Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vTymBcgYGF6-gLpPIkQxGf55FYA.roa
File:                     vTymBcgYGF6-gLpPIkQxGf55FYA.roa (raw, json)
Hash identifier:          I3RP2OeTXBAYouITmZV4dzrOXUH390xTExVW8+ZJWUE=
Subject key identifier:   BD:3C:A6:05:C8:18:18:5E:BE:80:BA:4F:22:44:31:19:FE:79:15:80
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184AA132723ABCC79CD3EE9D98EBCA64FF7
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vTymBcgYGF6-gLpPIkQxGf55FYA.roa
Signing time:             Thu 24 Nov 2022 14:38:12 +0000
ROA not before:           Thu 24 Nov 2022 14:38:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201763
IP address blocks:        2a06:a005:2100::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:aa:13:27:23:ab:cc:79:cd:3e:e9:d9:8e:bc:a6:4f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 24 14:38:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bd3ca605c818185ebe80ba4f22443119fe791580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d4:01:be:54:72:69:87:65:57:e3:2f:f3:ae:
                    f5:28:22:79:35:98:d5:6e:e6:d4:7d:36:8a:37:a0:
                    77:41:fb:ee:7d:00:e0:d2:59:6d:70:ae:b9:97:58:
                    00:cc:66:31:ff:7a:89:95:a7:ad:20:60:04:52:8f:
                    eb:8a:e3:61:24:40:77:90:b1:42:b3:67:3c:ea:24:
                    2f:c5:3a:66:06:0e:bd:16:a6:d1:79:4b:cc:20:e6:
                    6d:9b:42:81:a6:dc:ac:5f:3c:de:37:da:83:25:a4:
                    13:98:95:7f:77:61:32:0a:11:1e:24:d9:96:ac:6c:
                    6f:d1:2c:5d:62:c8:18:2d:9e:bf:9d:3b:c3:d9:ca:
                    c2:05:c5:8f:b3:59:2b:f4:0d:77:a4:a8:e0:b2:b2:
                    69:47:d7:9b:f9:64:f1:28:37:3b:97:d3:3f:a6:9c:
                    92:bb:89:79:76:32:ad:c7:61:23:20:21:f8:59:e6:
                    d1:ed:ec:f0:32:89:d2:a2:87:50:e1:79:e3:fa:e2:
                    ee:74:ad:f3:10:c7:23:84:bd:c7:aa:86:ad:8a:a0:
                    ff:79:4a:75:97:77:bf:78:8f:54:17:c1:87:80:9e:
                    44:7d:4d:72:f8:0c:19:41:1a:b5:e3:0d:c0:d5:58:
                    0f:5b:03:3e:6f:b0:ce:9f:3b:10:72:78:73:02:ae:
                    b9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3C:A6:05:C8:18:18:5E:BE:80:BA:4F:22:44:31:19:FE:79:15:80
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vTymBcgYGF6-gLpPIkQxGf55FYA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2100::/44

    Signature Algorithm: sha256WithRSAEncryption
         7e:ec:69:3e:7b:a2:a9:29:5c:aa:af:85:ba:20:7a:ca:68:1b:
         3b:96:22:2d:5b:29:46:b1:dc:46:1e:58:e7:44:a4:9f:e0:7a:
         64:d8:ef:e7:eb:89:fb:0a:38:af:70:06:3f:05:92:80:c1:9e:
         9f:e0:75:0a:b1:bf:a8:02:37:7d:85:14:e1:07:4e:3a:b1:62:
         9e:66:b6:6b:a7:fc:3a:53:cb:32:8e:fe:16:ee:fb:60:e9:49:
         15:a1:9d:ba:6e:13:04:53:08:04:ef:aa:f4:12:0b:4c:cb:55:
         fc:27:75:0b:f1:6f:7a:73:83:db:29:1d:60:54:f2:86:f4:17:
         32:7c:6b:fb:44:73:ac:c9:36:e3:70:96:13:91:72:37:09:c5:
         e5:8a:34:74:05:b5:a7:6c:20:da:ed:b2:3e:53:c9:7f:e1:2a:
         c3:d0:9b:91:88:9a:8d:ab:f8:1c:e5:57:4c:a4:47:32:c1:6b:
         c7:ab:a7:db:0b:83:a4:8a:39:fa:33:c0:e8:1d:54:c7:13:1b:
         73:a9:46:c8:cd:ce:ae:d7:71:7e:0a:1e:60:cd:3b:d5:76:03:
         dd:8c:5d:89:0c:d6:3c:7f:2e:4e:2e:1d:17:cb:66:d5:97:42:
         94:ce:bb:d0:3c:bc:fa:ed:96:9c:57:0b:32:e3:2b:b4:a4:0c:
         e4:bb:bc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----