Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/625gXec-hDWF3mcyOx5kJPinap0.roa
File:                     625gXec-hDWF3mcyOx5kJPinap0.roa (raw, json)
Hash identifier:          EIG4qtMXipSgVgs/RmqND7vKPcn1Kp+5wNZQf/omB7Y=
Subject key identifier:   EB:6E:60:5D:E7:3E:84:35:85:DE:67:32:3B:1E:64:24:F8:A7:6A:9D
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       01857142ED45AC47BE1495E3539F5B4B4BA7
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/625gXec-hDWF3mcyOx5kJPinap0.roa
Signing time:             Mon 02 Jan 2023 06:54:49 +0000
ROA not before:           Mon 02 Jan 2023 06:54:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35913
IP address blocks:        45.13.148.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:42:ed:45:ac:47:be:14:95:e3:53:9f:5b:4b:4b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Jan  2 06:54:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eb6e605de73e843585de67323b1e6424f8a76a9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:cb:29:02:aa:aa:9c:f2:09:c6:4a:a9:0b:be:
                    89:08:8c:17:d2:ae:ff:14:19:14:2b:3b:de:f3:2d:
                    72:7d:b3:8d:b6:fe:a4:90:24:fe:97:b0:48:ee:73:
                    48:81:e7:39:7a:30:0e:6a:45:2b:c7:f0:e0:30:be:
                    cb:35:fd:1e:4c:5a:c4:ad:a2:14:a7:1e:cf:be:02:
                    d5:82:7d:f8:ad:be:fc:3b:73:14:cf:a7:ca:45:17:
                    6c:cf:2d:f0:6d:49:28:d3:ce:9e:67:57:cd:1a:cb:
                    0c:91:ce:09:47:a0:0d:f9:e2:6b:25:05:c6:c6:b6:
                    e3:32:03:20:db:a1:67:9e:a2:a8:70:33:d5:2f:42:
                    b9:06:35:a5:80:a9:6c:74:1e:a0:c3:54:eb:ce:75:
                    c7:b7:79:78:e4:15:c4:20:65:19:fa:60:6d:73:a8:
                    16:e9:9c:20:b5:05:eb:2a:7d:e9:fa:96:84:77:ea:
                    ca:d7:93:1d:c0:b1:40:a5:01:d1:e6:09:1d:f9:43:
                    9b:60:c2:81:17:cb:4b:6e:eb:0b:1b:27:e2:00:c6:
                    52:6f:23:1e:10:ca:4f:93:d4:4f:5d:85:93:f5:f7:
                    16:cb:84:8e:2d:4e:a4:af:4a:1d:bf:bb:18:22:6a:
                    de:12:6d:3d:59:16:5d:42:6c:8b:92:1f:08:85:18:
                    b1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:6E:60:5D:E7:3E:84:35:85:DE:67:32:3B:1E:64:24:F8:A7:6A:9D
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/625gXec-hDWF3mcyOx5kJPinap0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d6:80:19:9f:ad:cb:d1:64:1c:87:cb:93:c5:af:4a:33:cf:0c:
         3e:9a:f3:d8:89:9d:c7:d8:85:5d:9e:82:84:b3:73:1f:ca:ff:
         83:f4:ef:69:56:fd:65:c0:2d:1b:7d:d5:4e:be:1e:bc:ae:28:
         ad:8a:4b:89:1a:2b:4f:6b:92:73:5c:02:3b:28:e5:15:66:dd:
         48:80:49:b0:de:03:e7:ef:c2:09:cf:d1:39:79:5c:47:e7:be:
         c6:5e:9c:82:ba:21:4e:45:d7:ec:1c:00:0b:c5:53:02:2d:5e:
         3c:3f:cd:d9:9f:c8:0e:92:bc:6e:bf:4b:91:d8:37:19:a8:3d:
         a9:2f:1a:7a:fe:0e:18:18:5a:06:e1:7b:6b:cc:3c:b7:b8:b6:
         49:96:d3:b2:8c:bd:32:d6:9d:92:da:94:09:c7:28:aa:aa:1a:
         b0:b1:55:c2:61:4f:18:30:11:e3:cd:70:03:97:1d:dc:d9:47:
         ae:3d:fa:3b:ec:bd:53:26:d1:2f:f5:86:49:55:42:b8:91:75:
         66:ec:72:45:2e:87:0a:ef:4a:87:d5:fa:47:3c:60:0e:33:9c:
         b2:60:fc:0e:70:3c:db:23:fa:2b:b9:36:82:5e:6d:38:2f:35:
         0e:db:9e:fa:be:16:9b:98:07:8c:35:69:3a:52:05:99:1d:aa:
         ff:39:ef:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----