Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vaOgVcertr7WLn9nWS5xmeY6mB0.roa
File:                     vaOgVcertr7WLn9nWS5xmeY6mB0.roa (raw, json)
Hash identifier:          sx2GfS1tX63rd/7w7J7gbRVDnflyo9p0b5AaAPptkF0=
Subject key identifier:   BD:A3:A0:55:C7:AB:B6:BE:D6:2E:7F:67:59:2E:71:99:E6:3A:98:1D
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182F5A7AF5F97A4429A53976E9A3B6C0484
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vaOgVcertr7WLn9nWS5xmeY6mB0.roa
Signing time:             Wed 31 Aug 2022 20:46:23 +0000
ROA not before:           Wed 31 Aug 2022 20:46:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     147297
IP address blocks:        2a06:a005:5a4::/48 maxlen: 48
                          2a06:a005:48c::/48 maxlen: 48
                          2a06:a005:48f::/48 maxlen: 48
                          2a06:a005:48d::/48 maxlen: 48
                          2a06:a005:48e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:f5:a7:af:5f:97:a4:42:9a:53:97:6e:9a:3b:6c:04:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug 31 20:46:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bda3a055c7abb6bed62e7f67592e7199e63a981d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:42:33:19:bf:d0:0c:8a:2e:49:27:88:a7:c0:
                    3b:62:03:b7:f4:32:d3:46:59:c2:a2:b0:0a:2e:02:
                    12:24:7c:78:88:8b:63:a1:d0:74:98:35:58:2c:5d:
                    ab:6e:15:f0:4c:10:d1:fc:b9:45:a5:f3:f6:bf:66:
                    df:6a:ff:6c:17:be:6f:ab:26:b7:9c:99:23:f2:4e:
                    38:35:2a:6b:bb:a3:d2:1c:84:3f:6b:05:1e:c1:0c:
                    bb:7a:a6:2f:3b:13:e9:5d:cd:d7:68:43:e2:13:ef:
                    93:09:90:52:43:9b:94:63:c4:52:2b:6d:ea:43:33:
                    25:b0:ab:57:08:9e:e1:8a:df:4b:d6:5c:05:00:2a:
                    0b:3c:d9:27:a1:50:d4:bc:11:a3:b0:50:8c:6d:2c:
                    67:69:a0:e0:c3:da:d8:06:db:5b:5a:d5:89:01:f6:
                    65:d1:80:89:da:ae:e6:1f:41:13:ac:54:12:9e:5a:
                    2e:b9:f9:ed:d6:1e:0f:27:e5:2d:28:34:17:a8:cd:
                    dd:b9:e1:cf:de:20:a5:15:c1:aa:05:52:08:6b:b5:
                    76:7b:ef:14:c8:b2:10:22:68:b4:2a:90:3d:8a:e7:
                    22:b1:4b:07:66:e9:d7:2a:9a:da:dc:f6:b2:17:67:
                    ab:10:85:01:3b:19:eb:c1:a0:b6:38:61:a1:38:04:
                    d0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A3:A0:55:C7:AB:B6:BE:D6:2E:7F:67:59:2E:71:99:E6:3A:98:1D
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vaOgVcertr7WLn9nWS5xmeY6mB0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:48c::/46
                  2a06:a005:5a4::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:84:52:79:b4:b3:3b:c4:95:6d:aa:66:11:4f:0e:35:90:d6:
         75:b4:51:1e:0a:fb:f9:48:dc:dd:14:9a:60:59:7f:5b:64:03:
         ff:86:c9:d8:8c:6f:1e:34:0e:19:2e:1b:67:8e:8c:8b:26:9b:
         4f:9b:fa:a9:7c:8e:e9:72:bf:a2:7f:94:cb:20:52:16:ea:82:
         b9:91:ba:00:bb:d2:b1:cc:34:7a:65:3f:51:16:69:e2:a4:cb:
         c1:0b:5e:a6:da:19:48:14:e1:8a:31:c8:1f:c8:10:06:4d:ed:
         d0:a7:0a:a6:17:99:14:0d:1f:b2:23:fd:17:01:25:84:b3:0a:
         8e:5a:43:4c:2b:f1:db:c5:49:fa:9e:58:a7:e1:10:61:73:49:
         31:25:b4:8f:47:8e:ba:bf:7e:73:2b:b9:6d:cc:e2:1e:67:60:
         05:c8:5c:60:af:b9:3c:3b:b7:49:47:a0:0f:8c:34:89:b8:0d:
         97:7b:06:c8:c9:bc:27:c2:21:94:2d:60:0e:c0:b5:cf:56:79:
         98:b9:87:df:a1:c4:d2:24:89:e1:a1:c5:54:a3:5e:b3:24:6b:
         03:73:19:42:a8:4e:a6:5a:56:a3:a8:80:6d:9b:dc:42:9e:92:
         70:30:86:ee:d4:20:66:92:d4:cf:58:76:91:f5:b7:a7:88:36:
         cd:08:56:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----