Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yrHDxchRciLiwD7WcBNYGnyAQlU.roa
File:                     yrHDxchRciLiwD7WcBNYGnyAQlU.roa (raw, json)
Hash identifier:          M/6lWfStvpjAxUTWgbL3I9ggSaydj3zg6eN17icw7aU=
Subject key identifier:   CA:B1:C3:C5:C8:51:72:22:E2:C0:3E:D6:70:13:58:1A:7C:80:42:55
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184BE8C1516A6008DB4691CBF4C99C3C970
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yrHDxchRciLiwD7WcBNYGnyAQlU.roa
Signing time:             Mon 28 Nov 2022 14:02:42 +0000
ROA not before:           Mon 28 Nov 2022 14:02:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210562
IP address blocks:        2a06:a005:1c7d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:be:8c:15:16:a6:00:8d:b4:69:1c:bf:4c:99:c3:c9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 28 14:02:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cab1c3c5c8517222e2c03ed67013581a7c804255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:78:ec:7f:d4:39:0f:30:6b:33:91:32:20:72:
                    13:58:6a:5b:97:48:cb:2c:b4:7d:f0:e9:d8:f3:28:
                    77:32:98:6c:9f:70:b2:ad:9a:2f:5f:28:fa:a9:11:
                    44:32:e2:01:b0:5e:0e:3f:6b:0c:e5:b4:86:f3:bd:
                    b5:4d:e4:e0:29:f5:24:ed:fb:b2:5a:d5:1a:3e:f6:
                    c4:42:2c:94:b6:46:90:6f:92:b0:17:5b:27:b4:67:
                    d3:f1:55:6c:88:5b:5c:06:47:0e:a7:bb:8a:1b:ee:
                    1a:43:48:f0:3e:87:9e:7d:63:1f:48:2f:a3:d7:0f:
                    4e:99:0e:47:87:11:77:9b:2a:26:f5:77:fb:ca:b9:
                    89:77:38:d3:d2:a3:f5:9f:5b:d1:4c:fa:cf:68:c5:
                    54:29:ee:fe:49:a8:b7:2d:e6:40:c4:69:61:bf:82:
                    0c:30:81:7b:ef:3c:a4:7a:dc:67:4d:a6:9e:0d:dc:
                    a3:f3:ff:11:42:96:01:7f:d0:85:ce:99:59:69:8c:
                    a2:1b:06:9b:83:da:9c:33:94:a1:ca:01:bf:4e:48:
                    26:cc:a2:86:72:46:28:7d:e6:f5:7e:2e:a0:99:fc:
                    e0:f2:8c:c5:2e:12:e5:ba:f7:64:bc:5a:1a:e6:6b:
                    38:19:70:53:43:57:d1:a1:9e:99:a9:dc:6a:5d:de:
                    d0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B1:C3:C5:C8:51:72:22:E2:C0:3E:D6:70:13:58:1A:7C:80:42:55
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yrHDxchRciLiwD7WcBNYGnyAQlU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1c7d::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:2e:41:8b:c6:d6:c2:6c:68:68:21:e0:cd:c8:72:d6:d9:4e:
         2b:88:d9:82:e1:79:60:ce:76:54:e4:bf:50:32:a3:da:2b:7a:
         16:80:a5:d9:46:40:9b:00:63:c1:09:d3:e9:19:61:1f:0e:9f:
         3a:04:11:ee:ef:98:8c:cc:ed:29:b7:4f:53:fd:8c:c2:10:6d:
         50:ec:32:3f:1f:75:14:77:77:d2:8d:4b:7e:38:47:16:dd:62:
         01:84:ea:40:89:d8:71:8c:67:d8:45:59:86:a4:07:dd:db:59:
         dc:a9:32:59:da:72:3f:01:37:17:16:ae:8d:a7:9a:68:e1:90:
         e4:18:f7:5b:43:cc:9e:8b:f7:d9:22:e6:f1:e1:54:fb:d2:77:
         96:6b:c4:16:f0:dc:93:e4:ee:36:e6:da:50:e6:55:7f:2f:15:
         da:9c:f9:e1:49:60:ca:ea:51:b3:68:f5:cb:e0:ad:b2:78:8e:
         ae:6e:5f:42:5e:e1:8d:62:ca:11:71:37:6f:bd:5e:bc:9f:25:
         8a:79:23:73:eb:62:12:70:f2:65:b0:06:27:72:72:76:5d:de:
         ab:25:39:37:b3:85:b2:73:85:04:9a:21:a5:f7:72:80:42:bc:
         53:9e:34:ba:dd:b2:89:87:1c:b0:83:34:3a:dd:b9:6d:3b:53:
         32:df:67:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----