Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yJ5sttF28ceqUvIJSv1bsXVxgXc.roa
File:                     yJ5sttF28ceqUvIJSv1bsXVxgXc.roa (raw, json)
Hash identifier:          5VmE36BaILrQjIRrvISxC8IS9J++qi8EbBBLVSDELOE=
Subject key identifier:   C8:9E:6C:B6:D1:76:F1:C7:AA:52:F2:09:4A:FD:5B:B1:75:71:81:77
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184F293772687502F48DABD661FEE280D8F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yJ5sttF28ceqUvIJSv1bsXVxgXc.roa
Signing time:             Thu 08 Dec 2022 16:31:01 +0000
ROA not before:           Thu 08 Dec 2022 16:31:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200866
IP address blocks:        2a0a:6040:d200::/40 maxlen: 48
                          2a06:a005:1165::/48 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:f2:93:77:26:87:50:2f:48:da:bd:66:1f:ee:28:0d:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  8 16:31:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c89e6cb6d176f1c7aa52f2094afd5bb175718177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2d:30:15:0a:3d:b0:14:ab:5e:b2:67:3e:1c:
                    27:c5:ba:00:e5:4d:9a:79:36:ca:33:06:21:c7:de:
                    62:53:20:f6:53:a5:d3:08:29:3d:16:c1:eb:8d:ae:
                    8b:09:17:c1:a6:04:58:5d:1b:e5:a7:73:06:4d:8b:
                    02:28:ec:ef:0f:05:56:1b:2c:f7:a7:9d:96:f6:c7:
                    42:9d:90:a0:6c:15:c7:92:43:4d:1c:20:98:33:5b:
                    8f:3f:46:7e:8a:53:d9:d1:c1:e6:d8:b3:1f:a8:80:
                    f3:55:59:2d:b3:c4:d1:61:60:21:72:c3:2d:fa:25:
                    de:bd:4e:c7:10:15:c4:bc:15:0a:7f:0f:65:da:ae:
                    3c:95:64:1f:b3:c4:5b:d6:05:44:83:f1:5a:79:a6:
                    0c:7a:60:63:f7:90:eb:4c:2a:6f:50:93:e8:92:15:
                    7c:1e:db:df:c3:9c:79:f7:c4:8a:73:ae:19:a6:de:
                    14:b3:89:3d:eb:76:00:68:80:25:e6:c8:b8:41:ea:
                    da:5a:87:b1:b2:78:98:62:46:0b:4c:5d:ab:9e:fa:
                    0d:d0:af:d2:59:f9:42:2d:6b:af:05:67:07:5b:cf:
                    6f:c3:55:80:ed:ea:a2:2d:c0:96:1e:a9:ba:88:73:
                    88:50:81:3a:68:f6:22:83:0e:b5:4c:a0:0d:3c:73:
                    89:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:9E:6C:B6:D1:76:F1:C7:AA:52:F2:09:4A:FD:5B:B1:75:71:81:77
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yJ5sttF28ceqUvIJSv1bsXVxgXc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1165::/48
                  2a07:54c2:b00b::/48
                  2a0a:6040:d200::/40

    Signature Algorithm: sha256WithRSAEncryption
         1a:fb:3b:35:93:a7:df:4e:52:a3:ed:7f:07:99:c3:44:78:ff:
         ef:01:f7:5b:5a:af:20:de:3a:bd:c3:9f:b2:81:1c:90:64:51:
         d4:eb:8a:b6:55:cf:ad:b7:97:2f:2a:38:a2:40:bb:86:8d:e7:
         0f:92:35:f8:76:aa:dc:c0:a5:5f:f6:7f:91:86:a8:a8:35:84:
         ef:ac:a8:18:49:54:02:98:d8:c9:a6:25:cb:92:a8:87:d3:1c:
         1c:fd:78:db:17:23:43:18:26:66:58:83:22:b1:c4:09:cb:e9:
         f9:e2:32:de:64:1c:e5:5a:40:3d:21:16:94:e0:e0:fb:90:7f:
         69:b3:e8:24:65:10:5b:bc:7e:f3:53:b2:f0:62:95:19:a5:26:
         f4:6d:c0:c6:d2:81:22:f7:ac:17:df:43:4c:91:a4:1c:2a:9f:
         e0:c2:c0:c3:24:88:e2:18:ed:18:2c:34:fb:78:4c:85:db:fe:
         4e:9a:9c:4c:69:7a:1c:60:c6:6c:61:ac:0e:db:54:b6:1d:e8:
         fd:e4:af:83:d8:b6:14:57:0a:f5:10:e2:0e:78:9b:55:54:ce:
         5c:34:ef:f6:01:d1:95:d9:01:bc:f0:79:32:e3:80:ff:49:02:
         1e:e3:eb:0f:c0:14:15:24:7d:00:2f:f1:a6:e9:fa:17:34:52:
         1a:8f:91:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----