Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f2cde0-d435-4f41-921d-af898c15ceda/1/H2wcvx5CD5Za7QiRnfin2eCXwds.roa
File:                     H2wcvx5CD5Za7QiRnfin2eCXwds.roa (raw, json)
Hash identifier:          w1wthEmMj/1nYYLdTUqPJe+QuqkZki/2ih2qc9oYIzM=
Subject key identifier:   1F:6C:1C:BF:1E:42:0F:96:5A:ED:08:91:9D:F8:A7:D9:E0:97:C1:DB
Certificate issuer:       /CN=c9e66203703737af1255e4ac6d682f2fa8c66b09
Certificate serial:       01857082C67411678C79DD2A85E56C4A6458
Authority key identifier: C9:E6:62:03:70:37:37:AF:12:55:E4:AC:6D:68:2F:2F:A8:C6:6B:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yeZiA3A3N68SVeSsbWgvL6jGawk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/f2cde0-d435-4f41-921d-af898c15ceda/1/H2wcvx5CD5Za7QiRnfin2eCXwds.roa
Signing time:             Mon 02 Jan 2023 03:24:56 +0000
ROA not before:           Mon 02 Jan 2023 03:24:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198401
IP address blocks:        62.3.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:82:c6:74:11:67:8c:79:dd:2a:85:e5:6c:4a:64:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9e66203703737af1255e4ac6d682f2fa8c66b09
        Validity
            Not Before: Jan  2 03:24:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1f6c1cbf1e420f965aed08919df8a7d9e097c1db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c0:48:2c:eb:78:f1:7e:91:2c:bc:15:95:34:
                    5c:26:f2:29:09:34:4a:65:a8:7e:b3:da:4e:ec:bc:
                    6f:7d:84:c5:85:b7:aa:85:a8:d9:32:d5:26:33:fd:
                    78:0b:b9:75:01:39:0d:06:cb:a1:65:bd:75:5c:bd:
                    5a:e9:b7:b8:14:6c:24:76:13:e0:42:38:4a:65:f7:
                    f7:1b:ca:73:d9:bd:44:78:16:8d:79:d5:6f:3e:42:
                    cd:a7:c0:a2:d4:5e:a2:a7:7b:cc:1e:ab:fe:83:c1:
                    26:0b:aa:69:00:6b:17:1a:21:ac:52:21:3b:8f:34:
                    c6:a5:4c:88:a1:46:dc:cc:33:16:96:82:f9:e5:89:
                    9e:d9:97:8a:84:41:14:b6:33:76:34:a9:5a:c8:9c:
                    1e:89:c7:52:a7:ef:87:2c:0f:b5:e5:24:f1:05:9d:
                    2c:67:c9:d4:4f:a9:74:77:44:06:20:d2:ef:68:9c:
                    42:16:d8:d4:9d:59:df:19:eb:f1:d1:25:09:d4:d7:
                    17:ed:da:09:99:76:22:fe:6d:d2:0f:d0:0c:65:4a:
                    f8:92:91:a9:82:63:29:94:c2:67:c4:fb:16:c5:23:
                    87:fd:1f:99:8a:3f:f2:91:fe:e4:c2:4b:9a:19:a5:
                    6b:11:44:69:e7:83:42:f3:18:55:75:72:13:54:e3:
                    e3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6C:1C:BF:1E:42:0F:96:5A:ED:08:91:9D:F8:A7:D9:E0:97:C1:DB
            X509v3 Authority Key Identifier:
                keyid:C9:E6:62:03:70:37:37:AF:12:55:E4:AC:6D:68:2F:2F:A8:C6:6B:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeZiA3A3N68SVeSsbWgvL6jGawk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f2cde0-d435-4f41-921d-af898c15ceda/1/H2wcvx5CD5Za7QiRnfin2eCXwds.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f2cde0-d435-4f41-921d-af898c15ceda/1/yeZiA3A3N68SVeSsbWgvL6jGawk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:a6:16:23:2d:3a:94:30:e4:5e:6a:29:40:08:de:61:66:4b:
         56:65:11:29:0f:4e:5a:0a:f8:07:00:65:4f:a7:ea:61:36:23:
         cc:6c:c4:a6:ef:4f:2d:e8:45:f0:09:6c:94:72:95:34:46:a4:
         bc:f9:12:6d:bb:a4:20:d9:a6:d8:d5:de:64:b8:ad:90:6e:32:
         51:b7:12:36:f0:fb:be:86:5c:e3:98:32:80:68:91:be:ca:87:
         45:92:b7:bb:54:3f:08:60:ad:53:1c:3a:35:ed:89:02:bd:10:
         9c:87:6d:69:c0:a6:b1:4c:ae:c7:1b:b9:47:47:22:75:70:c4:
         6e:fb:e7:dc:45:19:42:83:a4:33:5a:95:8d:1c:9b:ab:94:8f:
         84:23:d2:96:0d:de:0d:20:01:50:b4:e9:a3:2b:c8:5a:57:a2:
         78:9a:2e:4c:a6:1b:1f:df:44:0b:59:a0:ee:0a:bf:4e:7a:3a:
         d9:3b:e4:d8:a7:a4:93:0d:d2:a6:94:d9:36:03:ad:55:87:51:
         e1:a7:62:fd:03:0b:76:66:f4:60:58:94:66:00:62:f3:f1:4c:
         0d:c8:32:30:a9:68:e9:f0:d3:45:c3:59:00:d7:1e:5f:7e:85:
         2c:40:ef:d3:44:d0:61:57:74:3d:5d:14:fc:96:9f:a3:3f:c7:
         80:9c:02:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----