Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/990939-5f2f-4e60-bcd7-4ce216dbc3e7/1/BDydB5seJ57OkoEDoG59pX6G64U.roa
File:                     BDydB5seJ57OkoEDoG59pX6G64U.roa (raw, json)
Hash identifier:          IKkVOvgf7plEpHjM+sBDON6IwJ0tqNqJMH+ak9h+gLI=
Subject key identifier:   04:3C:9D:07:9B:1E:27:9E:CE:92:81:03:A0:6E:7D:A5:7E:86:EB:85
Certificate issuer:       /CN=9b2f900c943f5856add0a0ec69d9e86f005da6f3
Certificate serial:       C76E
Authority key identifier: 9B:2F:90:0C:94:3F:58:56:AD:D0:A0:EC:69:D9:E8:6F:00:5D:A6:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/my-QDJQ_WFat0KDsadnobwBdpvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/990939-5f2f-4e60-bcd7-4ce216dbc3e7/1/BDydB5seJ57OkoEDoG59pX6G64U.roa
Signing time:             Thu 19 May 2022 13:04:03 +0000
ROA not before:           Thu 19 May 2022 13:04:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60079
IP address blocks:        78.158.87.0/24 maxlen: 24
                          2a05:e201::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51054 (0xc76e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2f900c943f5856add0a0ec69d9e86f005da6f3
        Validity
            Not Before: May 19 13:04:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=043c9d079b1e279ece928103a06e7da57e86eb85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:18:1e:b1:80:f8:78:df:40:fb:12:26:6b:ae:
                    dd:a0:2c:aa:46:d9:97:e3:92:98:19:59:48:93:70:
                    f1:17:91:26:fd:f7:a4:c6:85:40:17:9e:e5:46:d6:
                    b5:d1:b4:7f:2f:92:62:10:29:21:8c:8e:3e:52:38:
                    9a:49:8d:78:22:4a:1f:3d:2e:3e:32:be:56:2f:8d:
                    c3:70:a0:b6:e6:45:d4:cf:9d:6b:f1:0a:80:de:e8:
                    e4:e4:99:be:20:0b:d8:56:df:29:58:ae:8d:3b:ef:
                    ea:a7:e3:14:a8:e4:ea:0a:32:4e:0e:20:7c:e3:d2:
                    1d:f0:28:99:34:ff:2f:4a:c0:2a:e0:54:87:de:a2:
                    75:e9:73:71:03:06:de:b9:5a:ea:6a:54:b1:58:03:
                    68:d1:c7:6b:75:87:3c:ee:00:e3:8a:fe:a6:b6:bc:
                    72:31:54:37:15:9e:2b:d3:99:33:ba:44:d8:b6:5f:
                    f2:38:7d:a3:08:01:12:ec:7d:9f:65:fa:7b:28:39:
                    19:df:76:78:61:25:22:f2:cb:90:91:9d:af:a1:cf:
                    ca:b9:dd:35:c3:a4:c7:be:83:65:39:ea:c8:ae:93:
                    0d:b2:59:fc:97:28:41:c5:f8:cc:f7:12:77:8d:ea:
                    67:19:d0:6c:5a:90:29:11:65:89:05:bb:0a:de:42:
                    84:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3C:9D:07:9B:1E:27:9E:CE:92:81:03:A0:6E:7D:A5:7E:86:EB:85
            X509v3 Authority Key Identifier:
                keyid:9B:2F:90:0C:94:3F:58:56:AD:D0:A0:EC:69:D9:E8:6F:00:5D:A6:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my-QDJQ_WFat0KDsadnobwBdpvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/990939-5f2f-4e60-bcd7-4ce216dbc3e7/1/BDydB5seJ57OkoEDoG59pX6G64U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/990939-5f2f-4e60-bcd7-4ce216dbc3e7/1/my-QDJQ_WFat0KDsadnobwBdpvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.158.87.0/24
                IPv6:
                  2a05:e201::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:4f:df:ac:4d:f0:06:9c:f5:b0:d1:df:80:15:64:97:1d:3b:
         ae:ee:df:7e:fe:16:83:d9:69:79:4c:7c:6c:8a:00:ce:33:7a:
         41:30:d9:dc:5f:c9:f0:64:80:eb:e3:29:6e:7a:87:61:48:e6:
         41:7f:85:70:a9:b1:36:fb:8b:9d:a5:d4:5a:5f:b7:1c:9c:e0:
         9b:20:ae:84:e1:c7:56:a0:d2:00:be:2a:9c:87:0f:2f:05:f3:
         2f:6d:c3:6f:3f:d2:9d:48:c9:00:70:1b:18:ed:a0:cc:4c:20:
         2a:97:94:cf:7c:14:60:eb:65:4e:8e:ba:f6:4c:0d:ed:4b:0f:
         b5:09:7e:bc:33:54:bc:1c:f8:82:e1:28:34:e6:b2:af:19:38:
         e5:37:17:1e:d4:94:ab:9c:5a:fa:94:85:21:a0:9a:5d:47:2c:
         e0:86:17:a3:37:68:ad:34:f2:3a:09:ff:40:44:02:f7:51:96:
         d3:18:7a:5f:19:a5:4b:6d:68:b7:dc:78:e2:1d:dc:3c:37:ff:
         5d:b9:e1:b2:a6:78:09:0c:1b:bc:71:f5:56:fe:8b:f0:7f:3f:
         e6:48:fe:09:f3:00:0d:13:be:a5:52:0e:84:18:95:12:b3:f8:
         00:14:c5:15:f4:95:6b:9b:df:6e:8b:bc:6f:1a:95:16:53:72:
         e1:cb:e6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----