Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/zFfJkMMSefYbuN5TPbyi12oE11k.roa
File:                     zFfJkMMSefYbuN5TPbyi12oE11k.roa (raw, json)
Hash identifier:          7Lz5n9GfaGXNruQ8DD3emLAq/Nmtv3SsrnTiwNvWPW0=
Subject key identifier:   CC:57:C9:90:C3:12:79:F6:1B:B8:DE:53:3D:BC:A2:D7:6A:04:D7:59
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01846017375EA0D3FF15176CFDBA826FF7EF
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/zFfJkMMSefYbuN5TPbyi12oE11k.roa
Signing time:             Thu 10 Nov 2022 05:50:45 +0000
ROA not before:           Thu 10 Nov 2022 05:50:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201517
IP address blocks:        2a0a:6040:fd00::/40 maxlen: 48
                          2a06:a005:1550::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:60:17:37:5e:a0:d3:ff:15:17:6c:fd:ba:82:6f:f7:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 10 05:50:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cc57c990c31279f61bb8de533dbca2d76a04d759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bf:76:4a:e2:0f:cf:e1:16:1f:4e:89:ad:69:
                    19:9a:89:43:73:84:cb:97:36:ea:e8:38:44:e1:6a:
                    36:ac:66:bd:bc:0b:e8:e7:07:65:06:5c:02:2e:fc:
                    e1:20:7e:d4:51:08:00:f0:98:55:fa:c4:d2:27:8d:
                    0a:73:f2:a9:e3:83:81:d2:a3:df:68:72:b7:a5:b4:
                    9f:79:73:f8:c5:e5:75:ad:4c:19:f4:21:f9:c7:88:
                    11:f0:71:60:fb:8b:10:3a:ba:11:65:24:8c:f4:ae:
                    dc:f5:32:8a:a0:e0:c0:77:32:6c:48:ae:e4:ab:13:
                    4b:9d:dd:7f:50:82:09:29:99:84:47:5e:11:5f:c2:
                    2c:e2:ae:2c:af:1e:f4:59:86:97:f1:d2:39:c2:2e:
                    b6:24:82:6a:92:38:fc:39:74:c6:1a:63:ed:c4:93:
                    78:50:66:74:2e:a9:2a:d8:74:57:1e:39:9f:f1:93:
                    25:c2:f0:e4:48:99:e0:af:68:d5:bd:10:c5:09:7c:
                    cf:d4:e6:03:c1:4d:40:93:63:cd:59:83:b6:d5:fc:
                    67:72:be:d2:6c:70:de:4a:07:72:90:be:32:f9:f3:
                    b1:78:1c:f1:1d:86:fa:26:0e:62:9f:ee:66:09:1a:
                    7e:75:7f:dc:6a:a2:1f:70:2a:04:99:cc:5b:b9:5e:
                    ea:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:57:C9:90:C3:12:79:F6:1B:B8:DE:53:3D:BC:A2:D7:6A:04:D7:59
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/zFfJkMMSefYbuN5TPbyi12oE11k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1550::/44
                  2a0a:6040:fd00::/40

    Signature Algorithm: sha256WithRSAEncryption
         38:85:7c:c9:6c:0f:68:98:9d:87:75:35:2a:eb:ee:f6:77:ad:
         e5:47:76:d4:d6:a7:53:91:ea:2b:7b:20:a9:4a:e1:12:af:21:
         21:65:bf:e6:66:2f:fb:8a:2c:3a:3b:a9:ce:65:7c:27:a7:d8:
         71:8c:1b:a4:3a:00:9f:d8:fe:35:e9:7c:3e:b1:10:b0:d8:a4:
         db:3f:09:ea:7c:d1:00:d0:c0:8b:d8:6d:a3:8d:27:30:fe:f8:
         b5:de:4b:69:43:34:54:fb:a8:c0:54:db:b8:a7:20:f4:01:c7:
         f9:07:ed:47:aa:f0:e1:27:cc:ea:38:37:fc:9a:e9:5f:87:26:
         61:03:04:6e:4a:d9:c5:00:55:f1:3b:7f:6b:44:0c:5b:50:72:
         98:50:a3:8c:31:6d:47:1a:eb:4b:25:b8:fb:db:5c:bc:ab:16:
         99:e3:81:91:85:05:42:96:0c:a9:a8:fc:a8:8f:90:d4:49:e4:
         12:66:4e:88:cf:6e:31:8c:8a:58:bf:8a:88:17:f2:13:aa:e6:
         fa:78:15:b9:e2:59:d4:10:f7:1c:b7:59:24:02:fd:8a:cf:30:
         50:1b:95:11:0a:e8:2f:1a:9c:8e:49:28:dd:91:42:7e:c0:4f:
         fd:51:d2:48:7d:c1:1e:e0:89:bc:d7:ae:d3:ff:42:a0:67:7e:
         6d:58:bd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----