Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f32776-07f9-4a63-8320-28b7ec96f88b/1/wgWrzWft6x6UNlPqU5N3_t9FvDQ.roa
File:                     wgWrzWft6x6UNlPqU5N3_t9FvDQ.roa (raw, json)
Hash identifier:          clmy3LTa3aOyrjeTASHuoB48OOkPP+XjfjH1TSAgvv0=
Subject key identifier:   C2:05:AB:CD:67:ED:EB:1E:94:36:53:EA:53:93:77:FE:DF:45:BC:34
Certificate issuer:       /CN=d503408b327d80e6b1b6c9717ed6769e9b7750e2
Certificate serial:       0187B24ECDF38EFE6ED9D4BE4E532DA49C81
Authority key identifier: D5:03:40:8B:32:7D:80:E6:B1:B6:C9:71:7E:D6:76:9E:9B:77:50:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1QNAizJ9gOaxtslxftZ2npt3UOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/f32776-07f9-4a63-8320-28b7ec96f88b/1/wgWrzWft6x6UNlPqU5N3_t9FvDQ.roa
Signing time:             Mon 24 Apr 2023 08:08:41 +0000
ROA not before:           Mon 24 Apr 2023 08:08:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61108
IP address blocks:        178.238.0.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b2:4e:cd:f3:8e:fe:6e:d9:d4:be:4e:53:2d:a4:9c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d503408b327d80e6b1b6c9717ed6769e9b7750e2
        Validity
            Not Before: Apr 24 08:08:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c205abcd67edeb1e943653ea539377fedf45bc34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:80:bd:4b:95:ee:83:3c:e1:ba:de:1a:c9:ee:
                    f7:18:65:b1:1e:b2:e0:df:7a:85:d2:87:dc:f1:2a:
                    79:f5:79:fe:1f:64:a7:9a:64:b0:2e:3b:ed:8e:f9:
                    a7:f9:d1:60:43:c0:a1:e0:81:9e:c5:98:58:8f:76:
                    fb:62:65:e4:9f:bf:fa:67:21:b8:96:02:15:2f:56:
                    1c:87:09:35:b5:f8:f0:f2:6e:4a:fe:ea:09:89:a6:
                    1d:07:ed:32:ef:85:02:c6:93:a4:76:db:85:70:b9:
                    7e:b4:e1:e1:96:34:24:07:1f:68:82:b8:99:bf:84:
                    99:d7:09:82:1b:40:2c:4b:db:5e:8f:0b:f9:b0:5f:
                    f0:53:84:c8:53:ba:32:22:d7:8a:8e:1e:e8:4b:bb:
                    85:85:7f:78:28:aa:16:d7:ea:17:56:ce:cf:17:a8:
                    cd:d0:49:82:c9:6b:3d:67:9a:04:96:93:16:e6:be:
                    1f:fe:a9:74:43:ec:91:ed:25:16:e7:ec:63:25:98:
                    ca:50:92:0e:15:88:a8:08:fc:cd:e4:7e:69:4b:2a:
                    f7:1f:f9:8b:d7:b4:8f:ab:59:f5:02:fa:27:92:04:
                    4a:13:a2:8e:c7:89:0b:7b:20:63:37:40:e7:1b:7f:
                    a7:d3:e6:6b:05:16:31:da:2f:d9:59:dd:ce:dd:ea:
                    5e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:05:AB:CD:67:ED:EB:1E:94:36:53:EA:53:93:77:FE:DF:45:BC:34
            X509v3 Authority Key Identifier:
                keyid:D5:03:40:8B:32:7D:80:E6:B1:B6:C9:71:7E:D6:76:9E:9B:77:50:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QNAizJ9gOaxtslxftZ2npt3UOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f32776-07f9-4a63-8320-28b7ec96f88b/1/wgWrzWft6x6UNlPqU5N3_t9FvDQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f32776-07f9-4a63-8320-28b7ec96f88b/1/1QNAizJ9gOaxtslxftZ2npt3UOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.238.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:ed:85:a4:04:f3:f9:3c:d6:f6:a4:d9:84:9d:91:d6:98:bd:
         91:df:0c:af:9e:ec:6f:df:01:4a:92:93:42:d3:b8:9a:98:13:
         83:65:79:f4:1d:a6:a5:df:ea:cf:4e:1f:ad:7e:6a:21:c3:c8:
         96:de:ca:2b:a3:cd:2f:3a:d6:99:19:8b:b8:b2:b8:7a:f5:b3:
         c6:81:b8:be:ab:1e:5c:6f:3d:4d:d7:3d:6b:b3:5c:59:b3:98:
         07:e9:20:aa:d0:29:65:43:59:6b:07:16:3b:10:ab:b3:5b:a5:
         82:a1:10:82:8c:36:04:6f:e0:01:65:11:f4:e0:38:79:85:1c:
         19:fe:5b:01:05:35:37:74:49:ec:ab:44:0f:d9:63:aa:f4:0e:
         7f:36:bd:ee:04:0e:bd:66:52:18:31:07:40:3e:56:fd:50:87:
         77:23:d5:ca:80:3e:4b:72:71:7f:60:bc:a8:10:63:fe:ab:47:
         d3:a5:c0:af:0e:93:04:8f:82:3d:5e:12:cd:27:b4:58:9e:95:
         b2:4c:47:3f:ae:25:00:23:3c:4b:d6:a8:f9:61:cf:98:23:d3:
         cf:b2:0e:26:58:08:0b:e4:ca:06:5a:6c:53:06:14:ba:32:6d:
         74:0f:82:c7:02:ed:58:ba:33:a9:12:f0:df:71:cf:c8:6e:61:
         e0:ae:b3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----