Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/zxbhrXMoMOjAeT3OzVb8PgME20o.roa
File:                     zxbhrXMoMOjAeT3OzVb8PgME20o.roa (raw, json)
Hash identifier:          uwGKp4Bz4wY+pOjq+ezC0flkexcYp0Y7YU2+Cd+rb6c=
Subject key identifier:   CF:16:E1:AD:73:28:30:E8:C0:79:3D:CE:CD:56:FC:3E:03:04:DB:4A
Certificate issuer:       /CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Certificate serial:       09EB574C
Authority key identifier: 77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/zxbhrXMoMOjAeT3OzVb8PgME20o.roa
Signing time:             Sat 01 Jan 2022 04:56:16 +0000
ROA not before:           Sat 01 Jan 2022 04:56:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208590
IP address blocks:        79.110.170.0/24 maxlen: 24
                          2a0d:1a43::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166418252 (0x9eb574c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
        Validity
            Not Before: Jan  1 04:56:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cf16e1ad732830e8c0793dcecd56fc3e0304db4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c2:b6:20:86:d1:a6:60:0a:c3:08:d4:54:70:
                    cb:a1:bf:c0:73:3c:69:2e:27:0a:13:9b:c7:d7:3f:
                    77:a9:e1:53:48:98:03:7d:4c:34:7c:4e:92:4a:72:
                    f7:ad:2e:0c:f0:20:3b:4e:74:b8:b4:26:7e:6f:27:
                    dd:93:d5:36:cb:26:d8:12:e3:68:34:03:5d:60:36:
                    c7:8b:0b:e9:39:51:60:82:af:f1:f2:03:d6:d5:1c:
                    f7:d5:18:61:48:df:3d:b2:e5:65:7c:09:ab:a8:f0:
                    7f:1e:15:8f:82:be:46:c0:df:31:6d:b2:48:9d:66:
                    30:b0:0a:3e:03:70:aa:b8:d5:7a:4c:6d:76:6e:90:
                    d1:90:5f:47:4b:32:98:ba:1c:77:5f:f3:e0:48:8a:
                    2e:9a:47:3f:ce:07:b7:f5:e5:84:93:9d:19:0b:35:
                    30:13:b9:16:64:76:d3:68:3d:e5:70:95:24:fc:6b:
                    2e:01:32:e7:62:77:bf:64:b6:4c:89:6d:5f:d8:70:
                    33:5a:2c:e0:f1:d7:d0:b3:2e:ac:26:e2:89:5d:55:
                    18:48:b3:ae:b7:64:5b:be:15:6a:a9:59:f2:00:26:
                    46:54:80:91:c1:ca:16:2b:86:74:20:61:f6:42:32:
                    73:bb:66:36:e1:9d:c8:7c:86:81:cb:b6:94:68:b4:
                    0d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:16:E1:AD:73:28:30:E8:C0:79:3D:CE:CD:56:FC:3E:03:04:DB:4A
            X509v3 Authority Key Identifier:
                keyid:77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/zxbhrXMoMOjAeT3OzVb8PgME20o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/d8jYu_BXl6daScXXD1lx7N7G3ZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.170.0/24
                IPv6:
                  2a0d:1a43::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:40:09:d5:4a:77:97:95:b1:22:39:9b:95:ac:04:dd:0a:e4:
         a6:e2:66:d5:07:ca:11:27:3d:25:3f:0e:c7:e0:0b:82:c8:41:
         09:f0:c2:60:a5:f3:d1:d5:4e:af:12:47:0c:1a:26:05:c1:08:
         9b:88:c7:45:d7:33:62:d5:09:39:28:91:1a:11:9a:16:19:93:
         ca:58:27:42:bd:2f:45:b0:41:d9:f8:09:90:d3:e9:f7:5e:08:
         02:94:05:86:4f:1c:e6:a1:e1:be:fd:05:54:b4:e0:f3:06:5e:
         11:dd:bf:5a:ee:61:75:00:96:82:3f:55:d0:6a:7b:f7:21:1f:
         8a:9a:1b:49:b8:fd:0c:b9:13:47:50:6f:59:4d:64:a5:0f:47:
         64:af:86:f1:b0:33:73:b7:2d:a0:52:b8:6f:cf:fb:a6:57:57:
         e7:fe:b1:28:05:a3:9e:83:98:96:83:1a:f0:4f:74:3e:2c:f9:
         d3:ab:49:6a:4c:ca:e4:8f:03:9c:f3:77:d0:82:1d:12:fe:2e:
         21:fd:5c:cf:e2:6c:93:6c:89:c9:13:76:ed:a9:8e:8e:8f:70:
         c2:9b:d9:91:f5:0b:0a:4a:06:63:5a:8f:13:93:86:44:f5:ee:
         6d:a2:7b:5d:c5:46:e0:c2:15:70:19:b6:d2:b2:9c:7a:08:bd:
         0a:48:a2:b2
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIECetXTDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
N2M4ZDhiYmYwNTc5N2E3NWE0OWM1ZDcwZjU5NzFlY2RlYzZkZDkzMB4XDTIyMDEw
MTA0NTYxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2YxNmUxYWQ3MzI4
MzBlOGMwNzkzZGNlY2Q1NmZjM2UwMzA0ZGI0YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ/CtiCG0aZgCsMI1FRwy6G/wHM8aS4nChObx9c/d6nhU0iY
A31MNHxOkkpy960uDPAgO050uLQmfm8n3ZPVNssm2BLjaDQDXWA2x4sL6TlRYIKv
8fID1tUc99UYYUjfPbLlZXwJq6jwfx4Vj4K+RsDfMW2ySJ1mMLAKPgNwqrjVekxt
dm6Q0ZBfR0symLocd1/z4EiKLppHP84Ht/XlhJOdGQs1MBO5FmR202g95XCVJPxr
LgEy52J3v2S2TIltX9hwM1os4PHX0LMurCbiiV1VGEizrrdkW74VaqlZ8gAmRlSA
kcHKFiuGdCBh9kIyc7tmNuGdyHyGgcu2lGi0DdsCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBTPFuGtcygw6MB5Pc7NVvw+AwTbSjAfBgNVHSMEGDAWgBR3yNi78FeXp1pJ
xdcPWXHs3sbdkzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2Q4all1X0JYbDZkYVNjWFhEMWx4N043RzNaTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTQvNDVhYmRlLTViNDQtNDcxYS05M2Q5LTUzNDVmN2U3NDA4My8x
L3p4YmhyWE1vTU9qQWVUM096VmI4UGdNRTIwby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQv
NDVhYmRlLTViNDQtNDcxYS05M2Q5LTUzNDVmN2U3NDA4My8xL2Q4all1X0JYbDZk
YVNjWFhEMWx4N043RzNaTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAE9uqjANBAIAAjAHAwUAKg0aQzAN
BgkqhkiG9w0BAQsFAAOCAQEAOkAJ1Up3l5WxIjmblawE3QrkpuJm1QfKESc9JT8O
x+ALgshBCfDCYKXz0dVOrxJHDBomBcEIm4jHRdczYtUJOSiRGhGaFhmTylgnQr0v
RbBB2fgJkNPp914IApQFhk8c5qHhvv0FVLTg8wZeEd2/Wu5hdQCWgj9V0Gp79yEf
ipobSbj9DLkTR1BvWU1kpQ9HZK+G8bAzc7ctoFK4b8/7pldX5/6xKAWjnoOYloMa
8E90Piz506tJakzK5I8DnPN30IIdEv4uIf1cz+Jsk2yJyRN27amOjo9wwpvZkfUL
CkoGY1qPE5OGRPXubaJ7XcVG4MIVcBm20rKcegi9Ckiisg==
-----END CERTIFICATE-----