Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/207b40-5fff-4f43-8b82-103b9f327924/1/l6M8agv47tGd9wuicoo9nHzhUvg.roa
File:                     l6M8agv47tGd9wuicoo9nHzhUvg.roa (raw, json)
Hash identifier:          t/BMLGXEF9SdQ/wBzRgQf4l3B5pd+6bGWlEGjxE2Bes=
Subject key identifier:   97:A3:3C:6A:0B:F8:EE:D1:9D:F7:0B:A2:72:8A:3D:9C:7C:E1:52:F8
Certificate issuer:       /CN=0e1fb63628fe3a11065189bdcf1357fbfc06dade
Certificate serial:       09BBADFC
Authority key identifier: 0E:1F:B6:36:28:FE:3A:11:06:51:89:BD:CF:13:57:FB:FC:06:DA:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/207b40-5fff-4f43-8b82-103b9f327924/1/l6M8agv47tGd9wuicoo9nHzhUvg.roa
Signing time:             Sat 01 Jan 2022 00:53:22 +0000
ROA not before:           Sat 01 Jan 2022 00:53:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     27970
IP address blocks:        77.83.58.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163294716 (0x9bbadfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e1fb63628fe3a11065189bdcf1357fbfc06dade
        Validity
            Not Before: Jan  1 00:53:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=97a33c6a0bf8eed19df70ba2728a3d9c7ce152f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:12:39:d9:28:eb:28:9d:6b:f6:7f:23:12:8d:
                    e2:a2:ea:39:c2:11:d3:d9:0a:c8:4f:bb:31:68:6d:
                    3c:6c:75:4c:0d:e7:34:ae:7f:5a:bd:29:f4:9a:c0:
                    ed:ba:93:fc:d4:e6:74:0c:73:82:41:c5:24:c0:d9:
                    24:ab:89:1b:5b:9f:67:c7:29:f4:d3:e6:b3:b1:63:
                    11:96:88:53:66:9d:ad:f8:05:4c:a4:8d:24:b3:64:
                    c7:61:98:f5:1f:93:33:5a:67:a2:cf:de:b7:52:dc:
                    e4:93:02:96:21:8e:24:74:4a:a3:d5:68:e5:3f:65:
                    92:2a:56:80:7e:8c:dc:57:4c:53:92:86:c1:01:1b:
                    dd:7a:e8:6a:5d:63:1c:d0:93:28:b9:9b:d9:9d:2c:
                    68:be:70:67:cb:83:51:06:ba:a9:1e:a0:80:6b:cf:
                    31:9c:66:d0:b6:62:a8:f2:68:6a:fa:a9:b9:4d:48:
                    16:fa:f7:15:3c:ac:b0:d3:5b:ad:b7:a0:f7:d7:e0:
                    53:ab:d9:36:b1:b0:0c:e8:b2:a2:83:56:19:32:77:
                    c8:e1:5d:c8:be:63:a8:0d:a7:7e:ae:e5:9c:5e:ad:
                    32:23:d7:a8:a5:22:17:a0:13:37:05:84:48:d5:ea:
                    c1:4e:05:f6:5c:4a:55:27:9e:d1:ac:51:6b:87:3d:
                    e2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A3:3C:6A:0B:F8:EE:D1:9D:F7:0B:A2:72:8A:3D:9C:7C:E1:52:F8
            X509v3 Authority Key Identifier:
                keyid:0E:1F:B6:36:28:FE:3A:11:06:51:89:BD:CF:13:57:FB:FC:06:DA:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/207b40-5fff-4f43-8b82-103b9f327924/1/l6M8agv47tGd9wuicoo9nHzhUvg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/207b40-5fff-4f43-8b82-103b9f327924/1/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:51:0e:9f:65:34:c6:7e:be:20:51:d4:1c:60:d7:53:33:fa:
         1e:dc:a5:cd:d6:86:29:df:16:90:fc:da:3e:fd:9d:22:45:35:
         c8:67:09:92:11:d8:b7:8b:de:14:c1:a0:d8:5b:87:fe:1a:5f:
         5b:a7:f6:46:8f:72:21:32:2c:b6:25:e8:4f:e1:f2:bb:cb:07:
         35:88:57:99:77:10:6e:b4:59:11:21:15:01:15:39:06:fc:8a:
         d3:f8:96:b2:ac:29:3e:f0:e7:43:b0:c5:43:14:1a:dc:30:4a:
         b9:7a:81:1e:a7:97:3e:5b:de:d2:cf:53:7d:a1:a9:ca:b5:6c:
         06:26:d0:1b:d0:6f:71:cb:fa:9a:52:36:9c:23:17:45:c6:ad:
         2a:31:d6:3e:3f:ea:e9:ea:2c:84:e9:0b:1a:14:95:e1:fd:ef:
         db:e4:4a:b9:a4:b7:7d:aa:59:2e:8c:0c:53:aa:2a:3b:66:05:
         ab:2a:99:2b:4c:28:5c:63:09:1a:c6:c8:74:ea:c7:a2:86:88:
         f0:58:51:ad:b6:99:9b:ce:0f:d2:de:f5:9f:dc:fc:34:eb:3d:
         39:7c:22:f7:75:f2:6c:c7:ff:be:d8:ee:80:26:6d:74:26:46:
         c6:72:10:53:42:ac:18:15:2e:63:84:73:93:4e:c1:2d:ba:94:
         8c:ee:94:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----