Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/japn8Fzr_PQ3MY3LIrCrC5TMji8.roa
File:                     japn8Fzr_PQ3MY3LIrCrC5TMji8.roa (raw, json)
Hash identifier:          juHp9aV5ugWJ34zp5/cnMlFrnhxwWQNFv+1kxbqSnbE=
Subject key identifier:   8D:AA:67:F0:5C:EB:FC:F4:37:31:8D:CB:22:B0:AB:0B:94:CC:8E:2F
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       01834BEA45662A83B9C37ADCD6DD4AE12D39
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/japn8Fzr_PQ3MY3LIrCrC5TMji8.roa
Signing time:             Sat 17 Sep 2022 14:46:27 +0000
ROA not before:           Sat 17 Sep 2022 14:46:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     400039
IP address blocks:        85.209.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:4b:ea:45:66:2a:83:b9:c3:7a:dc:d6:dd:4a:e1:2d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Sep 17 14:46:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8daa67f05cebfcf437318dcb22b0ab0b94cc8e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ed:8c:9a:40:52:84:64:a5:f5:d9:1f:77:6c:
                    21:81:23:a5:06:58:79:5d:b2:63:db:2a:3f:44:52:
                    34:76:2f:56:0f:3a:44:a6:90:15:59:7e:5d:13:5a:
                    af:59:e9:e8:71:00:cd:d7:51:21:7f:48:60:bd:78:
                    6a:8f:1c:5f:26:37:aa:a7:19:e2:3d:33:ea:68:11:
                    fa:43:8c:31:9a:17:f1:c9:3c:ce:0a:66:89:fd:de:
                    c0:83:8d:6a:7c:d5:e8:89:83:d7:b0:8f:16:9f:c1:
                    46:88:07:fe:05:36:ab:4d:23:e3:45:6e:12:3e:b1:
                    20:df:1f:9b:57:ad:5e:81:9f:94:94:13:fe:94:7d:
                    98:d8:c1:01:0f:0e:4f:b6:65:8d:f7:78:05:11:0b:
                    4b:06:0f:6a:b3:64:09:df:e2:d5:f4:cb:f7:54:09:
                    81:fb:27:84:b1:f6:60:d7:c3:62:3e:86:7c:47:7a:
                    3a:a5:b5:43:60:c4:c5:2a:d3:1d:62:e4:c4:0d:d8:
                    48:fd:71:b9:91:05:ff:53:19:81:fe:67:75:98:62:
                    67:d8:e2:5f:4d:73:4e:48:5f:d1:dc:d2:b6:b2:f2:
                    d0:64:0c:55:1f:4b:20:ca:ca:16:46:57:4a:43:2a:
                    bb:82:91:2c:a4:cd:7c:70:1a:30:93:f4:fe:09:e4:
                    3b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AA:67:F0:5C:EB:FC:F4:37:31:8D:CB:22:B0:AB:0B:94:CC:8E:2F
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/japn8Fzr_PQ3MY3LIrCrC5TMji8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.209.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:78:cf:c3:df:c6:b5:d4:6e:a5:22:61:8f:8f:51:a2:35:71:
         9d:4f:08:70:5d:33:66:60:0c:bd:47:85:65:3f:83:26:f5:1c:
         e1:98:7b:a5:60:b5:6d:ab:15:c7:ae:2d:12:32:65:16:80:6d:
         e3:82:97:ea:a7:78:8a:c9:e7:23:52:10:86:b7:82:ca:77:f9:
         0e:0e:77:4e:77:f9:1f:c0:44:96:4e:ac:e0:43:49:a8:97:f1:
         dc:d9:4e:b2:f9:86:87:75:ad:0a:2b:1b:0a:48:bc:ee:86:af:
         9a:42:56:35:c5:83:79:1c:a8:41:9e:4a:7c:3b:35:99:f1:ac:
         5b:73:37:ed:3f:41:a6:2f:43:51:d8:d8:2d:fd:65:7a:5b:7b:
         45:6c:28:07:bd:1d:a1:cc:0b:86:57:a4:c9:a4:47:9e:cf:92:
         eb:2f:e6:18:69:11:f8:a5:7f:f5:c5:7b:95:ff:3e:80:16:c0:
         71:c6:da:5f:f0:18:d9:f8:04:18:52:72:30:21:13:98:c5:26:
         46:57:ae:dc:91:3c:17:81:c8:5c:c4:61:d3:7d:a8:f5:d0:99:
         eb:00:2d:b6:39:5f:41:d5:20:b1:00:f6:cd:ba:ce:ad:ad:3a:
         cc:a7:91:a4:c9:1f:f8:54:eb:82:9e:d8:cf:21:75:af:2d:05:
         1b:42:fd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----