Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/7mfe8kSOa4K_LYQ8OJKdWmkAP0c.roa
File:                     7mfe8kSOa4K_LYQ8OJKdWmkAP0c.roa (raw, json)
Hash identifier:          kELFnOBZ4iwmPNtkcBfh8QIdlxCrxnxicW3pXzV8lqo=
Subject key identifier:   EE:67:DE:F2:44:8E:6B:82:BF:2D:84:3C:38:92:9D:5A:69:00:3F:47
Certificate issuer:       /CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Certificate serial:       01856D4AE01E240359AD9976752CFC853D81
Authority key identifier: 77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/7mfe8kSOa4K_LYQ8OJKdWmkAP0c.roa
Signing time:             Sun 01 Jan 2023 12:25:01 +0000
ROA not before:           Sun 01 Jan 2023 12:25:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210089
IP address blocks:        79.110.169.0/24 maxlen: 24
                          2a0d:1a45::/32 maxlen: 48
                          2a06:1e83:caff::/48 maxlen: 48
                          2a06:1e86:babe::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:4a:e0:1e:24:03:59:ad:99:76:75:2c:fc:85:3d:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
        Validity
            Not Before: Jan  1 12:25:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ee67def2448e6b82bf2d843c38929d5a69003f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:53:f0:6b:98:d4:59:61:c3:5e:3f:21:15:f4:
                    a2:0b:8f:1c:bb:8d:19:8c:ab:97:30:a0:b5:54:23:
                    1c:1c:dc:7f:ff:af:b5:0c:ec:ac:e5:4e:87:9c:fa:
                    32:55:e3:0c:c0:d7:4f:68:28:a6:1a:8f:87:7a:be:
                    a7:f6:e6:c6:ca:d9:e4:4e:38:b1:f5:be:1a:23:4f:
                    1a:26:f7:57:fc:67:37:9a:8c:31:9b:45:6b:94:98:
                    7b:60:43:93:20:14:f2:e2:31:3c:76:80:2a:df:12:
                    8e:3b:42:b6:a4:7b:13:66:40:b4:e4:ad:fa:41:84:
                    e7:ca:b3:03:b2:0c:b1:b8:40:72:be:a0:2b:a8:7d:
                    c5:bb:68:eb:64:75:17:eb:5f:98:3b:79:f0:95:e5:
                    2f:de:2c:4c:6b:c4:d5:c6:9d:25:a2:60:2c:af:8a:
                    5a:1f:61:90:ad:ee:df:fb:7c:9a:79:4e:32:8f:11:
                    53:4d:a6:d6:ac:c6:05:f9:28:05:08:b1:bb:17:a5:
                    f7:36:ca:5d:63:27:50:4b:3b:ff:25:bd:13:1a:04:
                    f5:ba:c1:c8:af:94:35:cd:67:d1:d3:28:c5:23:3c:
                    bf:46:6a:5c:0d:fe:27:da:e9:40:1e:8b:c4:29:b0:
                    32:2f:14:a7:8a:1b:05:dc:e3:1e:1b:f4:f4:af:72:
                    4f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:67:DE:F2:44:8E:6B:82:BF:2D:84:3C:38:92:9D:5A:69:00:3F:47
            X509v3 Authority Key Identifier:
                keyid:77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/7mfe8kSOa4K_LYQ8OJKdWmkAP0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/d8jYu_BXl6daScXXD1lx7N7G3ZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.169.0/24
                IPv6:
                  2a06:1e83:caff::/48
                  2a06:1e86:babe::/48
                  2a0d:1a45::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:b6:49:8a:d5:8f:9a:c3:8c:c6:e0:20:b6:33:d6:42:b9:00:
         e1:5f:f8:3a:78:a5:6e:55:09:11:d5:90:4c:8b:6a:b6:aa:a7:
         65:5e:7c:0e:2d:cc:b2:4a:96:6d:cf:3b:c0:1a:0c:41:54:46:
         b5:6e:90:a2:02:15:d9:b5:43:6a:4a:4d:82:f6:62:33:3c:df:
         6a:53:3a:51:de:06:b0:5e:49:b3:ce:c7:48:9f:b2:42:00:19:
         c2:21:10:56:91:b7:d2:58:77:ec:86:da:83:4b:76:79:7a:c8:
         17:9c:1e:38:5b:66:f8:3d:22:f2:6f:e0:bd:8f:5e:40:9b:ee:
         67:ae:11:55:f4:5d:54:2f:31:65:48:97:ef:8d:37:e7:42:97:
         d9:79:83:8d:a7:fd:09:fe:53:01:d1:3d:b0:3a:94:47:e8:50:
         a2:bb:b7:5a:d6:4c:99:58:3f:35:0a:a4:02:a6:f8:35:26:6c:
         1b:79:61:9e:e6:23:84:42:1e:ed:69:7a:6b:ed:fa:fe:dd:0e:
         27:fa:28:90:01:af:9a:6c:4b:ac:8f:ff:1f:89:d5:d9:0d:b2:
         4d:33:d9:67:b7:7a:74:48:ab:ac:87:68:82:40:b3:5d:47:6a:
         5a:e8:09:57:87:04:a6:71:76:6f:2d:ca:a7:6b:0e:3e:e5:4b:
         ca:c3:49:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----