Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/WOfkZrSCU-Ok39dpgRnf0L04Cpg.roa
File:                     WOfkZrSCU-Ok39dpgRnf0L04Cpg.roa (raw, json)
Hash identifier:          dQUHGOKFvEGype2yzxj0TSVbLVOyNje0/2fNGDnGlsw=
Subject key identifier:   58:E7:E4:66:B4:82:53:E3:A4:DF:D7:69:81:19:DF:D0:BD:38:0A:98
Certificate issuer:       /CN=5e09c0a07411c94730e0d2f2da08ab97963adb5b
Certificate serial:       1D9F19BF
Authority key identifier: 5E:09:C0:A0:74:11:C9:47:30:E0:D2:F2:DA:08:AB:97:96:3A:DB:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XgnAoHQRyUcw4NLy2girl5Y621s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/WOfkZrSCU-Ok39dpgRnf0L04Cpg.roa
Signing time:             Fri 20 May 2022 08:57:30 +0000
ROA not before:           Fri 20 May 2022 08:57:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8954
IP address blocks:        2001:67c:21b4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 496966079 (0x1d9f19bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e09c0a07411c94730e0d2f2da08ab97963adb5b
        Validity
            Not Before: May 20 08:57:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=58e7e466b48253e3a4dfd7698119dfd0bd380a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8f:c3:db:4f:c1:e3:27:0a:66:00:fc:d2:48:
                    89:43:88:f8:4b:14:95:4e:e6:3a:63:4b:30:ae:44:
                    48:00:09:90:9a:4a:90:6d:bb:42:d3:9e:ad:19:3d:
                    10:44:45:e1:a1:a6:bd:a8:d2:ac:a8:99:c4:5d:73:
                    ea:ec:86:45:62:3c:4c:61:d8:ae:41:b6:36:36:36:
                    06:fe:73:85:c9:ae:2f:fa:ce:60:8b:4d:66:5c:53:
                    15:12:65:28:2b:fd:7b:40:2c:d4:32:26:3f:f1:5b:
                    a5:3d:0c:39:f8:d1:27:96:67:a0:6a:93:52:6f:8e:
                    80:14:f2:3f:52:c2:4e:5c:e0:2b:32:d8:09:7d:50:
                    3c:f9:ea:c3:66:7f:1b:12:a9:0b:2c:87:72:2b:5b:
                    eb:04:0a:17:48:11:05:0b:8a:98:25:1e:8b:d3:ac:
                    65:12:54:a9:8c:72:45:8f:38:3d:76:61:c1:5b:fa:
                    2e:63:a2:64:10:c6:34:80:82:9e:40:02:e8:4e:8c:
                    b4:2c:d1:38:d3:10:4b:2a:96:9e:de:8e:0f:fb:43:
                    bd:2f:d9:d8:51:90:45:88:18:de:dc:b7:70:a1:d6:
                    0e:87:0d:d5:3d:fe:78:3d:d7:07:b2:51:99:31:ce:
                    d8:17:06:f7:25:9e:fc:40:22:2b:c4:b0:e0:6a:81:
                    68:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E7:E4:66:B4:82:53:E3:A4:DF:D7:69:81:19:DF:D0:BD:38:0A:98
            X509v3 Authority Key Identifier:
                keyid:5E:09:C0:A0:74:11:C9:47:30:E0:D2:F2:DA:08:AB:97:96:3A:DB:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgnAoHQRyUcw4NLy2girl5Y621s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/WOfkZrSCU-Ok39dpgRnf0L04Cpg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/XgnAoHQRyUcw4NLy2girl5Y621s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:21b4::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:4d:5d:30:32:3c:8c:a2:ec:03:a4:18:11:e5:f0:c1:b2:1c:
         d1:6b:6d:c6:cf:04:cc:9f:46:17:50:08:f6:b3:36:84:09:be:
         53:92:24:a7:4a:33:bd:65:02:d1:a4:ac:d6:33:26:3f:f6:11:
         5c:a2:d1:ac:d9:a5:01:96:8b:76:af:04:73:68:19:0c:28:22:
         cf:46:66:ed:40:e3:62:3d:b7:e8:de:60:50:38:33:6b:a9:76:
         47:0e:f2:8a:a3:00:e3:93:de:2d:03:28:ce:fa:dd:8c:14:e9:
         c4:97:f7:67:ee:b3:36:d9:08:a8:3b:e8:7b:ea:71:e6:12:aa:
         70:0d:e3:ab:4e:fa:0e:31:aa:cb:2a:be:4c:aa:85:c0:d8:fe:
         df:1c:a4:09:12:9c:7d:72:37:b6:23:45:ec:32:0c:ac:1b:a4:
         52:94:04:c3:07:40:e6:01:b7:f8:ff:58:6c:76:79:59:e3:ac:
         fa:03:12:0a:fb:d7:c5:24:76:f9:03:6d:8d:0f:21:0b:67:55:
         16:50:77:4b:87:cd:12:22:37:69:e4:4a:95:65:07:b9:7a:6c:
         bb:88:06:07:d1:ce:42:e6:df:4e:8c:29:e1:88:ad:90:a8:7d:
         96:e3:38:27:a2:6b:26:02:3d:be:c3:fe:b5:b3:1d:d4:65:f7:
         4a:75:9a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----