Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/MCYGEFl2f0wZPhSGMaPl1KvmBSo.roa
File:                     MCYGEFl2f0wZPhSGMaPl1KvmBSo.roa (raw, json)
Hash identifier:          SfSTgz8GzNO7Z1RiwVSC84Au/DqYVp8GDOiNopFVXhU=
Subject key identifier:   30:26:06:10:59:76:7F:4C:19:3E:14:86:31:A3:E5:D4:AB:E6:05:2A
Certificate issuer:       /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial:       34AFDDDB
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/MCYGEFl2f0wZPhSGMaPl1KvmBSo.roa
Signing time:             Sat 23 Apr 2022 21:15:22 +0000
ROA not before:           Sat 23 Apr 2022 21:15:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31400
IP address blocks:        93.127.128.0/17 maxlen: 17
                          77.37.0.0/17 maxlen: 17
                          2a01:4d0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883940827 (0x34afdddb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
        Validity
            Not Before: Apr 23 21:15:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3026061059767f4c193e148631a3e5d4abe6052a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:88:af:7a:25:5a:58:3d:36:70:39:39:b5:04:
                    e5:b1:6d:b8:42:fa:2e:eb:e1:74:93:04:62:38:cc:
                    a1:87:11:04:d2:64:07:95:25:a8:b5:eb:f0:52:ca:
                    64:6e:8e:69:1a:4c:e0:74:be:49:20:ee:9a:27:ae:
                    64:56:f0:42:10:ec:e8:91:39:72:04:a9:f4:04:3e:
                    f9:28:54:ed:c7:49:74:a8:eb:01:b0:c8:34:bd:33:
                    bc:2c:49:6a:4a:0f:88:60:80:7c:56:75:68:f9:e4:
                    59:e7:c0:e4:b1:9e:85:07:86:4d:eb:74:0f:b6:a9:
                    cc:90:12:8f:a0:8b:cc:99:07:a4:d5:b0:14:26:bb:
                    4b:4a:71:ce:0f:07:d1:d2:27:1b:19:ad:93:ee:3e:
                    bd:d5:44:00:da:0d:de:d9:71:5b:59:46:ce:85:32:
                    46:21:aa:d2:98:49:e5:e4:e0:95:d3:af:30:29:6f:
                    ab:17:46:a7:41:36:c4:c1:c0:91:b5:33:10:59:69:
                    09:25:cb:84:9d:90:93:2c:8f:64:a4:2d:17:27:50:
                    9e:ef:18:24:19:b0:05:46:68:77:05:d1:7d:79:47:
                    ed:3e:db:b1:97:c1:aa:53:b4:b0:ec:40:0c:70:ab:
                    09:85:e5:af:05:a1:92:31:37:6c:69:7e:e8:f6:7f:
                    1c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:26:06:10:59:76:7F:4C:19:3E:14:86:31:A3:E5:D4:AB:E6:05:2A
            X509v3 Authority Key Identifier:
                keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/MCYGEFl2f0wZPhSGMaPl1KvmBSo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.37.0.0/17
                  93.127.128.0/17
                IPv6:
                  2a01:4d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:f6:0f:2d:b6:aa:84:09:ae:73:89:f6:7c:6f:9f:7f:1b:90:
         61:20:73:13:48:c1:f5:d4:06:37:9c:51:74:97:90:99:de:dd:
         93:39:d2:0d:66:27:70:72:0b:c1:70:47:79:38:ee:84:90:4c:
         41:0b:9f:e9:cd:7d:69:4a:ca:60:31:48:5a:6f:0b:40:bd:84:
         2d:02:7c:68:9b:2f:80:15:e0:98:3c:21:92:0e:87:55:63:f7:
         d5:c5:55:68:9c:b0:3a:a1:0a:ac:50:f4:95:81:c2:9f:72:7e:
         fc:a2:2f:46:91:d2:96:45:35:c4:71:6d:3b:0f:c3:71:b6:99:
         fe:36:99:9c:07:93:21:f9:d7:4a:db:b5:62:65:32:1a:4c:6f:
         c0:0c:fd:02:60:4b:74:12:10:14:dc:0e:66:7b:4c:1a:54:03:
         63:1c:e7:3a:bd:c5:51:ba:52:bb:98:e2:2c:4a:90:20:f9:2b:
         6d:13:92:e1:1f:87:62:2d:a4:d0:e3:81:d9:de:6c:10:f6:65:
         43:95:13:2d:d0:06:86:94:c0:53:cf:a9:0c:bf:9a:d4:3c:77:
         e8:6b:09:16:2e:73:53:ad:45:29:81:81:01:14:1b:55:20:44:
         95:ba:f1:c1:49:7b:56:50:ab:c7:c1:1d:ac:fc:c0:f3:43:c7:
         b1:97:d5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----