Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/991ad9-d953-43a8-8584-723b33cb0ef9/1/wkoXSuCS-gyUYQAI_3JePEAKvd4.roa
File:                     wkoXSuCS-gyUYQAI_3JePEAKvd4.roa (raw, json)
Hash identifier:          ZXQIBbQ0WT5xoGm2ZSZnZiKG4zq8Icmc5T3s5hOhKNE=
Subject key identifier:   C2:4A:17:4A:E0:92:FA:0C:94:61:00:08:FF:72:5E:3C:40:0A:BD:DE
Certificate issuer:       /CN=d7cc56a1f20d5a603296619635786fde26458d12
Certificate serial:       01878AA59A6B47CB5A0C60966A4C5955DBCD
Authority key identifier: D7:CC:56:A1:F2:0D:5A:60:32:96:61:96:35:78:6F:DE:26:45:8D:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18xWofINWmAylmGWNXhv3iZFjRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/991ad9-d953-43a8-8584-723b33cb0ef9/1/wkoXSuCS-gyUYQAI_3JePEAKvd4.roa
Signing time:             Sun 16 Apr 2023 15:18:41 +0000
ROA not before:           Sun 16 Apr 2023 15:18:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29037
IP address blocks:        217.17.16.0/20 maxlen: 24
                          77.236.112.0/21 maxlen: 24
                          79.171.176.0/21 maxlen: 24
                          192.54.68.0/22 maxlen: 24
                          192.54.67.0/24 maxlen: 24
                          178.248.216.0/21 maxlen: 24
                          77.236.104.0/21 maxlen: 24
                          185.5.168.0/22 maxlen: 24
                          2a01:5580::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:8a:a5:9a:6b:47:cb:5a:0c:60:96:6a:4c:59:55:db:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7cc56a1f20d5a603296619635786fde26458d12
        Validity
            Not Before: Apr 16 15:18:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c24a174ae092fa0c94610008ff725e3c400abdde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:96:88:bc:a9:22:d8:47:c4:c0:2f:72:77:d7:
                    44:a7:b9:db:30:c3:c2:c9:9d:c9:31:34:55:da:0e:
                    a9:57:ab:ea:96:c2:37:b6:bf:65:fc:86:95:54:10:
                    12:de:74:4b:41:4d:50:e2:7c:c2:e2:76:5e:0c:af:
                    92:f0:ef:b3:2f:a6:47:a4:51:99:42:a0:96:11:12:
                    e5:eb:a7:c7:b7:96:94:78:d7:81:6a:c2:9c:9b:6f:
                    a2:ef:9a:1e:75:bb:93:94:cc:3b:78:bd:56:49:cc:
                    7b:58:1c:5d:de:22:bf:67:7d:36:be:f1:0a:72:5e:
                    2f:5c:94:31:c1:a2:90:54:ca:fb:6d:c8:c3:4b:59:
                    fd:dc:49:4b:fd:3c:05:9a:f0:29:75:46:e6:a6:f5:
                    b1:d2:e3:36:11:46:9a:1e:f9:3c:80:40:30:9b:42:
                    05:4c:ff:f4:28:4b:5d:0a:39:da:43:99:cf:74:0a:
                    ec:15:0e:a1:8f:28:93:18:52:11:2b:16:12:f5:eb:
                    bc:3c:1f:4b:75:6e:f2:b4:f2:b0:99:41:ca:2c:c4:
                    f8:d3:64:c5:27:f4:32:a0:4a:e8:f6:5e:c9:e7:ac:
                    f9:6b:8c:d8:1f:bb:9b:1c:a8:c8:ee:6b:19:89:f0:
                    2c:74:9b:e8:17:9f:95:4a:9f:c2:c5:3c:c1:9c:78:
                    c8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4A:17:4A:E0:92:FA:0C:94:61:00:08:FF:72:5E:3C:40:0A:BD:DE
            X509v3 Authority Key Identifier:
                keyid:D7:CC:56:A1:F2:0D:5A:60:32:96:61:96:35:78:6F:DE:26:45:8D:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18xWofINWmAylmGWNXhv3iZFjRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/991ad9-d953-43a8-8584-723b33cb0ef9/1/wkoXSuCS-gyUYQAI_3JePEAKvd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/991ad9-d953-43a8-8584-723b33cb0ef9/1/18xWofINWmAylmGWNXhv3iZFjRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.236.104.0-77.236.119.255
                  79.171.176.0/21
                  178.248.216.0/21
                  185.5.168.0/22
                  192.54.67.0-192.54.71.255
                  217.17.16.0/20
                IPv6:
                  2a01:5580::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:ba:5a:c1:22:3e:5c:d0:3f:66:2b:1b:1d:e8:d8:46:8f:d5:
         e6:d2:e7:12:9f:0b:23:b6:82:87:47:10:7a:0a:d5:93:de:da:
         be:5f:a2:33:9a:e6:c6:05:af:8b:de:7a:72:01:9d:3d:0d:bd:
         ac:41:43:a0:dd:41:45:12:2e:99:79:a7:ca:af:3f:2a:75:78:
         03:f1:fd:d2:53:36:ba:04:01:4c:a1:66:d4:65:4f:d9:39:27:
         72:c7:bd:35:bc:67:d6:3e:8d:3a:df:f3:e8:bc:bf:f9:a8:47:
         e6:2a:1d:47:50:0b:52:a0:3a:ca:15:c8:b1:33:8e:ca:78:41:
         8d:68:1e:6b:36:eb:53:5b:83:8b:cb:8b:33:ee:b4:d0:9a:f1:
         57:39:16:7e:44:93:9d:04:6d:80:70:55:fc:6e:a1:09:ea:e7:
         32:ab:19:13:44:33:ec:97:ff:6a:70:79:25:0b:39:09:dc:1f:
         43:37:dc:4a:ff:f5:da:0e:26:58:d6:9e:53:bd:44:d7:db:db:
         dc:6f:8f:db:f0:32:11:33:8b:97:75:c6:85:aa:31:9d:45:7d:
         3c:e5:cc:77:64:4b:0a:81:d9:18:a9:cb:84:0e:3a:a5:a6:71:
         e5:ca:03:b5:53:5f:39:ea:46:46:24:99:99:2b:b0:b4:7b:bb:
         c8:ab:4f:02
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----