Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/tM0wKsmhEYccDgDtkUo3vhnNFtU.roa
File:                     tM0wKsmhEYccDgDtkUo3vhnNFtU.roa (raw, json)
Hash identifier:          DqcarJMCqViJssVkaCMoYeSG0prH3P6UZkL9p3IGhZo=
Subject key identifier:   B4:CD:30:2A:C9:A1:11:87:1C:0E:00:ED:91:4A:37:BE:19:CD:16:D5
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182FD563E79C26A693605B8AC23698FEBB5
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/tM0wKsmhEYccDgDtkUo3vhnNFtU.roa
Signing time:             Fri 02 Sep 2022 08:34:23 +0000
ROA not before:           Fri 02 Sep 2022 08:34:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203913
IP address blocks:        2a06:1287:1600::/40 maxlen: 48
                          2a06:a005:a05::/48 maxlen: 48
                          2a06:a005:a16::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:fd:56:3e:79:c2:6a:69:36:05:b8:ac:23:69:8f:eb:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep  2 08:34:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b4cd302ac9a111871c0e00ed914a37be19cd16d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ce:4b:1b:07:17:e7:64:81:30:39:55:dc:8f:
                    50:a3:d9:18:41:85:4d:47:95:29:71:61:98:f1:87:
                    f9:85:0e:f7:bf:43:fb:18:36:46:28:74:52:2d:60:
                    93:ac:5b:48:9a:6f:e9:68:fa:18:8e:69:32:9f:45:
                    a5:e4:95:05:22:a2:62:f2:ea:b5:73:e5:c0:24:c0:
                    60:ad:92:12:74:b0:55:65:4d:48:d8:40:6a:47:83:
                    c6:35:20:d8:7d:4f:2e:68:bd:8e:61:c4:d7:a0:a4:
                    b0:c2:b1:98:7b:2c:8a:38:49:07:43:0c:0f:8e:e7:
                    96:fc:f5:00:98:cb:ba:1b:db:20:fd:18:29:9a:d0:
                    f0:c2:bc:1f:d0:d7:e3:32:2a:9c:67:90:25:20:89:
                    96:6f:9b:49:a5:66:b7:80:47:75:07:dc:c2:20:a2:
                    9f:cb:2a:07:e1:ae:4f:98:57:fb:cc:fc:d6:4b:26:
                    f6:74:2c:c8:a1:8d:38:17:86:1e:52:58:82:8e:7a:
                    65:27:67:4b:a9:58:92:cb:e4:0b:83:2d:e0:c8:56:
                    5e:c1:e2:9d:51:9b:07:a4:5f:c3:12:86:d4:63:07:
                    e7:43:24:f4:ed:bf:88:af:56:b6:93:2d:3f:e1:ea:
                    46:de:7d:d2:58:0b:e9:be:63:52:68:0f:45:fe:7b:
                    7f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CD:30:2A:C9:A1:11:87:1C:0E:00:ED:91:4A:37:BE:19:CD:16:D5
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/tM0wKsmhEYccDgDtkUo3vhnNFtU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:1600::/40
                  2a06:a005:a05::/48
                  2a06:a005:a16::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:7e:5b:df:a5:ff:73:42:e3:6e:08:b6:a1:e2:60:6f:25:8d:
         8e:46:d7:18:a6:7e:04:c5:15:9d:75:c7:ca:f4:21:b2:68:bc:
         8f:7f:7a:10:fd:cc:9b:56:66:23:b3:92:52:5d:6b:f3:46:38:
         1f:57:f1:28:8d:73:54:5e:fe:b5:90:1e:6b:12:62:d3:76:53:
         f7:d1:ae:ed:31:a2:52:3d:89:04:cd:03:25:ef:b2:ad:0a:1a:
         45:99:ca:aa:23:b4:5f:f3:59:8c:02:b2:9e:55:44:ea:01:70:
         0f:29:09:36:9a:5c:a4:21:94:2a:60:ee:4f:f8:69:52:f9:0d:
         e4:4f:37:91:f9:25:c0:e5:bd:e5:61:55:98:c1:25:5c:31:e5:
         72:61:d7:26:6a:f2:be:fc:1c:80:dc:17:64:22:d1:12:56:1b:
         aa:4c:a3:56:2d:ad:64:0a:07:18:9e:c0:07:41:cd:ce:9d:2d:
         c5:38:4f:af:8a:06:e5:6a:0b:b8:68:a8:22:fd:36:b2:0e:48:
         c9:19:b6:db:26:9f:eb:a2:53:20:70:c7:c9:9a:e9:6d:bd:b0:
         06:7a:c0:67:7a:49:ce:e7:15:0d:3d:ca:7b:53:fc:dc:3a:0c:
         94:5d:bc:38:2f:96:1c:d4:4b:c2:8b:eb:1d:ad:5c:0e:b7:56:
         d8:39:e2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----