Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yJIEoOF4ngP8zoqZ3JTZyoe2c-U.roa
File:                     yJIEoOF4ngP8zoqZ3JTZyoe2c-U.roa (raw, json)
Hash identifier:          BBb0+F4Pl181ILFGlw/zoiRv9y8PiWcI7d3exlJuPDM=
Subject key identifier:   C8:92:04:A0:E1:78:9E:03:FC:CE:8A:99:DC:94:D9:CA:87:B6:73:E5
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184E2AAB9FBB07833927FAB0527DEAD3C7E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yJIEoOF4ngP8zoqZ3JTZyoe2c-U.roa
Signing time:             Mon 05 Dec 2022 14:22:30 +0000
ROA not before:           Mon 05 Dec 2022 14:22:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200885
IP address blocks:        2a0a:6040:ea00::/40 maxlen: 48
                          2a06:a005:5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:e2:aa:b9:fb:b0:78:33:92:7f:ab:05:27:de:ad:3c:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  5 14:22:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c89204a0e1789e03fcce8a99dc94d9ca87b673e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:00:6b:1c:55:8f:6a:16:d4:f6:74:47:63:18:
                    a3:8f:03:c8:89:4a:58:79:3c:15:82:88:cb:41:89:
                    7e:f7:53:dd:ad:5f:a6:9a:9a:bd:8e:b0:da:d2:67:
                    48:d3:df:e6:84:78:5a:c9:bc:30:c9:4e:61:ec:3b:
                    eb:4e:fc:de:59:2d:3c:40:61:c6:99:e6:a3:36:9a:
                    ba:d9:6c:81:ba:97:0b:a9:97:bd:65:02:69:41:a5:
                    e7:f0:4e:1d:55:7e:b3:77:37:bd:cf:da:d6:d2:5a:
                    15:b6:81:9c:77:7f:45:37:04:10:87:3a:3b:7e:0d:
                    b6:bd:b6:da:e2:18:23:0d:76:09:99:29:c2:52:61:
                    91:c2:13:3b:02:e2:cb:c7:63:2b:34:f8:7b:76:4f:
                    5f:46:5a:2d:5f:92:f0:d7:e3:d4:b8:4b:a0:44:e4:
                    84:51:66:0f:57:1b:c5:2a:bf:5b:5a:04:a4:6e:b0:
                    77:6e:4a:9a:cb:25:da:e4:e3:aa:88:94:02:62:3d:
                    7a:20:40:20:b2:fe:1d:d1:a3:81:ea:dd:d4:b8:57:
                    8d:bd:d0:5f:58:14:15:fc:42:4d:3a:0b:04:2c:d5:
                    62:77:ef:2a:52:43:24:51:f2:e7:29:31:c8:1c:af:
                    27:39:f6:22:e3:70:a0:5d:55:ae:14:45:50:b0:5e:
                    ed:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:92:04:A0:E1:78:9E:03:FC:CE:8A:99:DC:94:D9:CA:87:B6:73:E5
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yJIEoOF4ngP8zoqZ3JTZyoe2c-U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5::/48
                  2a0a:6040:ea00::/40

    Signature Algorithm: sha256WithRSAEncryption
         69:4d:47:15:e7:af:27:f8:a9:6d:94:c6:57:37:e4:0a:24:94:
         4f:94:78:56:ad:b1:c9:df:08:73:ad:62:ba:52:96:df:14:07:
         db:b0:8e:fd:ea:a5:e2:5d:c4:28:e0:d6:e6:b7:f5:49:ec:9c:
         45:19:bf:07:dd:17:f6:54:59:8a:6d:83:61:47:ba:17:31:8c:
         31:ce:cd:7c:9a:8b:fb:1e:c6:7b:21:fb:a0:60:3d:b1:aa:78:
         d3:d5:cf:bb:9b:71:d0:52:af:0f:79:52:6c:2d:eb:6e:d1:4f:
         8e:4e:1a:c5:04:4f:eb:aa:92:2f:6f:c3:c1:36:da:1d:13:c7:
         98:a4:d8:60:3e:24:cc:8d:0c:02:00:64:15:86:bf:80:20:46:
         68:0e:60:23:2e:36:04:fb:38:dd:1f:68:1d:b5:22:7f:49:85:
         3e:4e:96:33:53:49:f4:38:6e:75:71:a1:18:b2:f4:cf:00:cd:
         5a:f3:e8:15:f6:e8:d0:66:64:ea:fd:2d:7f:8b:be:82:73:44:
         b0:e3:ed:c9:4b:29:d8:70:b8:3f:86:ce:50:68:20:80:89:21:
         56:0f:d1:11:74:d0:fc:f2:04:db:60:89:dc:86:fb:bb:09:e2:
         2b:68:bf:6a:2e:88:ba:52:32:b8:b4:cc:da:aa:ae:8a:9a:40:
         15:cf:9d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----