Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0c9af1-7879-44a4-b81b-aa82a7d9b352/1/t7v8Tc1a0I0yndnxGNVy9QpMkZA.roa
File:                     t7v8Tc1a0I0yndnxGNVy9QpMkZA.roa (raw, json)
Hash identifier:          qExnhdThvMQZzmCZSQY2MvZilH3NT4349z/JmFkL9sI=
Subject key identifier:   B7:BB:FC:4D:CD:5A:D0:8D:32:9D:D9:F1:18:D5:72:F5:0A:4C:91:90
Certificate issuer:       /CN=acc6e1b035ae13a624f25e91f928a3228cceb655
Certificate serial:       01824B6BAE11B2E17396448E4E033680E23C
Authority key identifier: AC:C6:E1:B0:35:AE:13:A6:24:F2:5E:91:F9:28:A3:22:8C:CE:B6:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rMbhsDWuE6Yk8l6R-SijIozOtlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/0c9af1-7879-44a4-b81b-aa82a7d9b352/1/t7v8Tc1a0I0yndnxGNVy9QpMkZA.roa
Signing time:             Fri 29 Jul 2022 19:25:24 +0000
ROA not before:           Fri 29 Jul 2022 19:25:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     399587
IP address blocks:        139.28.32.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:4b:6b:ae:11:b2:e1:73:96:44:8e:4e:03:36:80:e2:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc6e1b035ae13a624f25e91f928a3228cceb655
        Validity
            Not Before: Jul 29 19:25:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b7bbfc4dcd5ad08d329dd9f118d572f50a4c9190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7e:84:79:c3:4f:91:b2:bc:e8:5f:bc:63:c8:
                    f6:51:22:5b:6a:f0:89:91:6d:c1:87:dc:fc:3a:d0:
                    97:0f:33:ad:39:53:13:75:ec:9e:0d:cb:5a:a9:e4:
                    a0:50:a5:94:e3:5f:36:11:c6:8f:21:d9:44:8c:36:
                    d2:6b:bd:f2:90:11:71:54:16:cd:2b:2c:8c:ac:96:
                    1a:cb:2e:7e:9f:0d:69:57:28:ea:07:bc:2b:5c:e3:
                    3c:d8:b2:fd:6f:35:ab:e4:7c:34:e4:27:b9:86:31:
                    20:b4:3c:62:5e:04:f1:6c:c3:24:36:63:a0:2b:f9:
                    39:f8:4b:69:a1:3c:73:ed:6b:d6:60:20:a7:8e:40:
                    a5:e8:1d:c4:3a:a7:4c:6a:98:d2:c0:fb:4e:f5:36:
                    ae:8e:4a:15:bf:bf:82:56:27:52:7f:6e:fa:db:03:
                    5c:98:f4:b1:f7:6f:08:aa:31:76:ff:be:a2:cc:57:
                    14:7a:57:bf:6e:d4:5a:df:26:83:55:d0:4c:6d:c9:
                    85:72:74:7b:8e:53:5e:c6:7d:1b:74:87:03:48:bd:
                    64:03:d3:53:5b:7c:ab:73:6f:ec:72:f9:b6:05:63:
                    01:d3:fd:24:bb:84:aa:51:f4:44:02:03:dd:c8:f4:
                    6c:fd:f1:bf:1a:24:b1:da:b3:71:a7:c3:df:eb:1b:
                    1e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:BB:FC:4D:CD:5A:D0:8D:32:9D:D9:F1:18:D5:72:F5:0A:4C:91:90
            X509v3 Authority Key Identifier:
                keyid:AC:C6:E1:B0:35:AE:13:A6:24:F2:5E:91:F9:28:A3:22:8C:CE:B6:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMbhsDWuE6Yk8l6R-SijIozOtlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0c9af1-7879-44a4-b81b-aa82a7d9b352/1/t7v8Tc1a0I0yndnxGNVy9QpMkZA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0c9af1-7879-44a4-b81b-aa82a7d9b352/1/rMbhsDWuE6Yk8l6R-SijIozOtlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.28.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:2d:be:ed:ad:ee:72:5f:9c:0a:03:e2:01:94:3d:a6:7e:07:
         19:45:6f:05:4c:94:58:31:92:bb:ee:dd:5e:11:a7:ea:b5:5c:
         52:cc:57:87:26:1a:85:0a:ca:72:56:e1:98:90:b9:1a:cb:2c:
         b8:2a:b8:1c:97:cc:24:ac:92:60:ed:e0:08:ac:35:53:c3:e3:
         55:8d:60:10:5d:af:fd:05:dc:0d:57:1f:a2:1d:9e:4c:06:d3:
         38:85:66:62:a2:6a:61:f1:3c:6b:ea:27:17:f1:25:9e:56:fd:
         2f:d0:2f:cf:7c:66:89:df:1e:77:7f:30:f0:60:31:40:d8:10:
         41:27:49:7b:0f:97:f7:76:4c:4f:c9:eb:8a:e0:88:73:d6:ce:
         5d:ba:59:37:49:e9:de:8f:5b:54:e8:d8:c9:5d:f9:80:8e:89:
         55:ed:c4:d6:39:b8:30:c1:85:85:9c:52:f7:d4:37:f2:f1:a4:
         99:63:15:0d:f5:8b:2f:bf:03:8a:75:c8:3c:60:db:1e:0c:1c:
         98:d9:97:f4:05:e8:96:ab:8e:f6:e4:b6:9f:e6:4f:fc:b7:fe:
         63:70:75:6e:6d:dc:24:f3:f8:53:53:84:00:3c:ef:b7:8d:e5:
         af:3f:11:ae:cf:f4:68:38:86:6c:63:4e:53:97:7f:f6:aa:5b:
         2a:81:cc:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----