Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/z_K2FmuFMWu2MPoSBF_PKtE2ksA.roa
File:                     z_K2FmuFMWu2MPoSBF_PKtE2ksA.roa (raw, json)
Hash identifier:          tE578C7th3dx7t9v8n0QJfTyqIlw3EgiN7SF6JhcKKs=
Subject key identifier:   CF:F2:B6:16:6B:85:31:6B:B6:30:FA:12:04:5F:CF:2A:D1:36:92:C0
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182022450A14C1B7C271A229F0F342DE7DA
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/z_K2FmuFMWu2MPoSBF_PKtE2ksA.roa
Signing time:             Fri 15 Jul 2022 13:55:10 +0000
ROA not before:           Fri 15 Jul 2022 13:55:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203899
IP address blocks:        2a06:a005:1230::/44 maxlen: 48
                          2a06:a005:1210::/44 maxlen: 48
                          2a06:a005:1240::/44 maxlen: 48
                          2a06:a005:1220::/44 maxlen: 48
                          2a06:a005:1200::/44 maxlen: 48
                          2a06:a005:12a0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:02:24:50:a1:4c:1b:7c:27:1a:22:9f:0f:34:2d:e7:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 15 13:55:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cff2b6166b85316bb630fa12045fcf2ad13692c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:94:1a:e3:15:ef:a1:82:33:05:36:59:0b:c4:
                    6a:38:9e:e8:eb:be:d4:d3:a0:d6:63:77:e3:92:5c:
                    48:bb:b5:f5:82:cc:1c:70:e4:5a:bc:8b:60:08:9b:
                    62:aa:8f:f2:79:77:42:94:ed:83:98:76:3a:71:af:
                    e1:37:d2:d7:f0:6f:71:4e:01:17:df:c1:44:66:86:
                    16:d4:f8:06:f5:ee:43:1e:1c:b4:56:8d:14:c9:0d:
                    a5:aa:be:66:b1:f0:57:6b:ee:b1:d1:b3:cf:17:37:
                    a4:b7:82:40:db:1e:51:44:63:fa:99:41:60:e5:7d:
                    ff:2f:0e:e2:1d:69:b9:ab:6b:8b:1b:51:dd:c2:bc:
                    8f:19:9f:b9:fc:c5:d5:a1:b9:85:65:56:c7:03:b3:
                    f6:87:02:aa:2a:17:22:11:aa:2b:d8:7a:fa:7e:80:
                    ab:e8:f8:31:9a:c2:58:e2:6c:77:97:d7:01:c2:c0:
                    fe:f8:d2:cc:c5:ae:21:8a:c9:e9:17:2b:53:04:f0:
                    ab:95:ae:39:03:15:44:e8:67:be:47:3d:1c:54:e5:
                    2e:2f:56:f9:85:c5:28:df:c8:59:69:5f:c2:15:c9:
                    a2:d1:57:62:52:e7:d5:55:8f:44:1f:e1:ba:ad:57:
                    3c:7e:3d:19:eb:d6:5f:8a:0b:a1:c3:08:01:f4:96:
                    36:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F2:B6:16:6B:85:31:6B:B6:30:FA:12:04:5F:CF:2A:D1:36:92:C0
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/z_K2FmuFMWu2MPoSBF_PKtE2ksA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1200::-2a06:a005:124f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:12a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         07:25:62:8c:89:3a:ae:c8:2b:e9:7b:fe:86:69:9c:77:cf:53:
         94:d9:4a:a9:46:51:d6:14:a4:56:0f:9f:d7:de:db:00:7d:21:
         84:9d:86:12:c5:f2:df:96:f0:cf:d0:46:08:9b:cf:78:74:1d:
         bd:f3:c8:f0:65:dd:2f:2c:83:6e:f5:4f:43:bf:a1:5a:05:c2:
         4d:23:c0:c6:22:e6:12:a7:8a:4d:2e:b3:79:12:e1:03:dc:f5:
         bf:09:d4:89:d7:16:fb:c7:40:8d:dc:aa:40:c9:61:b5:87:09:
         1d:de:d2:82:cb:7e:45:f8:81:4c:06:f3:c4:4b:9b:65:1c:28:
         a6:ba:d1:af:96:a3:f5:c0:18:6d:28:a5:f1:ba:87:44:fc:54:
         3d:cc:0d:23:c8:ed:c9:ef:c0:a0:d6:9e:60:f9:10:03:cb:97:
         b5:94:37:a3:22:78:90:0d:f9:be:ee:eb:aa:57:ec:f4:00:5a:
         0c:b3:21:7a:2c:6a:0d:cb:44:d4:ae:f2:d4:74:0c:6d:e9:70:
         1a:12:c9:1c:95:b6:57:ef:b3:70:3f:0b:c5:cb:fa:a4:74:e1:
         e5:b9:3f:c4:23:33:3a:ce:05:2f:bd:76:f2:f1:35:ec:1a:e2:
         af:3c:bc:12:29:f5:eb:4d:df:0c:c4:c0:7b:88:8c:d4:3c:67:
         b2:d9:4b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----