Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/jechLYDxwAzlMuAEMKMjLrasSwI.roa
File:                     jechLYDxwAzlMuAEMKMjLrasSwI.roa (raw, json)
Hash identifier:          hswzguQ8N/Ok9Hbkc2ssrjx3I1RYYvxGq3g0JG1cNus=
Subject key identifier:   8D:E7:21:2D:80:F1:C0:0C:E5:32:E0:04:30:A3:23:2E:B6:AC:4B:02
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       01857142F890F7B674D35BF4AD8119DA42E8
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/jechLYDxwAzlMuAEMKMjLrasSwI.roa
Signing time:             Mon 02 Jan 2023 06:54:52 +0000
ROA not before:           Mon 02 Jan 2023 06:54:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     396073
IP address blocks:        77.83.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:42:f8:90:f7:b6:74:d3:5b:f4:ad:81:19:da:42:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Jan  2 06:54:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8de7212d80f1c00ce532e00430a3232eb6ac4b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:43:66:23:44:6b:ec:6a:a2:8f:58:e7:12:36:
                    93:c2:71:c8:bd:4e:60:67:76:a3:6b:78:97:ba:95:
                    3e:df:ef:b4:d9:71:ac:df:e6:b3:cf:99:a4:7a:ed:
                    ee:0b:e2:c1:c5:58:56:69:2d:4e:70:94:77:00:45:
                    ef:a2:0c:cf:46:de:08:14:63:4e:32:aa:ee:b0:4a:
                    54:dc:f8:06:92:e0:dc:fd:68:de:8c:c2:5b:2f:4c:
                    80:2f:c0:8c:5f:f0:cf:a7:37:e5:02:cc:cc:0c:9a:
                    8f:81:6a:3f:13:9e:fe:ff:e4:43:17:f3:74:33:a0:
                    f7:32:1b:82:b5:c8:72:70:d8:e4:72:eb:8a:ff:cf:
                    d4:19:48:de:82:ff:e6:fd:19:75:b1:2d:b2:72:5b:
                    5e:5b:eb:f9:f2:66:8d:2b:f4:1e:51:ad:6b:27:79:
                    43:4d:6b:c2:03:7b:2e:61:f9:93:61:c3:a7:ce:b6:
                    7d:2c:44:4a:b3:fb:71:66:49:05:60:f0:4d:04:f9:
                    70:89:a3:23:07:4a:4f:fd:e9:fb:bd:e2:6a:35:2c:
                    20:34:28:3d:e7:34:01:24:d7:82:5d:20:5c:4d:3b:
                    a9:a0:b8:68:b2:b0:a7:0f:d4:1d:b2:bc:6c:10:29:
                    5f:4f:81:80:84:be:7c:94:c6:6a:a1:b5:35:eb:d7:
                    c4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E7:21:2D:80:F1:C0:0C:E5:32:E0:04:30:A3:23:2E:B6:AC:4B:02
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/jechLYDxwAzlMuAEMKMjLrasSwI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:8c:6d:fa:b0:ab:8f:85:17:c7:ab:0d:02:e4:af:4b:ea:0a:
         e5:4a:3e:4e:74:ee:92:56:ce:66:73:ef:99:60:1b:7f:70:d1:
         6f:82:fa:ec:bc:5c:f1:47:6d:42:a4:e6:02:c9:91:09:9f:0f:
         aa:54:db:bf:68:3a:c4:09:b8:ee:d4:67:9c:0f:4c:ab:b9:91:
         0b:1e:20:aa:ca:55:85:89:cb:59:b6:4e:09:e4:e4:fc:0e:08:
         3e:48:88:20:ce:bc:1d:eb:14:f7:c3:64:63:1c:d1:eb:3f:b3:
         e4:84:f6:b6:9f:2b:26:b5:c4:e8:cb:54:8d:8f:1f:0a:29:e5:
         2a:f5:fc:3b:9f:89:f7:f3:9e:44:7e:37:7b:d7:87:e7:2b:f9:
         a3:66:e7:d8:ac:3d:60:45:86:00:81:fd:8d:e6:95:b7:f7:10:
         ee:bb:81:92:31:df:fd:fe:57:7b:b2:2c:e3:b3:53:b9:26:8b:
         a7:b4:5d:d8:93:eb:38:da:b3:27:2d:0b:cd:4a:30:8e:17:d4:
         7b:18:62:c0:df:97:92:e4:ba:a0:c6:c3:02:1e:43:fd:6a:ec:
         05:5a:a1:e1:62:85:8d:65:ff:ba:54:42:40:5d:69:9c:2f:5a:
         a5:e0:ce:2a:4d:cc:eb:05:df:f5:cf:45:41:cc:1a:b1:a5:7b:
         eb:fc:75:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----