Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/y2wk52rYYVlWpYy73jYE_PmNfuE.roa
File:                     y2wk52rYYVlWpYy73jYE_PmNfuE.roa (raw, json)
Hash identifier:          4NZpHhEh+roPyd7VQiMRK3XiqT2agKRbwtEYs8NsfhU=
Subject key identifier:   CB:6C:24:E7:6A:D8:61:59:56:A5:8C:BB:DE:36:04:FC:F9:8D:7E:E1
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1B9A83BC
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/y2wk52rYYVlWpYy73jYE_PmNfuE.roa
Signing time:             Wed 29 Jun 2022 20:10:02 +0000
ROA not before:           Wed 29 Jun 2022 20:10:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60326
IP address blocks:        2a06:a005:1060::/44 maxlen: 48
                          2a06:a005:590::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463111100 (0x1b9a83bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun 29 20:10:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cb6c24e76ad8615956a58cbbde3604fcf98d7ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c4:0f:5e:9e:fe:cb:ae:af:21:1d:a2:c5:43:
                    c6:f3:58:08:46:01:f9:a4:6b:ad:bf:9f:01:6a:51:
                    e8:32:bb:07:15:85:19:ff:01:a5:35:c4:d9:41:28:
                    57:d4:da:59:33:44:81:c0:47:87:87:7a:d4:e0:ad:
                    90:01:81:52:d5:d1:ab:64:d9:21:51:80:ef:fc:25:
                    7f:de:65:88:87:8e:61:69:11:8f:70:8f:9c:d7:d1:
                    68:20:5f:7b:58:7e:9e:09:76:12:18:38:b7:6a:7a:
                    2d:3b:d4:9d:1f:fe:20:cb:47:02:19:2c:03:e7:3f:
                    af:c1:a0:fb:ea:8b:18:e7:0b:f5:a3:ce:3a:4f:dc:
                    1e:39:5f:cb:7c:4f:91:4c:c4:f9:78:d0:9f:e5:4e:
                    5d:46:0f:d8:1e:fe:b4:fc:71:10:7c:f5:e8:08:d3:
                    65:75:ea:01:39:f9:27:b1:7c:64:dc:88:f9:80:c8:
                    0d:d6:e4:91:4e:ca:7e:c5:f1:3b:b2:6d:b2:75:e2:
                    ba:6d:2a:52:52:71:83:82:34:75:d6:8e:1b:93:e3:
                    50:88:26:8c:b8:68:f1:5a:bd:46:15:99:b2:99:ec:
                    9c:9c:52:60:86:73:d0:93:a3:7b:be:a1:05:24:f9:
                    1b:fd:66:fa:7a:54:e0:fd:0b:04:0a:db:c5:02:20:
                    89:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:6C:24:E7:6A:D8:61:59:56:A5:8C:BB:DE:36:04:FC:F9:8D:7E:E1
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/y2wk52rYYVlWpYy73jYE_PmNfuE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:590::/44
                  2a06:a005:1060::/44

    Signature Algorithm: sha256WithRSAEncryption
         0b:7c:0e:7c:b7:7e:1c:2a:5f:04:bf:b7:c0:71:ba:1b:7d:76:
         1c:e7:51:e1:43:78:fb:22:6b:2e:ed:75:19:0f:f5:6b:7a:8d:
         3b:5b:ec:f3:ab:11:26:f8:fa:ed:16:f8:06:bf:e0:c4:57:3f:
         d1:cc:54:4a:72:b9:07:d4:a0:c6:06:a4:e9:5b:71:00:4e:a7:
         48:3c:1d:a5:f9:70:d2:80:2b:0f:a7:f6:c2:20:57:98:3c:13:
         ef:bb:ac:5a:fc:07:88:d0:8a:28:62:ac:c8:1e:64:fc:14:8e:
         c1:85:89:de:86:3b:b0:5b:3a:fd:82:7a:2f:75:c4:e5:85:bf:
         62:93:52:2f:05:d4:c2:a7:c8:86:53:e2:27:79:4c:61:58:68:
         01:01:9b:b7:1e:95:69:84:08:74:75:e6:09:d3:eb:ff:ee:c8:
         1c:5b:80:d1:21:69:90:34:d9:d6:4a:b6:b6:4f:22:6b:64:3e:
         cf:ec:95:6c:95:d0:3d:68:68:de:d5:ea:f9:9e:5b:6a:e9:c5:
         f3:fe:50:8f:27:04:61:e0:c1:6d:18:de:7e:bc:c0:0e:fe:25:
         04:86:16:7c:a9:2d:87:4a:e1:6b:b4:95:41:d9:39:b2:60:ed:
         11:e7:e4:c4:2a:38:7f:77:5a:1d:52:d7:3e:63:6c:1b:d3:bd:
         9e:ea:95:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----