Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/wE-TV7m2-eTsD9Nu_0p4j1Em70Y.roa
File:                     wE-TV7m2-eTsD9Nu_0p4j1Em70Y.roa (raw, json)
Hash identifier:          C5QiT/k49ZE802xghmIMDP5fOqsJaxlQhu27Hd0SBSk=
Subject key identifier:   C0:4F:93:57:B9:B6:F9:E4:EC:0F:D3:6E:FF:4A:78:8F:51:26:EF:46
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0181D9775025E0FA909CE5E703912DE9B544
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/wE-TV7m2-eTsD9Nu_0p4j1Em70Y.roa
Signing time:             Thu 07 Jul 2022 16:21:24 +0000
ROA not before:           Thu 07 Jul 2022 16:21:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     23428
IP address blocks:        2a06:a005:1180::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:d9:77:50:25:e0:fa:90:9c:e5:e7:03:91:2d:e9:b5:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul  7 16:21:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c04f9357b9b6f9e4ec0fd36eff4a788f5126ef46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:63:9d:40:9f:6a:b7:bb:6d:6e:78:41:57:e1:
                    6b:de:81:6a:8d:03:d1:fc:5b:1c:b6:51:e8:09:22:
                    61:74:b7:be:ee:d1:32:a3:7c:a6:84:b1:e3:3e:a5:
                    a2:cf:57:fb:96:c5:e1:d4:a4:14:87:fe:38:14:cd:
                    6d:be:6f:aa:0f:47:a9:43:a7:b2:77:65:1b:8e:68:
                    24:9b:ea:ff:8b:09:50:d9:64:47:fc:f8:cf:70:17:
                    5f:23:81:66:eb:97:b1:3e:7c:43:74:4c:78:23:b7:
                    a9:c0:ec:e9:65:ab:c9:61:24:2b:1f:15:be:40:6c:
                    7c:b5:af:12:69:68:59:8d:b1:29:81:dd:e3:b9:40:
                    77:4f:ad:32:48:b3:99:40:b1:f7:ec:c1:1c:58:e3:
                    ee:4d:c7:9a:8c:84:1e:ab:84:61:c4:7f:12:d6:cc:
                    3e:0f:95:47:80:5d:bf:4b:98:1a:7c:17:07:d6:9a:
                    3c:53:30:3c:ec:d5:73:f7:ec:40:d5:8f:ce:c4:b8:
                    10:ed:f1:de:aa:76:94:6b:ba:58:f7:6d:8f:c1:d7:
                    0d:d8:44:de:c1:ef:77:0f:25:b8:19:2f:35:7d:29:
                    69:ac:25:5b:05:f7:6c:3a:40:64:7b:a8:cd:f7:1a:
                    f8:0f:e4:b9:d9:2c:e6:a5:a8:84:2a:82:6f:34:6c:
                    a7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:4F:93:57:B9:B6:F9:E4:EC:0F:D3:6E:FF:4A:78:8F:51:26:EF:46
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/wE-TV7m2-eTsD9Nu_0p4j1Em70Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1180::/44

    Signature Algorithm: sha256WithRSAEncryption
         52:60:73:d9:40:95:b9:f1:c2:34:92:ef:c5:a7:10:d9:92:09:
         6a:7d:be:e5:26:14:df:d6:b2:5f:f6:03:2e:2d:48:1e:aa:26:
         3e:75:4d:fe:e5:78:c1:89:3f:ff:ab:a0:a7:67:8a:90:7e:97:
         69:f5:da:36:2f:43:7d:79:e5:42:fd:f7:53:f3:a5:d9:1a:5a:
         96:1f:8c:5a:75:c0:5a:52:5c:79:2c:d3:c3:2e:fb:fb:fb:61:
         24:7b:af:b9:67:fb:9a:48:9e:ba:74:a5:fe:1f:9b:dd:18:a6:
         25:96:69:4c:7b:5f:97:9f:d8:f6:5c:04:9e:ea:5b:ff:53:cb:
         5e:48:bf:3c:d8:78:39:58:d4:88:40:26:9b:88:92:6a:e3:68:
         c4:c3:df:70:e3:58:7d:a6:6d:c8:9d:60:e9:98:cd:5f:67:8d:
         22:b5:3b:1f:9b:05:b0:68:aa:65:d5:74:63:d9:14:5b:c9:84:
         d9:28:96:41:be:1a:32:58:36:be:16:9b:26:1d:6b:5c:fd:0a:
         b8:a9:ec:fe:c2:a7:11:d6:3e:18:7c:0f:e6:dd:e4:5d:b8:ce:
         d9:73:16:35:6a:00:ca:31:dc:58:90:a6:60:f1:2b:1a:e2:c8:
         e1:5a:94:9c:13:3d:3f:e6:cc:16:18:29:ff:26:8e:ad:9b:26:
         ec:47:20:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----