Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/TB_6WWppuYVvZye5N0RIP00b0XM.roa
File:                     TB_6WWppuYVvZye5N0RIP00b0XM.roa (raw, json)
Hash identifier:          2hAyh3d8ZIn2tZwW6/2l3UWLZU2wModAinHi3JjSda8=
Subject key identifier:   4C:1F:FA:59:6A:69:B9:85:6F:67:27:B9:37:44:48:3F:4D:1B:D1:73
Certificate issuer:       /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial:       0573F8E1
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/TB_6WWppuYVvZye5N0RIP00b0XM.roa
Signing time:             Sun 24 Apr 2022 21:59:54 +0000
ROA not before:           Sun 24 Apr 2022 21:59:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     272082
IP address blocks:        185.89.78.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91486433 (0x573f8e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
        Validity
            Not Before: Apr 24 21:59:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4c1ffa596a69b9856f6727b93744483f4d1bd173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:38:d4:3b:53:1d:33:7a:d6:0f:7a:26:35:d6:
                    e0:39:be:10:a6:06:aa:8f:bc:01:bc:45:0f:13:6f:
                    e9:c7:40:e8:57:14:de:7d:3f:bc:67:66:1a:de:a1:
                    58:e1:17:1a:b8:e1:6d:d8:3d:ef:e2:c5:66:31:a0:
                    ab:cf:5f:c0:31:2d:c5:d8:8f:af:12:58:9d:82:9e:
                    0f:8f:c5:1f:8d:22:2b:00:2e:fb:8f:65:7a:1c:fa:
                    8b:d9:79:93:e1:8a:2b:e1:21:29:88:d6:aa:41:07:
                    1e:c5:15:d0:5d:1f:af:dc:82:91:ea:e6:b9:cd:6e:
                    bb:51:99:98:ab:c7:78:72:c7:0e:e1:fb:3a:22:19:
                    6e:f2:8e:1b:1e:c0:f2:0e:1a:bf:48:04:60:04:9f:
                    bf:cc:2b:82:9d:c0:5f:b2:e6:56:ab:f3:be:10:a5:
                    32:9a:7c:5c:31:3c:5c:19:82:fd:56:48:86:a3:86:
                    9a:1d:74:a2:d8:77:dd:b2:a3:0b:cf:08:33:cb:08:
                    ec:a7:12:52:aa:92:15:32:75:3c:84:5d:1e:4f:66:
                    48:bd:43:4c:36:3c:4d:97:d6:b1:7a:4f:3a:8b:d6:
                    a3:77:86:4a:eb:e1:32:17:28:de:ca:f0:9f:85:74:
                    7f:5a:c4:fe:d2:73:d8:4f:68:3a:c3:c9:f5:d2:fa:
                    61:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1F:FA:59:6A:69:B9:85:6F:67:27:B9:37:44:48:3F:4D:1B:D1:73
            X509v3 Authority Key Identifier:
                keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/TB_6WWppuYVvZye5N0RIP00b0XM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.89.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:83:ec:b0:b4:50:5e:99:02:25:10:0a:a5:38:84:a1:17:9d:
         c4:d3:77:1d:38:28:98:d0:59:42:56:dd:2c:d2:25:b7:d5:2a:
         c0:d0:04:e9:e5:06:e4:81:4c:a4:f9:ea:c5:30:4f:1f:06:c9:
         57:ef:f9:d7:6f:13:1a:bd:1e:ad:27:66:0a:74:ca:01:2d:5e:
         6b:c8:db:23:e9:3d:58:25:00:76:29:48:ca:c0:d3:c4:2c:52:
         a6:12:b1:ab:d3:91:aa:24:7f:e1:36:8d:69:77:6a:9c:2f:43:
         cd:c8:6c:3b:e2:32:7c:39:e0:b8:d3:39:80:1b:50:b6:7f:9a:
         82:2f:a9:2d:04:02:84:b6:fd:ec:60:b1:f8:20:18:4d:9c:fb:
         d9:5c:3e:65:09:58:c2:20:f7:fd:ee:08:1c:5d:8b:df:8e:d9:
         a1:4c:c2:a9:e5:8e:3d:be:29:e0:38:45:dd:ac:7e:9a:4e:d3:
         b0:26:7b:09:7c:19:45:54:87:7c:34:11:5b:b8:f7:df:4d:11:
         0d:35:72:75:1d:91:64:47:09:9f:80:d2:55:7f:27:36:e3:0e:
         40:b4:55:41:0b:68:7b:b2:4a:ce:68:33:a8:59:8d:8c:7d:e0:
         9a:8b:1d:d5:00:48:d8:87:ea:c0:70:9f:38:bd:3a:af:f7:81:
         c4:06:23:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----