Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/xSW_a8KMMPnKtpOyJR1EpO_T2BY.roa
File:                     xSW_a8KMMPnKtpOyJR1EpO_T2BY.roa (raw, json)
Hash identifier:          aFHIfBSZgbrsz9TpL1lfkxILOOVQUF4fHPNubQofoes=
Subject key identifier:   C5:25:BF:6B:C2:8C:30:F9:CA:B6:93:B2:25:1D:44:A4:EF:D3:D8:16
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184F3EF60304B329ADAA9C90673F8D11C53
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/xSW_a8KMMPnKtpOyJR1EpO_T2BY.roa
Signing time:             Thu 08 Dec 2022 22:51:01 +0000
ROA not before:           Thu 08 Dec 2022 22:51:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200716
IP address blocks:        2a0a:6040:f300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:f3:ef:60:30:4b:32:9a:da:a9:c9:06:73:f8:d1:1c:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  8 22:51:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c525bf6bc28c30f9cab693b2251d44a4efd3d816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:38:e1:0e:4b:c0:af:3c:0e:53:45:6c:ac:fc:
                    4c:20:4c:34:76:cf:66:2e:58:c9:e0:c6:1a:54:e5:
                    5d:54:a7:a0:4a:90:34:a0:11:57:c8:f9:1e:ff:70:
                    4d:12:68:e3:63:4a:d0:56:82:d8:fe:f4:82:9e:b5:
                    a2:66:2f:b5:06:77:e3:d2:03:f9:f0:7f:a7:b5:7b:
                    5e:df:25:70:40:dd:d4:f0:c1:13:7c:ae:f1:53:33:
                    8c:54:29:60:07:15:19:c3:f8:b8:b0:2a:91:6f:9e:
                    0c:de:b8:f6:e0:44:2a:65:4e:27:72:20:38:b6:16:
                    d8:e2:f7:cd:d7:5d:d3:41:91:87:09:bc:68:e8:e8:
                    01:99:4f:61:b6:9c:25:84:d5:c3:e9:36:19:1d:bc:
                    a0:1f:b8:57:f1:bd:9e:93:4f:6d:ab:e3:68:80:b0:
                    c2:15:b1:a5:7b:13:6b:ab:d4:d6:4d:9d:82:42:4d:
                    e8:50:f0:43:61:b2:10:62:ed:99:59:c6:1e:9f:5d:
                    b8:9e:3e:0a:95:21:bb:e7:2a:bf:58:10:4c:21:92:
                    ec:55:ae:30:3e:19:b7:99:d8:af:87:83:81:07:9b:
                    e7:6b:48:3e:d3:fc:c0:5c:73:d7:6a:42:a2:c9:6d:
                    6b:cb:27:5c:ff:1f:f5:11:a7:ed:12:b9:f4:bd:7a:
                    34:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:25:BF:6B:C2:8C:30:F9:CA:B6:93:B2:25:1D:44:A4:EF:D3:D8:16
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/xSW_a8KMMPnKtpOyJR1EpO_T2BY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:f300::/40

    Signature Algorithm: sha256WithRSAEncryption
         8e:be:5a:c4:de:21:90:e7:cf:ee:69:5d:be:8d:a5:9f:d7:72:
         1f:c7:40:2e:87:ea:fd:9e:ad:cf:b0:a2:6e:b8:cc:35:c4:8f:
         a5:db:4c:9f:66:4b:c1:c4:61:20:81:e1:30:e0:a9:05:c2:07:
         78:a0:09:43:a7:66:de:2d:b6:53:aa:f8:7e:68:37:ec:d2:2e:
         aa:3d:19:6a:02:a1:19:e1:cd:38:23:c3:6a:52:0e:f7:c8:ef:
         e9:14:47:45:ee:95:a3:3a:11:5e:54:9d:e5:84:62:6c:cc:d0:
         a2:3f:8c:f3:35:5b:51:3f:b4:85:dd:36:cc:2d:ce:8b:f8:60:
         9d:e3:7a:1a:5a:08:ea:7f:59:0b:94:2f:31:ec:fe:f7:36:81:
         76:a0:eb:bb:6b:71:ad:82:7c:d4:4c:3e:dc:72:cd:e7:af:28:
         ed:da:c2:ed:89:6d:19:5a:79:f7:64:07:47:83:a2:ee:f8:c6:
         48:fe:d7:5f:84:32:54:53:20:d4:2b:ff:13:e3:70:54:ff:8d:
         91:8b:7c:74:bc:c9:9f:1a:5d:7a:ce:05:a5:d1:de:3a:06:66:
         80:94:7a:ca:e2:df:74:ae:f0:5f:5f:1c:e4:e3:81:80:13:6f:
         e4:bb:81:e3:33:17:04:17:fc:69:fd:10:a5:90:9c:6c:f9:86:
         d8:67:61:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----