Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/xyMmR0w9zt2e5Aku2Cvw5YBpd3Q.roa
File:                     xyMmR0w9zt2e5Aku2Cvw5YBpd3Q.roa (raw, json)
Hash identifier:          veVyvHiUYDUdEF7n1V3afOPhLQJSc3Ib8VXZuqYWbEY=
Subject key identifier:   C7:23:26:47:4C:3D:CE:DD:9E:E4:09:2E:D8:2B:F0:E5:80:69:77:74
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1ADBCB21
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/xyMmR0w9zt2e5Aku2Cvw5YBpd3Q.roa
Signing time:             Tue 14 Jun 2022 15:33:45 +0000
ROA not before:           Tue 14 Jun 2022 15:33:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204710
IP address blocks:        2a06:a005:a0a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 450612001 (0x1adbcb21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun 14 15:33:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c72326474c3dcedd9ee4092ed82bf0e580697774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b9:1a:dc:7e:4a:ad:21:1d:2e:d9:2b:c6:cd:
                    47:79:02:9b:f8:10:f5:25:fb:ae:e2:c4:7d:e9:9b:
                    ab:98:e4:28:cb:3c:67:3d:8d:73:07:24:1d:c3:a1:
                    ae:d0:1f:c6:33:ea:6e:d6:ce:6b:41:2c:5a:98:c2:
                    53:a3:54:c5:b1:b0:c1:00:c9:be:e1:c1:1a:c7:d6:
                    1e:a7:27:35:1f:fe:6e:1d:df:e1:8f:b2:c7:46:85:
                    fb:0c:e7:af:95:2e:7d:6e:94:f3:98:bd:4e:9c:c0:
                    44:b2:8e:40:ad:ee:18:f6:49:1d:13:e0:53:78:98:
                    d4:55:a5:45:c8:70:a5:63:8a:e8:58:38:ef:73:b7:
                    32:ee:2e:31:ed:94:e5:04:0b:2a:d6:c7:c9:6c:40:
                    bc:30:8b:e8:40:c4:5e:7d:33:91:db:23:fc:3e:57:
                    75:9f:82:d0:dc:83:da:dd:3f:72:06:cf:50:85:60:
                    ff:ae:c2:a1:10:02:7e:80:40:f1:1e:a5:b5:3c:45:
                    c7:62:c8:df:2c:48:b0:03:6a:14:1c:55:ca:09:28:
                    e8:84:9f:d9:06:56:64:ae:02:b3:83:c6:46:25:81:
                    9c:67:e5:43:99:0e:e4:ab:d4:f9:b8:a7:c3:dc:44:
                    f1:cd:28:ed:81:2d:b1:02:bd:54:45:6c:c9:cb:26:
                    a6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:23:26:47:4C:3D:CE:DD:9E:E4:09:2E:D8:2B:F0:E5:80:69:77:74
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/xyMmR0w9zt2e5Aku2Cvw5YBpd3Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:a0a::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:5d:7f:13:33:2e:e4:19:33:46:a8:bd:58:f1:9f:8e:96:4d:
         9d:79:db:a6:45:eb:16:49:80:d8:ef:bd:78:1c:32:75:f6:c9:
         22:12:41:e7:88:3b:cf:22:66:ff:a4:1f:d3:44:76:0a:8b:1f:
         51:89:9d:98:13:df:c3:3d:52:95:ca:ac:b8:b6:e1:d6:eb:d5:
         99:8e:d8:85:0b:31:75:a4:23:22:2a:25:3e:0b:94:eb:c5:1b:
         e6:86:ba:96:25:0f:5c:ae:57:ea:82:98:09:c5:8b:64:53:b8:
         85:ed:41:7f:c2:42:c9:16:7a:75:cc:9b:a9:b7:c6:68:e4:c3:
         da:f6:90:40:af:93:e3:7b:10:a5:eb:d1:8d:90:6d:9e:f6:13:
         38:74:7a:71:44:dd:92:11:bb:ff:66:9a:cd:47:d2:f2:6f:d9:
         47:45:8b:22:96:7b:cf:93:cc:b3:dc:e4:b6:fc:c2:8d:ab:91:
         7f:99:52:20:37:b4:88:47:55:b5:92:af:5c:41:aa:b6:6e:ed:
         2e:4c:68:96:83:5d:10:fe:cc:e7:c7:33:5c:1a:73:f0:b6:3d:
         0e:a6:55:ad:e8:70:b7:10:ff:e9:af:b5:81:53:36:79:3d:47:
         e8:31:e2:1c:3e:dd:0e:83:ee:ef:30:1c:3a:ea:66:93:cb:22:
         9b:71:a3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----