Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9aadb9-a557-41f9-9640-b44b61472327/1/bg_KfjpUrNQAcXkPpyEo6wWER7U.roa
File:                     bg_KfjpUrNQAcXkPpyEo6wWER7U.roa (raw, json)
Hash identifier:          rlp9+Ux9reY5VJgKMfPga9+ofdvOa2lzLpRHT7DVbdE=
Subject key identifier:   6E:0F:CA:7E:3A:54:AC:D4:00:71:79:0F:A7:21:28:EB:05:84:47:B5
Certificate issuer:       /CN=f7d941d0caf581fc60a20e624db8c8146472f49e
Certificate serial:       37E4B30F
Authority key identifier: F7:D9:41:D0:CA:F5:81:FC:60:A2:0E:62:4D:B8:C8:14:64:72:F4:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/99lB0Mr1gfxgog5iTbjIFGRy9J4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/9aadb9-a557-41f9-9640-b44b61472327/1/bg_KfjpUrNQAcXkPpyEo6wWER7U.roa
Signing time:             Sat 01 Jan 2022 07:02:38 +0000
ROA not before:           Sat 01 Jan 2022 07:02:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3303
IP address blocks:        80.75.192.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 937734927 (0x37e4b30f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7d941d0caf581fc60a20e624db8c8146472f49e
        Validity
            Not Before: Jan  1 07:02:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6e0fca7e3a54acd40071790fa72128eb058447b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:eb:31:dd:05:ce:41:e9:c4:b8:91:82:14:13:
                    79:af:83:cb:15:7c:5f:4e:73:0e:9f:a5:51:6b:28:
                    76:46:4d:c7:74:eb:5d:af:f7:64:8c:2d:a4:35:4d:
                    2e:67:d1:e2:56:83:c0:f6:d2:ac:86:9a:6e:7f:da:
                    0c:8f:2c:21:e9:c0:c2:36:a1:2e:b4:7d:9b:3f:a7:
                    2b:71:0d:d2:a3:c4:7e:da:88:d4:33:c8:b9:33:14:
                    03:58:93:b8:0c:15:50:af:80:7d:b5:24:42:a3:9f:
                    fa:45:7b:26:17:06:fa:fc:a9:4f:5f:06:fe:c0:72:
                    62:20:24:b0:17:0d:03:22:09:4e:d1:28:71:3a:5a:
                    61:69:c3:07:7e:56:63:4d:cd:52:f6:95:06:db:51:
                    63:27:e5:04:fc:01:4e:6f:47:00:f2:7c:ff:97:93:
                    82:64:4b:09:99:53:23:95:fe:9e:12:ae:d7:3a:0e:
                    96:94:68:cd:1a:12:52:ee:a3:de:6e:10:79:7b:d1:
                    8a:43:06:a2:9f:86:ff:01:39:8d:70:1a:5e:68:c1:
                    cf:a1:41:98:b4:ec:43:7e:16:5f:36:f9:ae:d9:42:
                    ec:7d:13:20:a0:e0:12:1f:a2:64:d8:39:bd:b5:39:
                    4f:a5:c1:07:80:82:4a:1d:3e:74:3e:35:49:a4:97:
                    5e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0F:CA:7E:3A:54:AC:D4:00:71:79:0F:A7:21:28:EB:05:84:47:B5
            X509v3 Authority Key Identifier:
                keyid:F7:D9:41:D0:CA:F5:81:FC:60:A2:0E:62:4D:B8:C8:14:64:72:F4:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99lB0Mr1gfxgog5iTbjIFGRy9J4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9aadb9-a557-41f9-9640-b44b61472327/1/bg_KfjpUrNQAcXkPpyEo6wWER7U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9aadb9-a557-41f9-9640-b44b61472327/1/99lB0Mr1gfxgog5iTbjIFGRy9J4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.75.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         40:91:37:40:65:93:b8:56:28:0f:51:93:ea:cc:c5:b6:97:b2:
         7c:a7:f4:09:57:c9:74:f4:92:b3:a8:4e:89:68:01:7e:57:98:
         e7:9f:23:69:17:3d:a3:91:d5:42:6c:37:da:17:3a:56:80:7a:
         fb:47:47:2a:08:7f:af:72:eb:51:b9:f5:ac:39:c0:4e:1a:c9:
         2e:75:76:05:bb:b5:1f:9c:b6:3f:e6:e7:b7:84:7e:92:8d:97:
         de:e0:5b:74:5b:61:a4:ef:20:e3:91:3d:d9:cd:12:40:74:69:
         aa:b1:f3:f4:a9:69:69:91:2e:7e:19:92:b0:78:8a:ec:99:76:
         f9:5d:84:85:1d:3c:f3:40:c6:e9:63:80:26:51:d9:fe:e8:e7:
         8e:3c:c0:91:22:2c:ac:a8:32:10:64:11:8b:a7:c6:5a:59:ff:
         c8:f8:1e:53:18:fe:a7:53:31:4b:44:76:99:54:c8:61:19:52:
         4b:94:8a:50:e2:ea:8d:f7:3f:52:52:cb:40:45:05:ed:20:13:
         42:59:b0:e2:38:63:2d:29:6d:f3:a1:17:e2:4d:1f:fd:83:f3:
         ed:61:5a:6f:45:74:56:59:aa:fc:9d:9e:c3:15:a2:40:fa:a1:
         ec:fb:18:fe:40:3c:9d:77:60:ec:0a:fa:0b:67:d2:e4:04:c6:
         fb:f0:e1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----