Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/t-pZjfTu3nGKHSy9jEGl5ItP1qA.roa
File:                     t-pZjfTu3nGKHSy9jEGl5ItP1qA.roa (raw, json)
Hash identifier:          F/SGGuK9RR+JmqmhHb00+ftkxt2JjSkL4m4Izo8IK2Q=
Subject key identifier:   B7:EA:59:8D:F4:EE:DE:71:8A:1D:2C:BD:8C:41:A5:E4:8B:4F:D6:A0
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       189E0BA1
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/t-pZjfTu3nGKHSy9jEGl5ItP1qA.roa
Signing time:             Sat 23 Apr 2022 07:36:42 +0000
ROA not before:           Sat 23 Apr 2022 07:36:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200897
IP address blocks:        2a06:a005:5b9::/48 maxlen: 48
                          2a05:dfc7:3300::/43 maxlen: 48
                          2a05:dfc7:3000::/43 maxlen: 48
                          2a05:dfc7:2900::/43 maxlen: 48
                          2a05:dfc7:1000::/43 maxlen: 48
                          2a05:dfc7:8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413010849 (0x189e0ba1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 23 07:36:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b7ea598df4eede718a1d2cbd8c41a5e48b4fd6a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:63:1a:c2:01:70:da:3f:90:4d:32:c6:ad:69:
                    f5:c5:ba:de:20:45:a3:b5:2f:b9:1a:e8:1e:2c:4f:
                    4a:97:a6:9a:95:8f:54:0a:b4:0f:f5:b3:0a:75:66:
                    37:59:9f:a6:74:a3:d5:7e:c6:77:ad:22:66:f4:f3:
                    40:b4:5d:2a:31:65:6f:04:f1:d1:8c:e9:dc:5f:ad:
                    5f:7d:8c:e5:33:45:02:40:a5:a7:e0:7d:04:95:51:
                    82:83:22:d7:3c:15:44:76:da:51:4c:b2:d8:13:ae:
                    dc:cc:c6:19:be:c1:e6:0c:c6:f9:75:71:79:55:bf:
                    f2:95:e6:67:00:99:bc:9c:38:07:39:04:33:d9:89:
                    cd:2e:06:4a:08:75:d7:56:55:76:e7:64:fe:f8:37:
                    02:bf:f8:98:a3:83:95:ad:0f:f9:e1:e9:1e:c7:bf:
                    34:46:ee:0f:a2:5e:aa:2d:19:1d:2c:4f:62:11:0d:
                    9a:1f:5e:90:c4:3c:eb:c7:fe:9e:fb:c8:25:5b:82:
                    56:e6:3e:17:b1:9d:2f:95:92:2d:eb:11:26:ad:c5:
                    b4:a8:09:45:5a:f9:b9:e8:99:46:54:0d:9f:c5:79:
                    b8:e2:74:e6:19:98:f7:44:96:2a:fe:c5:50:b8:b8:
                    eb:e1:6a:b7:e3:35:df:2f:28:51:1f:5e:a8:cd:ca:
                    a0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EA:59:8D:F4:EE:DE:71:8A:1D:2C:BD:8C:41:A5:E4:8B:4F:D6:A0
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/t-pZjfTu3nGKHSy9jEGl5ItP1qA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:8::/48
                  2a05:dfc7:1000::/43
                  2a05:dfc7:2900::/43
                  2a05:dfc7:3000::/43
                  2a05:dfc7:3300::/43
                  2a06:a005:5b9::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:5e:c9:79:7d:c4:ec:71:9a:40:d8:ba:32:e2:d2:0e:03:bb:
         59:39:6b:70:97:1e:98:86:55:54:6d:19:e5:9a:f2:73:34:94:
         38:16:ac:09:7f:bc:82:87:6b:1f:c0:03:d2:d7:fc:5f:0a:19:
         aa:5f:83:b5:ee:10:91:8f:fb:a2:a4:87:98:b6:b1:45:db:8c:
         3e:8f:47:74:fb:ae:e3:6e:a9:94:fc:92:2e:7e:8d:40:50:fa:
         f1:4a:f6:5d:c7:37:9f:c4:af:e2:86:90:bb:2b:ed:94:63:b3:
         31:6f:47:8c:66:72:c8:7f:b1:53:fe:ec:e6:4f:3f:3f:01:1f:
         35:d3:86:ec:c2:27:c8:2c:a2:4e:7e:4c:b9:83:3b:8a:6b:80:
         9e:10:27:6b:f2:95:72:fc:6f:fb:a3:de:af:6a:17:45:bf:6a:
         d3:b7:3b:21:c6:e0:cf:0a:57:fb:8e:08:0e:7b:68:93:d6:68:
         13:c3:5e:3b:bf:57:52:c9:24:c4:43:07:ad:82:26:e0:c0:38:
         8c:a7:da:46:c4:22:1d:1a:be:92:19:0c:85:d0:15:c7:33:83:
         27:e3:9e:9b:86:5f:8e:ca:d1:b2:42:ab:a8:bb:58:ec:8a:d9:
         58:17:d5:85:cc:a2:21:74:f3:80:7f:41:33:0f:b0:16:ca:70:
         03:be:de:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----