Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/13b666-3e39-4cec-987d-fa0296c27463/1/WTuURYld3SHyebJZYxR8lMOfSDI.roa
File:                     WTuURYld3SHyebJZYxR8lMOfSDI.roa (raw, json)
Hash identifier:          pxJUiezjAoVof0DGHWbxFu307U+Y1bSe/APKsYVR7Ro=
Subject key identifier:   59:3B:94:45:89:5D:DD:21:F2:79:B2:59:63:14:7C:94:C3:9F:48:32
Certificate issuer:       /CN=5ff283110661a59dbf225d03380acc0838474e56
Certificate serial:       374AC76B
Authority key identifier: 5F:F2:83:11:06:61:A5:9D:BF:22:5D:03:38:0A:CC:08:38:47:4E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X_KDEQZhpZ2_Il0DOArMCDhHTlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/13b666-3e39-4cec-987d-fa0296c27463/1/WTuURYld3SHyebJZYxR8lMOfSDI.roa
Signing time:             Sat 01 Jan 2022 05:52:30 +0000
ROA not before:           Sat 01 Jan 2022 05:52:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42252
IP address blocks:        77.72.56.0/21 maxlen: 21
                          2a00:1778::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 927647595 (0x374ac76b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ff283110661a59dbf225d03380acc0838474e56
        Validity
            Not Before: Jan  1 05:52:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=593b9445895ddd21f279b25963147c94c39f4832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ab:d9:e2:dc:d8:a2:e7:f5:71:19:8f:b0:38:
                    51:6b:55:ff:d4:17:f1:0b:ad:5d:39:dd:4b:09:bf:
                    3c:f3:f2:5a:63:b9:f2:31:51:68:6e:3a:0e:cf:e5:
                    d8:0d:85:47:98:d9:c2:fa:93:45:3a:6d:fa:d2:3f:
                    a0:54:c0:db:21:e9:51:af:61:f1:00:f0:66:c9:1f:
                    d3:87:96:ee:34:77:1b:68:43:f1:01:46:51:e8:c5:
                    f2:92:92:21:ff:13:56:31:4e:51:89:a7:de:03:4e:
                    a4:8d:48:35:aa:06:43:28:2a:1e:74:35:a8:79:d0:
                    44:ae:44:1d:51:85:f4:2d:ef:1e:96:07:29:a5:99:
                    c2:0a:14:ab:2c:bd:97:3f:79:1d:16:a0:63:c0:77:
                    d0:7f:e3:03:b5:bf:f8:4c:84:f3:a8:39:e4:5c:33:
                    ef:8f:ea:c5:fa:d9:6b:47:1c:78:d0:31:7e:59:97:
                    51:c3:0f:39:70:70:c5:49:34:ac:8c:56:84:b4:e6:
                    d4:76:8b:de:e4:05:15:1d:5d:a5:d8:0e:9f:eb:4c:
                    25:c6:a8:31:89:35:40:b3:6c:94:fc:d0:52:7a:4a:
                    22:72:8e:80:6b:50:0c:c7:6d:37:ef:d7:a8:c9:39:
                    1b:98:f8:a8:bc:5b:78:98:db:ae:c3:14:0d:8a:c2:
                    40:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:3B:94:45:89:5D:DD:21:F2:79:B2:59:63:14:7C:94:C3:9F:48:32
            X509v3 Authority Key Identifier:
                keyid:5F:F2:83:11:06:61:A5:9D:BF:22:5D:03:38:0A:CC:08:38:47:4E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_KDEQZhpZ2_Il0DOArMCDhHTlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/13b666-3e39-4cec-987d-fa0296c27463/1/WTuURYld3SHyebJZYxR8lMOfSDI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/13b666-3e39-4cec-987d-fa0296c27463/1/X_KDEQZhpZ2_Il0DOArMCDhHTlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.72.56.0/21
                IPv6:
                  2a00:1778::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:c9:45:1b:f6:7f:a6:9c:54:db:fc:f6:4c:2e:86:ed:ec:c7:
         7f:0a:e1:ba:cf:bf:91:e6:97:39:50:d4:7d:7c:ce:cd:81:ef:
         32:4c:d3:ad:f8:b9:95:84:36:61:90:7d:26:7f:27:82:e7:d8:
         6e:54:d4:92:88:25:9a:65:61:e8:c0:d8:d5:68:ed:51:f4:a9:
         23:6f:1e:8d:1d:a3:8c:3d:37:7e:b3:25:ff:e8:ba:db:37:31:
         b3:64:6e:cc:eb:83:73:5b:73:85:39:60:14:8d:c4:1c:71:11:
         71:57:ec:fe:63:93:78:cd:f5:56:a2:6e:11:ea:d9:62:87:68:
         dd:56:e5:df:4f:f6:e4:62:81:f0:bf:e5:3f:08:f3:35:fc:f0:
         30:14:b3:e7:8d:a2:ea:52:98:9c:6a:45:cd:f2:1a:a5:26:9e:
         e8:f9:37:3d:49:04:08:8a:b9:1e:32:40:39:79:b3:29:a7:d0:
         b8:0a:85:d9:8b:3c:1d:ae:e0:ab:6c:0c:0a:ad:fa:9f:d6:3e:
         f7:59:ce:b4:6e:94:26:fd:fa:f4:4b:2e:ab:26:db:20:5d:c5:
         9b:62:4f:15:53:e2:67:3b:6d:95:3f:2c:45:42:71:af:c6:63:
         d4:1a:1c:32:78:3d:4d:50:7a:51:4e:eb:86:9c:6d:d6:90:31:
         c6:3b:f1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----