Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f32776-07f9-4a63-8320-28b7ec96f88b/1/qswHbhlogGzPR1JIKt5N9xfceOk.roa
File:                     qswHbhlogGzPR1JIKt5N9xfceOk.roa (raw, json)
Hash identifier:          JRbqQRgCUlt54nm7joV14nHgZzpH0bapVj4FfPy86F4=
Subject key identifier:   AA:CC:07:6E:19:68:80:6C:CF:47:52:48:2A:DE:4D:F7:17:DC:78:E9
Certificate issuer:       /CN=d503408b327d80e6b1b6c9717ed6769e9b7750e2
Certificate serial:       01879DD9002DD9A56C32E7E6010F3BD6988D
Authority key identifier: D5:03:40:8B:32:7D:80:E6:B1:B6:C9:71:7E:D6:76:9E:9B:77:50:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1QNAizJ9gOaxtslxftZ2npt3UOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/f32776-07f9-4a63-8320-28b7ec96f88b/1/qswHbhlogGzPR1JIKt5N9xfceOk.roa
Signing time:             Thu 20 Apr 2023 08:47:36 +0000
ROA not before:           Thu 20 Apr 2023 08:47:36 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61108
IP address blocks:        178.238.0.0/22 maxlen: 22
                          2a10:5300::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:9d:d9:00:2d:d9:a5:6c:32:e7:e6:01:0f:3b:d6:98:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d503408b327d80e6b1b6c9717ed6769e9b7750e2
        Validity
            Not Before: Apr 20 08:47:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=aacc076e1968806ccf4752482ade4df717dc78e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:74:2a:93:64:0b:10:82:6c:fd:f5:6c:81:a9:
                    7e:bc:5b:d8:3c:45:40:06:5a:be:fb:fa:67:40:35:
                    1c:13:08:b8:a1:c8:31:a0:01:ec:56:55:67:01:02:
                    35:d4:06:f9:6b:b6:f1:65:74:0e:db:51:63:20:0a:
                    75:ba:6a:d1:f2:88:e4:65:c3:a0:c3:4c:8d:b2:65:
                    c9:d6:97:b8:42:1a:b4:96:0f:4a:bf:c9:c7:91:80:
                    c7:e5:aa:36:a6:ba:d5:2a:12:99:45:fa:d6:4f:60:
                    59:e5:01:3f:5c:42:94:13:3f:fb:d7:ee:08:d7:78:
                    77:d4:c0:6b:19:1b:8b:9e:f7:6f:72:cf:bb:cb:7c:
                    45:f0:7a:39:1a:32:63:24:2a:8d:49:e5:19:1c:ba:
                    f1:82:e8:64:10:60:62:25:62:2c:cb:9a:2c:0e:30:
                    9c:a7:65:a5:fb:a5:82:84:66:09:56:b1:6a:fd:9c:
                    1c:1a:70:cf:e9:15:86:7e:4c:1e:12:13:8e:98:0f:
                    be:6f:bb:df:56:8d:ce:d6:44:28:ae:83:3d:55:a6:
                    81:e7:ff:79:6b:a8:18:29:39:41:52:2d:c3:b3:1e:
                    9c:60:0e:7c:4e:c5:87:bf:03:7b:6d:81:31:ca:3e:
                    25:3d:a0:36:d0:4d:1e:a5:18:26:d0:e2:30:ec:f1:
                    58:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CC:07:6E:19:68:80:6C:CF:47:52:48:2A:DE:4D:F7:17:DC:78:E9
            X509v3 Authority Key Identifier:
                keyid:D5:03:40:8B:32:7D:80:E6:B1:B6:C9:71:7E:D6:76:9E:9B:77:50:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QNAizJ9gOaxtslxftZ2npt3UOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f32776-07f9-4a63-8320-28b7ec96f88b/1/qswHbhlogGzPR1JIKt5N9xfceOk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f32776-07f9-4a63-8320-28b7ec96f88b/1/1QNAizJ9gOaxtslxftZ2npt3UOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.238.0.0/22
                IPv6:
                  2a10:5300::/29

    Signature Algorithm: sha256WithRSAEncryption
         60:cc:ca:b2:61:f2:69:87:37:4f:96:90:59:cd:2e:d7:75:b0:
         9c:b9:0f:9b:42:2d:2e:33:ca:60:c3:6b:00:18:b8:5a:1a:cc:
         91:68:0e:cb:b8:4c:75:b7:08:26:68:81:fd:90:21:a5:44:d0:
         9c:b8:66:9f:e9:4b:0f:40:34:4d:3b:57:4d:7f:87:76:26:5a:
         bf:dd:55:3f:7b:a3:be:01:a6:dc:64:fa:b4:0c:94:08:da:b5:
         75:d1:78:19:e0:63:c1:54:bc:8a:50:f8:bb:5f:3e:f7:03:2a:
         14:8b:fd:53:7e:14:19:4d:22:8e:a6:f5:a2:31:84:42:1a:b9:
         1b:78:e6:cc:a9:85:06:2a:6f:96:46:43:1c:da:ce:6d:a0:75:
         94:0d:e0:b8:88:e2:4d:1e:6b:d6:f2:40:79:03:e9:0d:a2:53:
         14:9b:a1:78:ca:a7:9b:4a:e8:4a:c7:28:da:9e:e8:cf:e2:4c:
         d5:3a:63:e6:a7:86:33:98:50:d9:68:17:6b:b7:3d:c7:90:e5:
         0f:68:ce:78:52:7a:61:91:be:ba:62:98:1f:4b:95:a3:e4:07:
         56:c8:62:6e:04:4d:85:7f:d2:41:2f:42:8d:09:0b:c9:68:17:
         8d:39:7e:34:46:7a:d1:3d:ce:13:71:0c:0a:63:67:c5:d3:e4:
         b9:86:94:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----