Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/WYw9fYyMPq4ABu9LXl-vfV_Xqtw.roa
File:                     WYw9fYyMPq4ABu9LXl-vfV_Xqtw.roa (raw, json)
Hash identifier:          tYDfnSFLwTI6MDI/GNI1vo4/sysheLQOXlJqsiss2QY=
Subject key identifier:   59:8C:3D:7D:8C:8C:3E:AE:00:06:EF:4B:5E:5F:AF:7D:5F:D7:AA:DC
Certificate issuer:       /CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Certificate serial:       01856D4AE25CAACD374A085064330D4E5D5D
Authority key identifier: 77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/WYw9fYyMPq4ABu9LXl-vfV_Xqtw.roa
Signing time:             Sun 01 Jan 2023 12:25:01 +0000
ROA not before:           Sun 01 Jan 2023 12:25:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212068
IP address blocks:        139.28.205.0/24 maxlen: 24
                          2a0d:1a40:7a00::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:4a:e2:5c:aa:cd:37:4a:08:50:64:33:0d:4e:5d:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
        Validity
            Not Before: Jan  1 12:25:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=598c3d7d8c8c3eae0006ef4b5e5faf7d5fd7aadc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:81:39:be:46:06:fb:a0:07:16:9e:3c:52:fd:
                    9a:6d:30:25:b6:ec:14:22:d6:0c:71:d9:08:e4:2b:
                    06:4a:0c:77:12:08:2a:4e:c7:11:c1:31:69:4c:55:
                    67:4b:4f:c9:9a:3c:38:bf:12:db:da:a7:ad:c8:e8:
                    8c:f1:39:f1:7b:6e:55:37:1b:44:63:2c:90:1d:a7:
                    4c:f2:e2:59:cb:20:40:05:d7:bc:0d:e6:2e:ef:ed:
                    98:80:12:c5:02:99:45:29:cd:9c:eb:a4:6b:ec:08:
                    de:ea:07:cb:a3:39:83:08:5c:b0:51:e6:66:9a:c3:
                    b5:0c:c8:70:f1:d6:9e:48:b4:d8:0b:bc:9a:d2:99:
                    50:90:50:e3:58:35:72:ec:e6:6d:30:4a:62:f5:49:
                    6d:a8:f4:bd:1a:2b:b8:61:95:30:01:50:c9:e5:08:
                    c3:4c:33:6e:dc:13:85:73:3f:88:30:08:af:c3:2f:
                    4e:07:8b:09:b8:e4:60:70:8f:5b:28:43:c5:ca:54:
                    14:dd:6f:74:54:6a:22:e9:25:9c:b3:ae:3a:54:78:
                    d9:b7:a4:a3:77:61:6e:26:5d:0f:73:66:31:ce:9b:
                    36:98:27:60:68:fb:81:dd:3d:26:11:70:08:bc:2f:
                    ae:a7:67:96:22:e1:b5:16:31:b1:9b:ab:a6:ab:08:
                    08:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8C:3D:7D:8C:8C:3E:AE:00:06:EF:4B:5E:5F:AF:7D:5F:D7:AA:DC
            X509v3 Authority Key Identifier:
                keyid:77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/WYw9fYyMPq4ABu9LXl-vfV_Xqtw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/d8jYu_BXl6daScXXD1lx7N7G3ZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.28.205.0/24
                IPv6:
                  2a0d:1a40:7a00::/44

    Signature Algorithm: sha256WithRSAEncryption
         0d:0a:7f:6f:d8:79:d3:32:3b:6f:61:1d:93:b7:e8:f5:94:6e:
         83:03:69:d0:bc:a7:80:f1:0e:1e:f5:c9:38:46:34:ce:18:cf:
         b2:c3:ca:1c:c8:91:48:55:26:5e:73:8a:8b:a8:ea:32:18:07:
         fa:8c:57:34:91:8f:eb:0f:df:c5:e6:99:19:98:51:21:39:71:
         77:7a:14:7d:49:fc:ed:4e:9c:1b:a7:38:90:0d:b9:15:e5:0f:
         15:25:c8:15:15:7a:10:ac:48:c5:74:52:02:ad:14:ef:c7:e5:
         a8:7d:85:95:e6:b7:63:18:b5:e3:52:c1:ae:0d:4e:24:62:42:
         af:22:e7:e1:8b:f6:a4:61:65:64:ed:f5:99:1e:69:0d:79:05:
         64:d5:c1:3c:09:b8:b2:a6:c5:fe:80:31:99:b9:8e:5f:c9:70:
         ad:93:0a:9c:87:c0:73:3c:8f:4d:6e:e9:6f:e2:2e:fa:9c:c6:
         67:b7:41:b4:02:3f:de:cf:f4:f8:e8:c7:ec:95:48:9d:38:c5:
         f1:30:a7:66:9d:9d:f0:e8:c3:6f:73:14:0b:3f:6a:c7:3c:84:
         26:e1:53:34:33:7a:81:82:1c:9d:71:d2:a9:d4:85:44:6a:1a:
         1b:3c:66:69:0a:67:e6:0e:de:e2:01:d7:2b:87:86:ef:53:4d:
         22:b0:5c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----