Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/dQLlP-gO_A7lxgaqUcQlucPDcvM.roa
File:                     dQLlP-gO_A7lxgaqUcQlucPDcvM.roa (raw, json)
Hash identifier:          uVFOO5fokfhdXKkXLIdeD+Ra+MK7qijlNriLVcTFA2g=
Subject key identifier:   75:02:E5:3F:E8:0E:FC:0E:E5:C6:06:AA:51:C4:25:B9:C3:C3:72:F3
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       09A22A0B
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/dQLlP-gO_A7lxgaqUcQlucPDcvM.roa
Signing time:             Tue 15 Mar 2022 18:57:27 +0000
ROA not before:           Tue 15 Mar 2022 18:57:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     398385
IP address blocks:        77.83.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161622539 (0x9a22a0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Mar 15 18:57:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7502e53fe80efc0ee5c606aa51c425b9c3c372f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b5:38:bb:bb:b3:88:a0:31:08:31:ad:66:e8:
                    53:ca:49:96:45:9d:93:7e:8c:9a:43:a9:9d:1d:11:
                    d9:64:2b:d5:04:b3:96:36:c6:dd:dd:06:63:38:66:
                    63:1f:ef:8e:d6:d8:36:30:18:3b:f7:93:cc:9f:2e:
                    64:e2:53:28:39:f4:d3:10:02:69:35:19:ad:70:cf:
                    89:f5:c0:f7:32:54:00:d4:76:4d:d6:d5:3a:85:b9:
                    1f:bc:bf:22:1d:88:7d:02:80:7a:e1:28:a2:3c:8b:
                    0b:92:9a:04:a2:f6:d5:5f:ff:da:c6:81:bd:34:fe:
                    5c:fa:7c:40:ce:e6:2e:93:e0:65:38:71:ce:7c:30:
                    2a:6d:d4:c2:3c:e1:db:03:61:77:44:df:73:c8:ee:
                    d2:20:07:d3:d4:27:86:2b:8b:92:f2:f4:1c:9f:92:
                    59:1b:8e:ed:67:4a:a3:0b:f0:ca:12:a3:51:ed:38:
                    e4:bb:a9:2e:db:cb:9d:8b:b8:59:fa:f8:93:7c:89:
                    c1:08:c3:0c:4c:44:12:49:fa:fc:5c:0a:ba:54:f1:
                    3e:30:45:79:28:35:04:54:b9:13:fe:e6:6f:03:5e:
                    91:75:10:b3:94:0c:e0:9c:79:b9:40:fd:ac:86:60:
                    64:eb:06:e8:ff:e2:e1:ad:e3:84:50:00:1e:c1:54:
                    59:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:02:E5:3F:E8:0E:FC:0E:E5:C6:06:AA:51:C4:25:B9:C3:C3:72:F3
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/dQLlP-gO_A7lxgaqUcQlucPDcvM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:da:20:87:3d:87:3a:50:ff:c7:05:64:c7:03:56:fb:2f:44:
         6f:af:91:7d:58:79:8d:fe:7a:94:67:72:66:ec:c2:4d:e7:d7:
         ba:08:32:7e:00:73:b5:d1:a0:8f:58:ba:17:e0:63:43:80:63:
         f9:45:c3:a8:3b:9c:af:d6:52:e7:21:37:90:70:d0:df:81:f7:
         91:98:79:37:d9:cf:52:1e:1d:75:a3:33:8d:da:f6:a5:20:8c:
         0b:58:77:e0:a0:5c:a1:c4:de:a5:14:14:54:5a:07:81:f1:ce:
         ae:b4:ca:3f:37:39:1a:bd:26:c0:70:34:83:31:0f:de:b5:bd:
         0c:cb:92:7c:f6:1f:b6:83:f6:6a:70:11:13:5f:84:36:d4:ee:
         40:39:6a:f8:c0:2a:77:03:5e:65:77:7b:00:97:bb:e3:f8:0a:
         75:bb:a9:5a:a8:c7:e1:00:d9:b0:3e:73:04:17:f7:3e:3b:b8:
         cc:e5:e3:0e:06:9f:c6:91:e9:41:37:af:61:b5:27:df:ec:82:
         88:68:ff:5a:b7:0e:fc:a8:22:61:e3:be:fb:f3:d2:7d:f7:89:
         30:60:e3:1f:0a:25:06:5d:7e:4f:fd:fc:92:23:0b:75:5e:65:
         72:45:a5:4f:26:c7:f2:a9:4c:c8:29:34:be:81:87:04:94:00:
         bc:74:e4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----