Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/4PZe_ab_-Kg1c2tO3H27IbAV6eU.roa
File:                     4PZe_ab_-Kg1c2tO3H27IbAV6eU.roa (raw, json)
Hash identifier:          vP/47R6qmPZ7H78jABdvGNDlPIjFC1wFg56zmk73UV4=
Subject key identifier:   E0:F6:5E:FD:A6:FF:F8:A8:35:73:6B:4E:DC:7D:BB:21:B0:15:E9:E5
Certificate issuer:       /CN=5b661adcbf6962eeec825c6d4de9b449f02e841d
Certificate serial:       07D31767
Authority key identifier: 5B:66:1A:DC:BF:69:62:EE:EC:82:5C:6D:4D:E9:B4:49:F0:2E:84:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W2Ya3L9pYu7sglxtTem0SfAuhB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/4PZe_ab_-Kg1c2tO3H27IbAV6eU.roa
Signing time:             Sun 20 Mar 2022 19:47:35 +0000
ROA not before:           Sun 20 Mar 2022 19:47:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8764
IP address blocks:        62.122.76.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131274599 (0x7d31767)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b661adcbf6962eeec825c6d4de9b449f02e841d
        Validity
            Not Before: Mar 20 19:47:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e0f65efda6fff8a835736b4edc7dbb21b015e9e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:24:bb:32:e7:d5:8c:8f:ee:52:ba:9f:38:46:
                    1e:34:4a:b6:29:4d:06:72:bc:71:6b:a4:76:f3:69:
                    65:53:d2:41:09:a6:79:4d:84:f0:a5:9f:28:c2:ff:
                    d4:f8:7f:87:d2:14:f0:a1:d2:02:8a:4f:ca:ab:eb:
                    03:bf:23:66:2b:8f:8e:dd:c1:e4:5f:ca:44:a4:c6:
                    cf:a4:96:ef:30:90:b3:e5:2f:31:2b:46:6b:4c:a9:
                    68:cd:33:7f:d0:3e:2f:b5:3c:cf:26:a1:51:01:6f:
                    67:80:00:ed:ba:d6:ad:70:21:36:48:0a:b6:f9:b4:
                    ea:7e:77:aa:1a:3c:9c:9e:fc:20:12:b2:f1:37:5e:
                    51:92:0b:7e:17:ee:81:95:a6:f4:42:9b:8a:93:86:
                    24:41:aa:2f:ea:f6:ff:92:ef:e1:1c:43:7c:b4:07:
                    7c:37:91:38:a6:d0:91:88:3c:d2:26:30:1e:43:0e:
                    a5:f6:d4:29:4d:62:47:e6:bf:ab:4f:ab:af:b1:bf:
                    0a:56:e5:45:54:34:f0:ce:da:7c:87:0d:ac:8e:50:
                    d3:a3:43:85:a6:eb:fd:ff:45:19:7e:77:53:9e:bc:
                    1c:ab:0f:ac:2c:76:2e:c6:cd:31:cd:24:e2:e5:8b:
                    c0:63:25:c2:37:b8:e9:53:3a:b1:d2:87:80:c5:a4:
                    73:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F6:5E:FD:A6:FF:F8:A8:35:73:6B:4E:DC:7D:BB:21:B0:15:E9:E5
            X509v3 Authority Key Identifier:
                keyid:5B:66:1A:DC:BF:69:62:EE:EC:82:5C:6D:4D:E9:B4:49:F0:2E:84:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2Ya3L9pYu7sglxtTem0SfAuhB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/4PZe_ab_-Kg1c2tO3H27IbAV6eU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/W2Ya3L9pYu7sglxtTem0SfAuhB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.122.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:f2:d2:6c:26:ae:ee:2f:89:ae:9b:4e:6d:b5:a0:a9:24:c8:
         fc:5d:f9:95:a5:cf:9c:95:17:dd:9e:85:1f:93:c6:07:df:c5:
         cc:cd:68:77:f8:83:f7:9f:85:67:87:3c:d7:84:a6:bf:b4:7a:
         a5:4f:0c:99:87:87:5e:10:0d:8b:01:8b:55:a1:6c:f5:90:6b:
         4a:bf:4a:0c:22:be:f0:5c:a3:05:2d:4c:b9:43:f5:64:b1:ad:
         c1:67:b9:ac:42:ea:39:27:07:aa:92:ba:0a:8d:64:a0:9f:5f:
         b8:ec:de:6f:46:f0:b1:2d:74:a7:0b:b4:5e:14:50:3a:bd:e9:
         5b:4f:3f:d3:0b:ce:92:71:32:70:e7:94:7a:1f:7f:7e:c6:a4:
         5d:f4:b1:13:2e:f9:50:d3:f8:09:91:d0:39:b1:1f:87:e3:de:
         4b:f7:fb:a2:05:c2:57:c2:13:d4:ab:4c:6d:a4:de:85:43:a5:
         25:29:c7:ea:92:b3:44:bf:65:42:ef:19:3f:73:1d:4d:f7:c2:
         bc:e4:ba:da:b2:92:40:07:90:86:63:bc:8c:a6:97:28:2b:06:
         f6:94:26:0a:83:64:00:f8:09:ae:da:a1:38:c2:43:55:f3:47:
         f3:6e:66:a9:ba:9a:46:c8:31:dc:4c:c7:a6:a5:6a:f0:63:2f:
         e9:17:f4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----