Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/G7zf72sBqG6SIizruoWW7nXXTL8.roa
File:                     G7zf72sBqG6SIizruoWW7nXXTL8.roa (raw, json)
Hash identifier:          B1ceUJ2wqTVXSIE465Dye1nhRKOvy6QAYIRnG5EUzGo=
Subject key identifier:   1B:BC:DF:EF:6B:01:A8:6E:92:22:2C:EB:BA:85:96:EE:75:D7:4C:BF
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       01857142F76B1021BB32EFD22254C7F7989F
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/G7zf72sBqG6SIizruoWW7nXXTL8.roa
Signing time:             Mon 02 Jan 2023 06:54:52 +0000
ROA not before:           Mon 02 Jan 2023 06:54:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     262287
IP address blocks:        77.83.252.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:42:f7:6b:10:21:bb:32:ef:d2:22:54:c7:f7:98:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Jan  2 06:54:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1bbcdfef6b01a86e92222cebba8596ee75d74cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5b:94:c8:c3:f1:bc:6a:1a:53:b3:ce:0d:c5:
                    05:27:49:77:4e:09:11:ed:04:df:cc:cb:e0:9a:03:
                    cb:e3:24:63:e4:65:b9:9d:57:a3:1c:1e:21:f2:ef:
                    1a:9b:16:e0:c1:cd:10:78:ce:f7:33:5b:34:20:88:
                    c6:0c:56:c4:8c:9a:e1:86:7a:c2:0e:b1:9c:de:c6:
                    c1:e0:db:3d:bc:ba:92:45:d2:77:6a:a6:94:af:d3:
                    a8:9c:ad:c3:d4:cd:85:82:7e:73:e8:a2:3d:09:42:
                    47:57:e5:ff:42:96:1c:33:d5:6f:d3:dd:61:6f:10:
                    20:39:96:d0:a6:66:cb:c2:6a:82:14:1a:77:b5:9e:
                    29:0b:b5:c2:5d:08:4e:84:16:01:58:88:36:2f:f4:
                    b2:e5:2f:35:54:fe:fe:4a:1d:24:d1:c1:8e:43:99:
                    36:5f:63:cd:45:c9:09:81:66:9f:8c:d2:5a:04:c7:
                    61:4e:b5:68:7c:ce:69:cc:16:a3:62:47:fb:02:06:
                    db:1d:2c:33:9f:9d:0e:d5:61:38:14:14:b9:79:7d:
                    56:0d:14:85:a3:d1:a1:f8:56:fc:f7:b0:8d:c7:e8:
                    ef:e9:5e:1e:70:49:a4:5d:4b:00:05:c7:f8:31:15:
                    07:90:d3:20:d2:b5:71:1f:94:3d:02:b4:f5:4a:f0:
                    01:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BC:DF:EF:6B:01:A8:6E:92:22:2C:EB:BA:85:96:EE:75:D7:4C:BF
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/G7zf72sBqG6SIizruoWW7nXXTL8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         df:0a:27:18:f2:00:8f:c6:d4:ae:7b:93:09:a1:b7:05:a9:cd:
         da:5c:1a:2b:bc:d3:ff:40:ed:ee:98:cf:b4:01:84:e9:a5:88:
         5b:10:9b:f1:67:d1:fb:0f:01:f2:74:75:56:32:32:b9:a6:75:
         dc:33:6a:57:51:34:5f:eb:4c:c6:e6:da:be:3c:57:e4:10:4b:
         01:25:a3:20:eb:e2:4c:87:73:32:2e:79:de:90:f2:96:30:7f:
         ac:b2:ff:c2:39:4e:ee:0c:14:cd:b0:46:41:86:3d:5b:2c:17:
         8b:16:df:e2:46:b9:4d:59:64:54:e5:88:21:32:30:dc:6d:dd:
         48:c5:6c:31:ff:3a:93:b0:79:8a:e0:d4:15:f1:4a:3a:28:66:
         bc:bc:d3:97:45:a9:12:19:81:00:08:83:2e:ca:a9:b9:10:42:
         7b:99:81:e7:7a:03:dc:51:8c:5f:52:4d:0b:d0:b9:a1:b6:21:
         67:1c:f3:a8:b8:6e:85:07:af:16:38:e0:1e:29:bf:a1:c2:1b:
         81:f7:41:09:91:59:dc:8e:ba:87:73:7f:f8:7b:8c:ad:33:9e:
         95:39:e1:8d:e3:ab:6f:e9:2f:51:e7:79:b4:42:b4:b0:e1:be:
         ac:a1:d2:9a:8a:74:03:9c:e4:ce:2b:c0:d1:de:fb:3c:bb:35:
         20:60:60:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----