Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/d80JfczMJNukcv8JEvMWETGWWUk.roa
File:                     d80JfczMJNukcv8JEvMWETGWWUk.roa (raw, json)
Hash identifier:          B3v3CUb5YdXGkIa2T55zRHVwm3CBH7dJ6sp/MtR7K7E=
Subject key identifier:   77:CD:09:7D:CC:CC:24:DB:A4:72:FF:09:12:F3:16:11:31:96:59:49
Certificate issuer:       /CN=d8ae1d7cc68b78c494c530eaa4a0f7559e25a4ef
Certificate serial:       0753B56B
Authority key identifier: D8:AE:1D:7C:C6:8B:78:C4:94:C5:30:EA:A4:A0:F7:55:9E:25:A4:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2K4dfMaLeMSUxTDqpKD3VZ4lpO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/d80JfczMJNukcv8JEvMWETGWWUk.roa
Signing time:             Sat 23 Apr 2022 08:22:07 +0000
ROA not before:           Sat 23 Apr 2022 08:22:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212426
IP address blocks:        185.75.242.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122926443 (0x753b56b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8ae1d7cc68b78c494c530eaa4a0f7559e25a4ef
        Validity
            Not Before: Apr 23 08:22:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=77cd097dcccc24dba472ff0912f3161131965949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:35:f9:f3:1f:6e:aa:1c:6f:19:33:81:e3:f9:
                    6b:c1:1a:c7:85:9d:1c:21:fb:1e:b4:5e:75:68:42:
                    10:6a:71:03:17:e7:f4:d8:69:eb:c6:b2:3e:28:02:
                    05:cb:21:68:84:eb:07:cd:e1:4f:7d:f2:c1:da:0c:
                    2a:61:6d:8d:b0:97:57:a6:fb:09:6c:c1:a6:3f:5c:
                    29:6d:e0:ab:62:8e:ae:f8:1f:13:2e:f7:c3:da:6e:
                    68:2d:9f:ee:a4:91:7b:e1:cb:c8:44:5b:6b:9c:19:
                    55:a3:fa:ea:46:66:6a:9f:92:d3:a4:c1:e4:8e:3b:
                    cc:2b:d5:7a:1d:df:29:f4:94:44:a2:92:15:33:c2:
                    6b:59:26:58:fa:e4:09:5a:93:f0:ba:d5:db:6d:33:
                    f5:4d:c6:1d:e5:04:b2:c9:75:4a:b0:3b:12:e9:62:
                    6c:7d:9c:09:e9:79:f5:1b:4a:51:aa:5d:3f:21:8d:
                    3f:11:55:4c:d5:8a:d6:2d:05:dd:ac:44:93:35:4a:
                    37:05:ed:ca:bb:e2:ba:08:52:7e:7e:6d:f2:ca:ce:
                    c3:ff:11:39:49:fa:4f:6b:b4:10:db:c4:a0:85:70:
                    ef:8f:69:94:53:6e:88:dc:1d:04:61:60:a5:a7:8f:
                    ce:a6:e1:89:ef:9d:e5:84:d0:96:45:0f:21:a8:b6:
                    34:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:CD:09:7D:CC:CC:24:DB:A4:72:FF:09:12:F3:16:11:31:96:59:49
            X509v3 Authority Key Identifier:
                keyid:D8:AE:1D:7C:C6:8B:78:C4:94:C5:30:EA:A4:A0:F7:55:9E:25:A4:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2K4dfMaLeMSUxTDqpKD3VZ4lpO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/d80JfczMJNukcv8JEvMWETGWWUk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/2K4dfMaLeMSUxTDqpKD3VZ4lpO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.75.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:aa:3c:36:82:39:d4:c4:e7:06:8f:9d:bd:f1:1e:43:f6:ce:
         3b:0b:c0:65:d7:73:f1:f1:5f:03:d2:b7:80:e0:19:51:7d:5c:
         e2:10:bd:c7:69:f8:91:8e:f9:a1:8a:59:6a:c5:49:42:d5:26:
         4e:ca:ba:63:86:6d:2b:cb:39:28:05:5a:57:b2:c7:ad:f1:2b:
         04:3e:81:57:9e:ee:f4:ca:bd:f2:61:6b:f3:ce:23:17:fd:9e:
         63:fe:30:86:24:7d:f3:2a:a3:28:ba:7b:62:b8:89:2a:b1:6b:
         79:c8:9c:2f:75:25:ee:0a:db:23:a6:47:3d:ff:aa:64:fd:ef:
         fc:44:da:bb:2d:0a:8d:ab:01:51:f6:19:08:d8:f4:c9:5f:92:
         45:9d:08:7a:2b:cf:59:e1:45:4d:06:eb:1b:8d:6e:76:4c:b0:
         1e:ac:2c:88:1e:eb:89:9a:f7:14:95:89:04:26:a3:1b:1a:fe:
         1d:54:ee:1b:eb:7a:87:f7:42:b5:e0:3a:d2:88:94:65:c7:8f:
         7a:d7:98:b7:27:b3:f5:0f:f1:3f:0c:23:10:4d:ba:a2:0e:4e:
         e3:b1:6f:ed:6f:3b:cb:8e:a8:41:eb:af:14:85:f1:fb:89:11:
         b8:4e:14:de:8a:e9:a8:0b:80:38:33:c5:b3:90:b8:48:e4:14:
         79:02:1b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----