Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/yvjUdgJtArrZkxM19ILpKj3Uuj8.roa
File:                     yvjUdgJtArrZkxM19ILpKj3Uuj8.roa (raw, json)
Hash identifier:          mS/ve9dYZGLyij6VKTfanVDSt15mJtVZqHIrVhwaDf4=
Subject key identifier:   CA:F8:D4:76:02:6D:02:BA:D9:93:13:35:F4:82:E9:2A:3D:D4:BA:3F
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       01857142F564C3D8BF170B295481627684E9
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/yvjUdgJtArrZkxM19ILpKj3Uuj8.roa
Signing time:             Mon 02 Jan 2023 06:54:51 +0000
ROA not before:           Mon 02 Jan 2023 06:54:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211237
IP address blocks:        85.209.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:42:f5:64:c3:d8:bf:17:0b:29:54:81:62:76:84:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Jan  2 06:54:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=caf8d476026d02bad9931335f482e92a3dd4ba3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b3:60:ef:be:82:ad:ac:1b:a4:c1:08:c4:c4:
                    35:30:5c:2b:da:a7:a5:14:b9:ab:6a:56:b1:d2:5b:
                    f8:8e:8c:71:62:47:c8:c3:3a:72:90:61:9a:90:3c:
                    cf:ed:55:a5:63:62:8e:c6:06:be:39:19:b3:26:1d:
                    7f:4f:8d:72:8c:9f:07:4c:03:8d:cb:c8:71:72:4e:
                    18:52:a4:d2:7e:fa:6e:97:1c:a3:90:59:16:31:f6:
                    77:5f:1e:5c:91:6a:9c:30:c1:d9:8c:4d:5b:a1:e1:
                    00:93:47:7a:10:ab:84:48:94:12:ba:da:74:db:54:
                    22:c5:f9:65:2e:0d:f7:a0:f5:61:ea:bb:6c:69:51:
                    55:4f:05:b8:f8:f8:2a:72:81:ca:4c:68:d6:1d:2f:
                    f8:25:51:b7:e0:ec:8c:68:69:83:3b:50:ae:23:99:
                    95:77:72:2f:d3:5c:f0:bd:e0:ee:34:2a:2f:b8:6e:
                    7f:7a:8d:22:76:ca:ca:86:dd:64:55:bd:c4:7f:2d:
                    8c:1f:9a:9c:68:41:9c:7f:d4:86:56:a7:b3:48:af:
                    80:75:d4:c0:71:19:7b:e7:80:9f:ec:c9:aa:82:67:
                    02:0f:0a:37:b8:d0:64:1c:14:73:66:6a:1b:15:67:
                    f4:27:cb:d5:71:5b:97:93:28:df:ed:c9:c6:5d:86:
                    ca:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F8:D4:76:02:6D:02:BA:D9:93:13:35:F4:82:E9:2A:3D:D4:BA:3F
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/yvjUdgJtArrZkxM19ILpKj3Uuj8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.209.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:14:65:0b:f1:da:37:84:93:4a:92:7a:13:da:af:7f:dc:66:
         cc:4e:67:ef:60:3c:59:aa:23:f4:ce:5e:8d:66:45:bb:73:f1:
         9b:2b:85:64:68:76:28:87:33:e5:f2:e7:a7:22:b9:93:97:dd:
         0f:d2:e2:8b:0d:20:aa:d8:b9:76:b8:60:1b:6b:77:dd:cc:dd:
         a8:78:59:85:11:09:fa:e1:ca:99:da:61:27:32:02:7a:73:9c:
         37:2c:c8:cf:9e:6a:52:e8:33:a0:bc:b8:c7:82:06:35:05:2a:
         38:dd:ff:33:84:fb:a3:66:36:e2:88:0b:29:54:47:4e:1b:df:
         db:6a:b2:16:6c:0a:59:88:a1:7a:86:d8:3f:ee:b0:16:61:36:
         f6:db:27:15:71:33:38:47:e7:44:9e:9f:64:37:0d:5a:ed:53:
         8b:d5:7a:80:3c:ae:95:1d:d7:40:d2:d9:9d:93:8c:a1:3b:08:
         58:70:c2:5a:a8:68:00:90:00:25:37:86:20:c1:24:a1:6d:b2:
         1b:6f:c9:f0:4f:e7:30:a3:a9:9b:f7:26:45:db:fe:3d:c3:4e:
         74:5c:be:3a:0c:5c:99:35:39:31:d9:31:6c:61:6a:d3:5a:05:
         e4:54:e5:93:fe:f6:15:85:06:98:42:37:08:ab:cc:fc:80:54:
         5a:37:f1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----