Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ee02d2-29e5-4017-8fec-8ac0495593c5/1/PS76XK-07aQ9Om2b0JcGB006_LY.roa
File:                     PS76XK-07aQ9Om2b0JcGB006_LY.roa (raw, json)
Hash identifier:          RWWJYqs5vK3mvHQr9aoTqtH0G3ptmS2tKw8AdPSCAo8=
Subject key identifier:   3D:2E:FA:5C:AF:B4:ED:A4:3D:3A:6D:9B:D0:97:06:07:4D:3A:FC:B6
Certificate issuer:       /CN=db7756836f04b61449de2d334eb6fc8d5b52207c
Certificate serial:       09EF6CFA
Authority key identifier: DB:77:56:83:6F:04:B6:14:49:DE:2D:33:4E:B6:FC:8D:5B:52:20:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/23dWg28EthRJ3i0zTrb8jVtSIHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/ee02d2-29e5-4017-8fec-8ac0495593c5/1/PS76XK-07aQ9Om2b0JcGB006_LY.roa
Signing time:             Sat 01 Jan 2022 04:01:25 +0000
ROA not before:           Sat 01 Jan 2022 04:01:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41114
IP address blocks:        193.148.80.0/22 maxlen: 22
                          2a0d:e6c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166685946 (0x9ef6cfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db7756836f04b61449de2d334eb6fc8d5b52207c
        Validity
            Not Before: Jan  1 04:01:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3d2efa5cafb4eda43d3a6d9bd09706074d3afcb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9b:33:82:a9:d9:c9:f0:43:c1:79:db:26:79:
                    18:f1:9f:83:c2:0d:f5:92:ce:55:06:a0:b8:76:a4:
                    b8:14:b9:4c:e4:eb:ad:73:f3:51:20:2d:8f:9e:30:
                    22:32:67:98:77:0d:d8:72:ab:a4:d8:d4:9f:b7:87:
                    c7:2f:38:e0:2a:ba:b4:90:dc:bb:4a:1b:cf:60:89:
                    30:2a:81:bb:20:61:27:88:bb:7e:1b:74:eb:b5:df:
                    42:a4:31:df:c5:45:2f:3a:c3:d8:00:cf:c1:44:2b:
                    3f:b6:8a:81:a4:96:f7:27:b8:12:eb:c3:c5:6c:77:
                    04:44:da:4e:2f:c9:32:b6:1f:89:ac:0c:98:85:b0:
                    b0:08:99:67:5c:60:c2:50:a4:59:0b:37:ce:91:6c:
                    c0:a0:0c:60:63:6a:0f:a5:5b:34:a3:12:00:0d:f8:
                    f4:4c:5c:87:47:89:73:34:6e:36:fa:d8:51:85:ee:
                    be:28:31:f6:89:b7:0a:23:70:8f:32:13:bf:bc:fb:
                    67:62:3a:8c:1c:3b:f9:52:28:4b:43:13:f2:c7:d0:
                    3e:14:a7:32:4c:31:f7:08:d9:c1:2f:7f:90:b8:ed:
                    ad:61:f8:66:25:eb:66:6c:23:85:df:c3:ed:cd:2c:
                    ff:05:22:82:50:7e:b0:1e:3e:4b:9c:71:10:a4:1d:
                    c2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:2E:FA:5C:AF:B4:ED:A4:3D:3A:6D:9B:D0:97:06:07:4D:3A:FC:B6
            X509v3 Authority Key Identifier:
                keyid:DB:77:56:83:6F:04:B6:14:49:DE:2D:33:4E:B6:FC:8D:5B:52:20:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23dWg28EthRJ3i0zTrb8jVtSIHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ee02d2-29e5-4017-8fec-8ac0495593c5/1/PS76XK-07aQ9Om2b0JcGB006_LY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ee02d2-29e5-4017-8fec-8ac0495593c5/1/23dWg28EthRJ3i0zTrb8jVtSIHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.148.80.0/22
                IPv6:
                  2a0d:e6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:4b:85:42:fb:0a:ad:1e:7e:f4:e4:c8:ce:9c:42:32:27:9d:
         28:41:f5:b8:93:9a:a0:46:11:39:6c:fa:c7:84:b0:d0:82:a2:
         f0:0b:aa:ff:8d:52:99:68:16:1e:81:64:5b:0b:70:20:c0:09:
         75:81:a1:ae:f3:30:85:d8:47:ad:ca:12:70:39:cb:a0:ad:e6:
         d9:7f:fa:d9:56:c6:68:d3:8c:04:33:88:ac:61:7c:c7:c5:b6:
         69:0b:f9:a9:ae:f2:2a:33:f0:53:74:28:7d:7d:da:5a:c2:0a:
         88:71:bf:75:67:50:34:6a:85:7a:5b:4c:32:9b:dc:da:78:22:
         e9:41:d6:1b:97:10:5c:14:df:02:67:ee:96:8e:fb:30:a1:70:
         67:3a:cd:a8:8e:b0:6b:18:0c:94:4d:4f:74:19:f9:25:31:c9:
         a8:3b:1d:77:d7:34:9c:79:82:01:d7:1e:ea:3f:a5:c6:fb:24:
         4f:40:96:86:f4:b5:d8:f9:32:6b:59:16:83:1c:2c:96:62:e9:
         fe:4d:86:72:05:d3:57:08:aa:ea:0e:76:91:15:32:07:a7:ad:
         32:67:8c:a7:de:ce:f3:7d:36:03:97:60:14:4d:ad:d5:f1:ab:
         c3:7e:69:73:7d:57:72:e0:13:78:73:1f:75:d3:4a:5a:6c:aa:
         74:cc:df:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----