Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yo7vz1XFsyK6KRHQxYJik0ku0N0.roa
File:                     yo7vz1XFsyK6KRHQxYJik0ku0N0.roa (raw, json)
Hash identifier:          AkWqEt3Jm232WiZT4JgoNaPLfh0EdAiT5e+gto+JGh4=
Subject key identifier:   CA:8E:EF:CF:55:C5:B3:22:BA:29:11:D0:C5:82:62:93:49:2E:D0:DD
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018405BC8C28D333142699A48789E2CC940E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yo7vz1XFsyK6KRHQxYJik0ku0N0.roa
Signing time:             Sun 23 Oct 2022 16:45:53 +0000
ROA not before:           Sun 23 Oct 2022 16:45:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202199
IP address blocks:        2a06:a005:1640::/44 maxlen: 48
                          2a06:a005:1505::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:05:bc:8c:28:d3:33:14:26:99:a4:87:89:e2:cc:94:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 23 16:45:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ca8eefcf55c5b322ba2911d0c5826293492ed0dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3a:42:fa:c3:d3:ef:f5:18:6f:31:af:95:5d:
                    c1:9b:ed:fd:30:8e:89:dd:4f:cf:77:39:04:ff:fe:
                    eb:c9:0b:53:04:53:5b:e9:4c:fa:70:16:10:4b:e0:
                    0f:eb:55:1e:b7:4f:ce:2d:ee:9e:19:d0:07:cb:2f:
                    c7:7c:79:df:dc:97:33:ab:c2:ca:36:73:b1:bb:7d:
                    d0:3c:3b:61:59:52:c0:d9:a5:ec:bc:0f:a8:cd:7e:
                    ad:07:88:bb:9d:39:9d:8e:dc:24:0e:da:d7:b3:49:
                    26:20:43:1b:6d:7f:2c:d0:f4:01:5c:ef:10:67:a2:
                    69:e4:7a:d2:8c:c2:e2:a7:b0:c0:9b:82:44:0d:54:
                    6d:84:16:11:c6:19:78:12:f6:6f:09:cf:3b:a3:06:
                    b0:b4:b5:94:58:e0:23:eb:93:bf:48:76:28:13:20:
                    2c:8a:61:c6:57:cb:2f:65:43:49:02:f7:e3:e1:50:
                    04:1d:be:26:33:fd:10:56:82:82:dd:cd:71:7e:10:
                    1e:be:b9:b6:e7:9d:d2:24:4b:f9:0c:0e:c9:d2:80:
                    a1:9f:e9:c0:7a:98:9e:bc:ab:d6:a5:b2:e2:cf:8e:
                    98:97:61:d6:96:78:c7:a6:ca:60:83:10:8b:3f:45:
                    fe:26:04:52:24:36:b0:1b:3f:84:58:8e:67:b9:74:
                    d6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8E:EF:CF:55:C5:B3:22:BA:29:11:D0:C5:82:62:93:49:2E:D0:DD
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yo7vz1XFsyK6KRHQxYJik0ku0N0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1505::/48
                  2a06:a005:1640::/44

    Signature Algorithm: sha256WithRSAEncryption
         7f:45:d7:1b:54:a2:7d:44:fd:28:df:a3:be:6a:fd:59:25:a8:
         aa:bc:0d:cd:33:bf:fe:4c:a8:a8:7a:9c:e3:cf:bb:9e:e4:9e:
         9a:0f:67:5a:4a:a0:c9:8a:7a:4c:20:25:84:10:bd:27:8f:3d:
         ff:87:04:71:fb:51:c6:8c:34:cb:da:5a:40:c0:37:a9:23:0c:
         3d:f2:30:f8:f4:12:84:7f:dc:25:51:db:ee:b8:82:08:50:0d:
         be:50:e7:8d:21:81:6a:2d:e4:88:b8:8f:bb:a9:94:df:46:74:
         42:fa:11:95:be:b5:86:42:28:f2:dc:8e:d4:db:62:5c:d8:c4:
         f1:aa:bc:a5:18:96:63:2b:fb:03:40:fe:13:f7:c6:a2:60:35:
         08:c7:c2:32:9d:70:ea:bf:56:46:dd:aa:72:26:d6:1a:2a:7f:
         a8:db:1b:23:9b:05:e6:cc:7b:36:b3:14:be:09:fe:0f:dc:4c:
         ce:f7:13:eb:a8:02:bb:eb:a5:2d:69:79:fd:e3:4d:ee:74:16:
         0b:a7:82:eb:16:51:4e:85:4e:36:d0:b9:ce:2d:a3:b1:e3:d5:
         63:36:19:25:c7:71:9f:ea:e6:98:f8:17:77:23:fa:3b:a7:5d:
         84:61:d6:a2:8a:5c:1b:94:6e:e9:d7:ba:2b:83:3f:d0:cc:b7:
         9a:18:7c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----