Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/LD1_wIp8B_7kFmVwJpA8NJWYp6s.roa
File:                     LD1_wIp8B_7kFmVwJpA8NJWYp6s.roa (raw, json)
Hash identifier:          hCCOEVO9ko20zlfr3EIgSOhqlW56/Rw8GjFYCYKL3xQ=
Subject key identifier:   2C:3D:7F:C0:8A:7C:07:FE:E4:16:65:70:26:90:3C:34:95:98:A7:AB
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       01857142F9E828AF3E5ADC0F0D2459262E40
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/LD1_wIp8B_7kFmVwJpA8NJWYp6s.roa
Signing time:             Mon 02 Jan 2023 06:54:52 +0000
ROA not before:           Mon 02 Jan 2023 06:54:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     398385
IP address blocks:        77.83.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:42:f9:e8:28:af:3e:5a:dc:0f:0d:24:59:26:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Jan  2 06:54:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2c3d7fc08a7c07fee416657026903c349598a7ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3e:69:40:82:f4:58:1a:70:e9:49:95:89:ed:
                    b9:f3:26:0f:88:c3:9f:2c:ac:e5:fe:2d:2e:74:9f:
                    d5:78:10:ca:85:72:94:ee:c7:16:3a:77:69:c3:d0:
                    22:61:11:70:97:39:e9:7b:8a:e9:73:84:1b:e7:bc:
                    3c:86:0f:a8:ab:03:5e:96:49:ab:af:13:d9:c8:6f:
                    e9:87:29:4f:4e:8f:39:c9:b9:d6:82:73:88:81:6b:
                    e8:23:a5:ac:a6:64:c3:b9:d4:ad:8a:00:91:2a:3a:
                    ea:cd:ad:54:1f:85:13:26:3e:6e:42:66:b1:1a:a2:
                    2c:aa:60:fb:3b:0c:c7:93:02:fa:22:ef:cc:f4:22:
                    ef:a1:84:9f:b7:5f:e8:28:cc:a6:71:3b:6a:1c:a9:
                    5d:53:69:d8:7a:96:e1:1e:95:04:7f:1d:bc:bb:ad:
                    4f:ed:d4:f3:a2:3d:c2:5c:ae:b7:e6:e8:75:d0:76:
                    56:8b:03:ad:8e:b2:1c:47:3c:95:ab:80:84:bf:2a:
                    5b:fe:be:1f:23:be:53:60:da:7d:9c:45:0c:f8:51:
                    a7:d1:a0:fa:c9:ec:8a:35:9f:fa:af:ad:50:37:ea:
                    28:13:7a:ec:f1:03:f3:22:dc:94:c5:cb:02:dd:64:
                    64:e2:3d:86:78:21:a7:11:e0:d5:34:93:25:4d:ae:
                    0a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3D:7F:C0:8A:7C:07:FE:E4:16:65:70:26:90:3C:34:95:98:A7:AB
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/LD1_wIp8B_7kFmVwJpA8NJWYp6s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:38:c9:9e:f4:2c:5c:2a:b1:e6:54:71:30:5d:54:c3:ba:2a:
         f1:cd:46:5b:e8:6e:70:4e:99:97:40:92:a7:06:43:4d:47:19:
         c2:95:b9:fb:da:11:4c:5c:39:85:42:1e:33:d3:9e:06:48:e5:
         cd:9f:29:27:a3:26:89:7e:38:f3:92:50:ec:8f:58:a2:7e:17:
         6c:b6:ce:6d:a0:7e:cc:93:64:00:d5:b9:16:7c:29:5c:e2:24:
         f4:87:a8:5a:74:3a:a5:c1:f0:4f:c2:ac:c7:2b:6e:88:cd:47:
         65:bb:4a:73:9e:f3:2d:12:97:dd:7a:e6:ba:7b:f6:ba:09:8c:
         0e:a1:32:84:97:6e:2b:a9:c6:58:5e:64:1d:90:d1:77:7d:6f:
         c5:74:9c:71:c2:67:16:76:6e:d9:90:98:01:be:d0:45:cc:a0:
         85:bb:a0:0f:2b:4d:d2:55:21:46:88:6b:3b:33:7c:4a:34:81:
         63:0f:02:11:7b:b0:e9:59:3b:1f:64:31:85:cd:1e:14:fa:30:
         4d:04:69:3f:e5:24:39:e1:77:7a:65:e2:2b:48:c7:a5:22:75:
         77:ff:bc:44:d6:c0:40:32:48:ae:2d:f8:5a:3d:e8:bb:71:6a:
         2f:3f:c2:fb:75:17:52:9f:8d:7e:84:41:03:6a:6d:fb:92:17:
         16:70:2a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----