Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/vXiu8uZIQGAYtjaVxgVL-brouEg.roa
File:                     vXiu8uZIQGAYtjaVxgVL-brouEg.roa (raw, json)
Hash identifier:          VnzYvG7Fhmt/XDuy1Squ+6FEUSGP1+oKkDNsNrD0l+0=
Subject key identifier:   BD:78:AE:F2:E6:48:40:60:18:B6:36:95:C6:05:4B:F9:BA:E8:B8:48
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       01857142F4E2AD77CE0387E431AC6FF587F2
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/vXiu8uZIQGAYtjaVxgVL-brouEg.roa
Signing time:             Mon 02 Jan 2023 06:54:51 +0000
ROA not before:           Mon 02 Jan 2023 06:54:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209181
IP address blocks:        85.209.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:42:f4:e2:ad:77:ce:03:87:e4:31:ac:6f:f5:87:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Jan  2 06:54:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bd78aef2e648406018b63695c6054bf9bae8b848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:81:9d:35:c2:75:bf:fb:b8:0a:79:b2:0e:08:
                    2d:79:d5:50:a5:27:fe:a8:a1:07:6f:39:1a:bf:a2:
                    8c:d9:92:eb:10:23:88:57:03:a0:6d:cb:3c:8a:82:
                    fe:65:27:19:7b:11:2f:36:2c:de:b8:3b:08:02:ec:
                    4f:ed:82:bb:a3:e0:cb:78:c4:61:84:37:8d:84:5e:
                    8a:91:cc:1d:12:ba:2c:c9:c0:25:bd:47:e7:d4:93:
                    af:c5:f5:b4:75:58:76:31:fb:fc:15:80:9c:03:6c:
                    ff:2e:ee:f3:a8:1a:fd:f0:5c:7f:36:58:ad:7c:5e:
                    e7:ff:5d:3d:18:02:ba:db:c7:cb:d2:66:be:7d:d3:
                    78:33:35:c8:2f:bf:d4:a9:0f:b9:39:f5:7a:ac:d4:
                    c7:2f:8d:43:49:30:d4:aa:41:77:cc:01:00:61:7f:
                    c1:09:e6:0a:fa:32:21:57:c2:74:b0:58:fc:e3:52:
                    94:10:22:1b:02:2c:60:f4:cd:47:70:6d:a6:db:10:
                    0c:21:1e:7a:70:ad:98:78:d9:28:9b:54:b2:39:0c:
                    3b:f1:41:97:64:71:04:c0:0e:48:7c:ec:b3:2d:56:
                    dd:08:03:a2:00:72:c3:a0:5b:4a:a3:42:2c:ea:a9:
                    9c:6f:12:b9:d7:13:89:2d:ff:d1:7c:36:0e:48:2d:
                    cd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:78:AE:F2:E6:48:40:60:18:B6:36:95:C6:05:4B:F9:BA:E8:B8:48
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/vXiu8uZIQGAYtjaVxgVL-brouEg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.209.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:4d:b6:13:6d:d8:cb:d5:68:be:db:f7:9c:c5:f6:59:4a:51:
         e6:e0:d4:c2:ab:f6:e3:8c:6b:23:2b:0d:63:80:a5:43:e2:36:
         f1:d1:58:15:29:1a:dc:ef:b1:42:ce:ad:8b:a5:92:f4:3f:c1:
         c8:64:65:17:6d:f6:dd:43:3e:3c:44:85:21:67:5c:85:73:76:
         ed:e3:0c:f4:b5:b5:36:64:d6:4b:5c:1a:aa:70:27:9b:37:d0:
         37:a8:a9:fd:0c:34:97:1a:e0:96:0b:46:8a:88:54:fa:1e:05:
         bb:b0:1c:02:ab:8f:cf:f6:79:56:58:1c:ff:89:d8:90:f9:83:
         68:6b:8f:36:ef:5d:6f:39:75:bc:55:3d:47:6c:17:d8:0c:1b:
         c5:4c:b0:21:d7:40:2e:7b:0e:2c:9a:aa:f4:75:55:e5:c9:94:
         af:3b:5a:42:23:de:0d:07:b4:8d:d1:d0:c6:07:e4:d8:80:38:
         f1:02:1f:3b:66:40:9b:87:6a:35:78:e7:fb:fa:28:6b:43:d0:
         b4:3c:b7:09:b0:4f:e0:f0:fd:64:f6:70:9b:07:ed:6b:2d:cc:
         8c:55:17:dd:4d:43:46:5c:63:9f:95:8f:54:4f:c0:83:51:1a:
         f7:98:13:72:a3:d3:2d:15:80:f1:3e:87:e2:4f:8f:f1:5e:59:
         04:75:16:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----