Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/p5kU1cxHBQFpd_wqpoKsy2Ati2w.roa
File:                     p5kU1cxHBQFpd_wqpoKsy2Ati2w.roa (raw, json)
Hash identifier:          Ihwaw+06GZQCSTe7mACJmaQWyJVodMdIqll5EvLk1eY=
Subject key identifier:   A7:99:14:D5:CC:47:05:01:69:77:FC:2A:A6:82:AC:CB:60:2D:8B:6C
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       0A921E49
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/p5kU1cxHBQFpd_wqpoKsy2Ati2w.roa
Signing time:             Mon 20 Jun 2022 14:44:47 +0000
ROA not before:           Mon 20 Jun 2022 14:44:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     396073
IP address blocks:        77.83.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177348169 (0xa921e49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Jun 20 14:44:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a79914d5cc4705016977fc2aa682accb602d8b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b1:f9:d0:c7:ee:7f:21:41:8b:59:65:e6:ca:
                    93:fc:fc:bb:10:4a:25:ce:30:ed:20:79:fd:c7:09:
                    14:ea:52:ec:9b:5f:08:61:e7:c8:a4:03:29:44:aa:
                    c3:af:99:0f:84:89:11:4b:a2:98:35:bd:cb:09:bf:
                    a3:7d:4e:fe:b2:03:54:da:00:00:b8:d6:bb:19:fd:
                    ab:54:ab:1f:00:4b:56:86:a7:72:36:34:84:ba:b7:
                    6f:6b:0d:c7:b2:bb:3a:2d:eb:0c:aa:9e:3c:6b:9d:
                    06:44:b3:ed:63:c6:22:81:f0:1c:11:cf:6c:f8:a4:
                    b4:d2:a5:b3:ac:d1:12:9f:4c:92:39:2c:c9:8e:04:
                    5b:66:cd:09:13:f4:54:16:59:10:93:0c:f6:a0:6c:
                    b3:30:38:c4:99:ac:6a:94:9c:60:23:92:4e:60:90:
                    54:f8:eb:62:d0:5e:6f:08:92:1b:f8:6f:d0:04:12:
                    15:64:6c:3b:8c:b8:a8:c3:0b:12:3b:ec:d2:66:96:
                    0b:05:d7:32:71:dd:3a:3d:87:0b:64:db:46:e5:57:
                    26:28:4f:dc:e6:aa:9c:27:e3:fa:14:cb:a3:b4:ff:
                    a2:6a:1f:e1:52:25:f9:6d:72:6c:5a:ac:3c:9a:7a:
                    f8:f5:06:40:00:5f:59:a9:e5:52:34:1a:c8:fd:ec:
                    a1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:99:14:D5:CC:47:05:01:69:77:FC:2A:A6:82:AC:CB:60:2D:8B:6C
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/p5kU1cxHBQFpd_wqpoKsy2Ati2w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dd:64:b9:66:a3:f4:bc:e5:24:fb:45:ed:84:5e:66:0e:72:90:
         87:58:1b:c1:34:ae:f4:c9:0c:f2:c8:92:44:05:cd:71:af:11:
         b6:f5:39:02:89:42:78:f3:ec:0c:dc:d3:6a:bb:6e:47:2c:d1:
         c6:de:bc:81:84:e1:57:91:5e:9b:fe:2d:fe:8e:03:09:33:bc:
         5b:71:45:fb:7a:eb:82:32:43:63:35:bf:52:14:a4:50:c9:8e:
         20:ea:35:5e:08:30:fa:4a:6b:70:44:d3:07:cd:df:b1:95:5d:
         14:47:a5:2f:1c:a9:5f:24:3c:8a:d4:23:e7:36:62:40:fa:d4:
         02:c9:9a:ee:61:27:f0:00:01:1e:56:04:a5:fe:eb:cc:58:ed:
         4c:11:ea:d4:3e:ca:80:5c:81:c2:29:8a:e8:f3:88:bb:22:83:
         84:c6:ec:73:1f:ce:ee:a2:83:c5:8c:f3:b1:84:5a:f7:63:8a:
         33:ff:05:64:38:5a:e0:f5:91:6d:92:78:24:c2:48:9c:38:7a:
         54:8b:c8:ad:11:2e:2f:1f:d2:b2:0f:96:fb:50:f6:a6:c7:e9:
         0c:9f:ee:57:26:97:9d:a6:ba:06:4f:b3:8c:f1:32:84:52:09:
         87:89:a4:ae:4d:ec:92:f6:dc:ca:01:e2:6e:7e:06:d2:8f:a7:
         02:88:e4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----