Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vmB2oG7wt4cst0f7tuwskz9OLc4.roa
File:                     vmB2oG7wt4cst0f7tuwskz9OLc4.roa (raw, json)
Hash identifier:          R77IiKfGCcAYQPiyxcnof478eRSh/1JfmvDYUG+k4A4=
Subject key identifier:   BE:60:76:A0:6E:F0:B7:87:2C:B7:47:FB:B6:EC:2C:93:3F:4E:2D:CE
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       16390927
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vmB2oG7wt4cst0f7tuwskz9OLc4.roa
Signing time:             Fri 21 Jan 2022 18:01:02 +0000
ROA not before:           Fri 21 Jan 2022 18:01:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     142594
IP address blocks:        2a06:a000:1d0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 372836647 (0x16390927)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jan 21 18:01:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=be6076a06ef0b7872cb747fbb6ec2c933f4e2dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e1:d9:b5:b0:de:a7:66:85:ba:d6:46:dd:ce:
                    9e:cd:3c:f2:59:4b:83:cc:ca:fd:70:e3:f9:06:05:
                    54:0d:df:d8:1d:1d:0d:51:7b:aa:eb:62:4b:09:db:
                    ab:22:a4:d9:7b:0e:05:24:74:8e:21:78:41:b4:56:
                    81:5b:f6:4a:91:54:fe:5c:5f:ab:c1:27:50:c2:fa:
                    cd:54:7a:04:f3:e1:58:1a:1b:2c:b1:6e:a0:0d:0a:
                    db:8f:84:51:c1:2a:01:c6:45:20:9e:66:d2:5b:c3:
                    da:3e:fe:d4:ee:cf:8a:f2:03:47:2a:d2:73:23:01:
                    d8:27:56:c9:81:62:da:ae:dd:12:0e:09:64:ab:26:
                    cc:d4:c5:86:1d:0d:b3:2c:bc:99:0b:b6:c7:be:ac:
                    f6:cd:5d:a8:c5:ec:7b:16:0f:db:37:59:f1:d1:50:
                    b0:cb:9b:ed:73:a3:aa:1e:3e:51:89:b5:f9:c2:54:
                    26:3b:a1:af:23:10:92:b3:25:c0:05:d8:91:e0:21:
                    17:c0:e0:4f:fe:b4:26:bd:a0:1f:f6:b1:69:11:1b:
                    87:85:1f:6d:90:d4:bf:77:ed:d9:87:d0:6b:24:89:
                    c7:08:ef:75:3b:64:67:18:57:30:e8:42:0f:8e:a6:
                    fb:65:5c:8e:aa:1f:f8:54:1a:0c:69:26:7e:c4:35:
                    62:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:60:76:A0:6E:F0:B7:87:2C:B7:47:FB:B6:EC:2C:93:3F:4E:2D:CE
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vmB2oG7wt4cst0f7tuwskz9OLc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a000:1d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         5f:85:86:5f:bd:89:fd:b3:db:be:7a:d6:49:ab:9f:9f:f5:0a:
         17:a2:82:5a:94:a2:cf:b2:ee:4a:93:e0:79:48:e5:8a:67:c5:
         95:80:73:c2:ab:3b:36:4d:83:41:83:af:ae:3a:17:0b:b5:a1:
         90:55:4f:cd:4c:ed:42:aa:2d:87:d2:35:01:9c:16:2c:a2:2e:
         0c:2b:fa:d4:32:56:4c:55:d3:a4:ef:55:43:ce:90:c9:69:16:
         76:cf:62:56:f0:08:62:f9:0c:26:be:56:54:7e:9a:1f:99:d9:
         4e:93:79:2b:1d:37:e2:eb:78:fb:4d:e3:b6:83:ed:7b:a4:5c:
         3d:b8:6f:1b:40:3a:5f:ac:8f:4b:0b:ea:1c:fe:b5:16:11:83:
         e4:7a:a8:21:8a:dd:47:53:4c:0f:fa:53:b9:eb:f9:26:c2:e0:
         3d:25:b7:90:0d:bf:4a:0f:16:b2:3b:2b:3b:af:17:89:8b:a3:
         be:08:e6:30:dc:95:31:27:78:a1:fe:7d:35:55:13:b8:48:aa:
         c4:d6:00:0d:b9:64:75:e0:1b:15:13:15:59:ab:b4:41:ba:6e:
         21:f7:c4:8d:5a:a5:a3:fe:1b:07:21:fb:c1:9e:0f:59:71:cb:
         4a:98:2e:98:6b:e3:50:4b:9d:05:a4:6e:82:c5:15:ee:d8:33:
         8e:79:8a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----