Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/v6kostlJ3heVu3xhwAsaN3HsZmo.roa
File:                     v6kostlJ3heVu3xhwAsaN3HsZmo.roa (raw, json)
Hash identifier:          qNkpaPlad0gFzwXupfN5w743ivHzTNE/wrjQhmOM1KQ=
Subject key identifier:   BF:A9:28:B2:D9:49:DE:17:95:BB:7C:61:C0:0B:1A:37:71:EC:66:6A
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182B2904863269C7E0835BDF96F6FBFD24E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/v6kostlJ3heVu3xhwAsaN3HsZmo.roa
Signing time:             Thu 18 Aug 2022 20:06:16 +0000
ROA not before:           Thu 18 Aug 2022 20:06:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203843
IP address blocks:        2a06:a005:481::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:b2:90:48:63:26:9c:7e:08:35:bd:f9:6f:6f:bf:d2:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug 18 20:06:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bfa928b2d949de1795bb7c61c00b1a3771ec666a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:37:52:1e:4b:5e:40:a9:e1:cd:e0:4a:eb:e5:
                    ad:a5:ea:0d:f2:07:3a:05:42:78:d9:38:24:1c:0c:
                    6e:60:cf:fd:f7:44:83:5c:ff:e2:37:dc:88:70:58:
                    cb:5b:a4:ce:ee:81:a3:76:52:a9:a2:a1:cd:ab:c9:
                    2d:b1:e4:77:f9:30:49:83:de:60:65:06:fe:93:6d:
                    97:b7:ab:e8:4d:e0:9d:de:84:53:b8:da:cb:e6:2f:
                    8e:b7:0f:f4:5b:a5:5f:7d:82:93:65:b8:5e:70:b1:
                    d9:b9:9e:99:fa:45:14:df:f6:9c:9f:cc:0a:83:be:
                    8f:73:7b:3d:cc:15:46:e1:da:c7:d7:73:c2:93:9a:
                    1f:72:dd:cc:d1:e4:79:77:cb:96:69:49:b6:73:3e:
                    07:06:3e:8e:04:34:1c:82:6e:12:fa:ed:f7:f0:0d:
                    12:65:dc:fd:4a:eb:4e:ff:b7:36:e4:6f:df:1a:c8:
                    f7:7a:5d:c9:03:6a:d2:0a:7e:0e:48:0c:30:ad:a3:
                    84:cf:35:9a:b8:9a:06:31:e1:79:33:3d:de:40:bc:
                    64:95:f5:56:01:9f:3e:3e:b8:90:f7:11:76:69:05:
                    a3:23:2d:96:49:f7:cc:bb:49:f0:59:96:b4:d0:ea:
                    26:1d:5a:ba:bb:9c:1f:bf:37:41:3b:01:08:09:51:
                    a4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A9:28:B2:D9:49:DE:17:95:BB:7C:61:C0:0B:1A:37:71:EC:66:6A
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/v6kostlJ3heVu3xhwAsaN3HsZmo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:481::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:b7:6e:6f:84:3f:06:47:55:06:d5:ee:03:b1:23:cc:e1:b8:
         55:f5:bd:cd:2b:16:57:17:8f:ff:7b:3a:cb:6f:84:c7:05:2e:
         13:56:a8:2b:ba:e6:c4:20:fe:d1:42:e9:b0:64:e7:47:d3:3a:
         db:72:4e:ae:a8:a1:3d:12:5e:e4:19:4a:ae:d6:8f:50:ba:9e:
         20:76:2b:d9:e6:fe:aa:fd:8c:e0:91:40:98:07:0d:f4:d1:7c:
         41:a3:24:24:c1:6d:b5:a6:80:ca:8b:25:94:3d:c2:02:50:46:
         4b:70:d0:de:2c:01:4b:92:55:a0:32:aa:1a:10:27:0d:5c:4e:
         ad:7f:4b:9f:58:37:f2:29:2b:cc:6f:2b:81:45:2b:de:14:0b:
         4d:15:60:a1:0b:65:e4:86:b0:ed:3b:76:8f:e3:79:70:ea:ee:
         64:5a:82:06:d9:2a:21:91:bc:b1:a0:9b:f8:a6:e0:f3:ce:ae:
         5e:71:cf:76:c9:03:a7:45:66:ff:70:2a:d3:00:4f:14:83:6d:
         fd:6a:e0:03:e4:ec:01:d0:92:1d:0f:66:a9:9e:f5:ce:1e:32:
         43:1a:a2:92:8a:eb:6f:15:cb:84:8a:62:97:9e:8e:2e:c2:0f:
         e9:09:c3:9b:c0:5b:52:cb:ac:61:f1:ff:0c:88:a8:ff:59:18:
         c5:4d:78:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----