Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/4um4NAvaUApwMOcKpDT6JCIIna4.roa
File:                     4um4NAvaUApwMOcKpDT6JCIIna4.roa (raw, json)
Hash identifier:          SirKxX0oMImQTpRCpiuR5/e8c44eNPoA9r0LDZrkSkU=
Subject key identifier:   E2:E9:B8:34:0B:DA:50:0A:70:30:E7:0A:A4:34:FA:24:22:08:9D:AE
Certificate issuer:       /CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Certificate serial:       09E6C90F
Authority key identifier: 77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/4um4NAvaUApwMOcKpDT6JCIIna4.roa
Signing time:             Sat 01 Jan 2022 04:56:13 +0000
ROA not before:           Sat 01 Jan 2022 04:56:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202313
IP address blocks:        2a0d:1a40:fa0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166119695 (0x9e6c90f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
        Validity
            Not Before: Jan  1 04:56:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e2e9b8340bda500a7030e70aa434fa2422089dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:14:96:b1:4e:25:9c:82:98:ee:a7:c6:fd:9d:
                    a2:89:9b:b4:39:60:e1:48:c1:97:d6:c1:9f:d4:e4:
                    92:a2:ec:38:1d:63:af:bb:5a:21:1d:7f:59:d6:2d:
                    02:60:68:1d:c6:b2:bd:a7:35:3f:e4:ac:e4:66:8e:
                    db:8b:9c:5c:ea:e9:e8:00:c2:49:8b:0f:3e:56:06:
                    ca:89:23:44:85:82:b2:e5:ba:3d:01:10:28:b1:d6:
                    a7:18:bc:e8:33:1b:91:5f:d4:13:f8:8c:e9:84:c7:
                    e5:64:e6:f3:f1:c5:4c:77:d6:05:a7:04:2c:3d:fc:
                    0d:28:be:a0:8f:cb:d2:ce:71:be:9a:fc:fe:46:ad:
                    d5:e1:16:af:96:06:58:8b:9c:af:10:7a:3e:05:46:
                    3d:02:4c:b2:4e:89:9b:36:07:0c:37:a4:ff:9b:46:
                    7e:7f:82:8d:ba:08:58:b0:ee:38:28:9b:ae:27:c4:
                    54:5a:ba:81:1c:56:00:83:77:cd:3f:e2:9f:8e:96:
                    8d:44:6d:05:15:7b:cb:95:87:e2:df:a0:22:84:97:
                    06:b2:8f:b5:95:26:43:df:94:1e:ae:7d:09:ca:f2:
                    c3:7b:63:9f:82:e8:bb:36:3e:1d:1f:ec:84:ca:1f:
                    36:d7:49:8e:d0:0b:a4:f4:b2:d2:15:e6:d6:66:55:
                    14:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E9:B8:34:0B:DA:50:0A:70:30:E7:0A:A4:34:FA:24:22:08:9D:AE
            X509v3 Authority Key Identifier:
                keyid:77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/4um4NAvaUApwMOcKpDT6JCIIna4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/d8jYu_BXl6daScXXD1lx7N7G3ZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:1a40:fa0::/44

    Signature Algorithm: sha256WithRSAEncryption
         8d:e0:f7:0d:41:16:9b:33:e8:49:8d:5e:e7:d9:05:bc:9c:a3:
         9c:03:b6:48:0e:03:c2:67:39:79:20:d5:01:b2:0c:8c:95:ea:
         3f:87:6e:ce:eb:78:c9:ba:5f:30:db:74:16:fd:5e:a0:24:7d:
         c0:1a:86:c7:3a:7f:b0:ce:12:33:b4:28:c8:00:f2:ed:d4:3b:
         20:6e:a4:b2:75:cd:b5:14:aa:cc:a8:c9:2f:29:5f:af:0f:b4:
         99:66:57:ca:12:2a:e6:6f:45:92:fe:ed:9e:eb:32:4b:56:1b:
         e3:34:47:57:64:86:36:ee:5b:31:90:0e:3c:5c:e1:65:25:e3:
         6a:25:ec:25:d5:2a:98:4c:a0:1e:ec:4a:53:43:6a:2e:4f:7d:
         70:3a:91:b7:06:af:5a:c4:19:5d:91:b7:29:47:da:98:15:46:
         55:88:f8:33:3d:eb:d9:73:1b:ec:cb:3b:81:3a:c9:7a:85:e2:
         9d:6a:75:03:95:05:c6:12:7f:74:d6:69:20:da:de:26:2f:27:
         ee:57:d5:18:0f:38:85:9b:3f:d6:6f:38:e4:fd:16:0c:fd:6d:
         69:ad:18:8f:14:07:c2:a8:31:5e:3c:88:ae:b1:7e:ec:27:4f:
         d0:2d:6f:ad:ff:65:22:ee:25:fd:83:e3:e5:d2:1c:fc:af:e6:
         c3:c4:81:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----