Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/wkGsIPQiHlOZ2a8qQVlS4zNBt5g.roa
File:                     wkGsIPQiHlOZ2a8qQVlS4zNBt5g.roa (raw, json)
Hash identifier:          1Qpgox0Em4MHCwsR63jlL+9feFsOKdw+NArrZbNiLxw=
Subject key identifier:   C2:41:AC:20:F4:22:1E:53:99:D9:AF:2A:41:59:52:E3:33:41:B7:98
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01824971632CB63C33F5B43C78EA2DC611EE
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/wkGsIPQiHlOZ2a8qQVlS4zNBt5g.roa
Signing time:             Fri 29 Jul 2022 10:12:23 +0000
ROA not before:           Fri 29 Jul 2022 10:12:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     38041
IP address blocks:        2a06:a005:127c::/46 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:49:71:63:2c:b6:3c:33:f5:b4:3c:78:ea:2d:c6:11:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 29 10:12:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c241ac20f4221e5399d9af2a415952e33341b798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:16:75:29:a0:4a:35:69:3a:a5:e7:ce:04:df:
                    16:3b:c8:3f:5b:8f:bc:5e:fc:5d:d6:3a:8f:93:5e:
                    a8:24:4b:7b:7c:f5:4b:d4:28:84:0f:47:5a:e6:f8:
                    cd:fd:8e:f1:d5:83:13:0c:2e:2e:ee:90:e8:a4:36:
                    bf:0a:c1:e8:cd:fa:de:9f:cf:62:a5:d7:44:0c:15:
                    32:73:e5:75:16:55:ff:51:6c:76:9d:9a:cc:ff:12:
                    34:a8:75:ab:ac:3f:f7:89:80:44:3c:04:10:9d:b3:
                    c1:45:0b:68:30:58:7c:89:72:19:ad:1b:b1:8d:9a:
                    45:30:27:7a:14:0e:f4:71:e6:e5:f1:d8:54:bf:9e:
                    fe:8a:ab:70:25:6f:79:74:0f:8c:29:9f:67:7f:24:
                    37:24:56:00:bf:12:9b:38:63:92:bc:02:ed:2d:bd:
                    02:25:1c:31:15:5c:53:80:69:c6:9e:a1:ab:3e:de:
                    0a:68:ae:04:1b:7e:ea:59:68:bf:90:bb:16:cb:a4:
                    b2:6d:8d:04:d0:ab:a1:c5:69:00:b9:ba:ed:b5:5d:
                    79:84:60:68:29:38:71:82:71:b2:8b:3d:ae:d3:dc:
                    38:8a:d6:aa:97:70:b5:bb:26:dc:98:3a:8b:8f:0f:
                    c3:88:1a:ec:a8:84:99:63:90:eb:21:b4:f0:55:11:
                    a9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:41:AC:20:F4:22:1E:53:99:D9:AF:2A:41:59:52:E3:33:41:B7:98
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/wkGsIPQiHlOZ2a8qQVlS4zNBt5g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:127c::/46

    Signature Algorithm: sha256WithRSAEncryption
         5f:ff:08:fb:73:82:65:87:b0:49:0d:ee:eb:5d:25:82:48:64:
         8a:45:e2:9e:dc:93:dd:54:05:e1:62:84:df:cc:fb:75:b1:15:
         62:bf:2a:4a:b2:53:17:5a:2c:ad:07:db:14:a8:6e:22:9a:7a:
         0f:be:42:8d:ff:06:cc:3c:65:a4:9f:87:8d:cb:e0:28:7c:a9:
         ac:d9:af:c5:14:9b:c4:e2:64:88:ae:15:07:30:00:39:9d:ec:
         7e:96:83:47:11:9d:a9:74:18:fd:1f:a6:69:4e:9e:6b:12:e2:
         23:e1:68:b2:84:fb:d4:53:0d:1c:3a:ef:8c:27:93:1c:b3:6e:
         24:4c:df:e8:69:db:b2:3f:6a:13:63:1e:b2:4a:3d:6f:92:8e:
         93:34:de:6d:12:37:80:8f:39:58:74:2a:f4:53:0c:53:a2:b0:
         29:da:1a:b4:7b:71:c9:be:6c:54:9e:1d:91:e8:a6:fb:f9:c0:
         60:47:42:e4:34:22:03:e0:56:da:07:0f:60:1d:0b:ba:4f:62:
         14:b4:11:84:19:4c:da:e8:7a:61:a7:31:67:6d:70:14:65:d3:
         2c:41:cd:30:30:95:84:4a:ce:16:4c:12:83:93:d5:8e:d4:0e:
         ef:46:00:2c:04:a2:3f:b5:26:8a:c9:e7:f1:79:bb:fc:ed:69:
         a0:ab:4c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----