f:56:e8:ab:17:51:65:7f:84:bc:97:e8:9d:
                    29:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BB:3A:BD:0E:DE:8A:2B:AF:F9:93:5B:E3:36:2F:D2:63:58:4E:42
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/sbs6vQ7eiiuv-ZNb4zYv0mNYTkI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:6::/48
                  2a0a:6040:f200::/40

    Signature Algorithm: sha256WithRSAEncryption
         96:39:d0:06:f8:5d:ef:0b:8d:aa:f8:82:e7:86:c5:03:e2:0a:
         52:b3:10:75:06:8d:8b:3e:de:64:40:a8:f6:a4:4e:95:98:8f:
         f9:0b:56:e8:d1:4a:c5:49:da:9f:db:6d:ca:6e:7d:36:e3:96:
         e8:05:c5:2c:65:8a:d5:0d:f0:6f:c9:6e:8c:89:5c:bd:23:24:
         75:cc:af:f6:90:0a:77:d9:10:b0:2e:b9:01:2b:0e:42:d4:b9:
         a8:97:7c:6d:88:77:2f:39:37:cf:65:4b:a1:c9:a0:c4:b9:fd:
         6f:83:e4:64:90:53:fc:3b:5a:55:48:d7:cd:01:8e:b8:93:a5:
         6f:1d:b1:88:10:d9:b8:2b:5e:84:f8:0f:96:73:e7:ac:cd:95:
         5a:6e:60:96:d4:f1:15:f3:b8:b2:c1:cd:18:b8:dc:db:94:32:
         85:c4:a8:9c:35:68:3c:1f:5b:bb:8e:ca:64:99:3e:c2:67:ba:
         98:b3:b6:e4:b3:ac:cb:cc:c8:52:08:69:46:83:2a:9c:04:dd:
         13:c1:4a:d5:8c:c9:12:95:6d:44:92:9c:3d:a7:f7:4e:0b:63:
         8f:d9:e2:d6:0c:ad:7b:b1:00:2a:8f:80:f7:9c:c9:3b:34:74:
         e2:d5:19:2e:2b:77:4d:04:58:69:e0:a2:c2:28:da:e9:5d:80:
         5e:be:fd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----