Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/zxzHWJ-f4Et0U_InWwExC8EhL1Q.roa
File:                     zxzHWJ-f4Et0U_InWwExC8EhL1Q.roa (raw, json)
Hash identifier:          ejtDHAk04OGkrlYOiJUN7zJHCAtz84kjInjWTef3faw=
Subject key identifier:   CF:1C:C7:58:9F:9F:E0:4B:74:53:F2:27:5B:01:31:0B:C1:21:2F:54
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01845F39A8A378297210921B935821C6A3E4
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/zxzHWJ-f4Et0U_InWwExC8EhL1Q.roa
Signing time:             Thu 10 Nov 2022 01:48:44 +0000
ROA not before:           Thu 10 Nov 2022 01:48:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203888
IP address blocks:        2a06:a005:150a::/48 maxlen: 48
                          2a06:a005:d22::/48 maxlen: 48
                          2a06:a005:b60::/44 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:5f:39:a8:a3:78:29:72:10:92:1b:93:58:21:c6:a3:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 10 01:48:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cf1cc7589f9fe04b7453f2275b01310bc1212f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ad:d1:45:51:ab:e9:96:c3:40:36:fd:82:cc:
                    f8:aa:f6:b5:06:4f:72:f8:18:81:2f:b0:a0:06:01:
                    37:db:33:cd:bd:70:6f:e9:b6:9c:95:5e:fb:3d:38:
                    1e:13:e3:60:37:3c:54:18:20:a3:0d:df:3d:3e:7f:
                    7b:6f:76:e2:1c:0e:7c:3b:32:ba:90:b8:39:4a:d5:
                    53:d1:96:b0:1e:29:af:d2:c7:42:5e:b6:f8:87:8b:
                    a7:76:a6:e1:a1:e3:e8:76:b3:4b:a7:c6:34:74:35:
                    6f:66:5f:98:b7:da:e1:0f:3f:d2:42:e7:c8:57:45:
                    95:53:d4:a8:2f:1d:8d:08:ea:59:9c:29:c3:a6:39:
                    f9:6c:0d:d4:8a:b2:07:d4:e0:95:e3:b1:b4:ea:10:
                    69:43:79:67:e8:fe:9d:83:1f:cb:47:2c:ca:c8:62:
                    fc:d5:92:60:d0:66:70:49:65:97:14:6a:7c:f4:6a:
                    01:74:52:22:c4:16:01:2e:b6:f1:45:64:59:8e:08:
                    02:91:fb:8d:2c:2e:cd:01:43:bc:16:2d:d2:76:3c:
                    31:68:2c:35:b3:04:88:40:06:3a:9d:c8:1c:6e:e7:
                    9e:e7:4d:77:61:f1:22:02:30:fa:c7:0d:27:7d:4e:
                    0a:f4:43:6f:81:57:0c:0e:97:da:3a:49:b5:3e:05:
                    3f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:1C:C7:58:9F:9F:E0:4B:74:53:F2:27:5B:01:31:0B:C1:21:2F:54
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/zxzHWJ-f4Et0U_InWwExC8EhL1Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:b60::/44
                  2a06:a005:d22::/48
                  2a06:a005:150a::/48
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:6a:ef:78:36:1c:31:9d:29:4c:b0:a9:60:ca:0c:b2:f5:af:
         0c:fb:16:d9:3c:99:08:e0:0a:c8:27:4e:8b:d5:4f:74:79:35:
         6f:3b:01:32:73:95:9a:43:5a:a6:c8:af:1b:ba:b1:74:36:ee:
         a0:7f:cc:6d:d2:bf:6d:c4:61:55:05:02:c9:2b:4c:fd:25:67:
         38:83:be:e8:06:08:18:5d:e8:ca:8b:0e:bd:8e:37:49:6d:71:
         4a:6f:11:3d:63:28:56:82:93:22:50:93:40:3a:c9:eb:8a:ff:
         c1:1a:17:04:ce:e0:a9:65:c6:48:88:a7:41:c7:43:ce:9a:0b:
         72:a7:2b:b7:d9:c9:8a:81:b2:28:97:1f:2b:1d:6f:01:e3:ba:
         19:15:2e:ea:51:3a:71:cb:95:bb:57:20:4e:de:02:e3:94:dc:
         4a:14:0a:b9:53:59:05:ed:18:87:92:1e:a4:1f:78:57:ef:17:
         12:57:75:b6:26:e0:3d:25:74:2c:49:1d:c7:64:70:20:1b:e1:
         7f:28:d6:b9:6c:1b:d8:80:67:a6:f7:b1:3e:60:cc:47:f7:e9:
         8a:84:0c:ac:10:c1:cd:72:50:22:5b:c1:3a:0a:c4:98:ee:2d:
         c2:9a:a3:fb:e1:3a:90:ac:e7:20:0f:bf:3d:cd:02:45:a7:36:
         03:a2:76:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----