Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/6oZCc1Cz0f1eO5U-kQNb4gyRTi0.roa
File:                     6oZCc1Cz0f1eO5U-kQNb4gyRTi0.roa (raw, json)
Hash identifier:          0QzOptLUAz9AOxU3JBKSj0m0ztonl2WekhnKAeB5RYY=
Subject key identifier:   EA:86:42:73:50:B3:D1:FD:5E:3B:95:3E:91:03:5B:E2:0C:91:4E:2D
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       01857142F37B385F266D8553EA56CB08C83E
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/6oZCc1Cz0f1eO5U-kQNb4gyRTi0.roa
Signing time:             Mon 02 Jan 2023 06:54:51 +0000
ROA not before:           Mon 02 Jan 2023 06:54:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     142111
IP address blocks:        2.58.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:42:f3:7b:38:5f:26:6d:85:53:ea:56:cb:08:c8:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Jan  2 06:54:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ea86427350b3d1fd5e3b953e91035be20c914e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f2:df:d4:3b:41:00:1d:30:15:c2:49:8d:3f:
                    36:b3:a2:05:49:70:a6:26:95:d6:bb:6f:0d:cd:49:
                    f0:00:58:38:89:a6:5c:af:17:83:37:58:8d:57:a2:
                    5f:b6:31:e9:0e:3a:ae:93:60:a4:cb:a8:d6:62:4c:
                    1d:36:52:5f:0f:fc:71:bd:65:99:22:58:38:59:60:
                    e7:f7:cd:75:14:85:df:ba:68:2b:8a:32:ed:f2:dc:
                    31:39:c8:c1:68:bd:41:ef:d1:68:5b:a9:a3:81:e8:
                    5f:c5:48:f0:e6:3d:d0:10:a6:76:11:4a:84:49:73:
                    09:9e:3e:97:37:85:c2:d4:8c:ae:88:fd:87:da:86:
                    85:75:cd:32:9a:be:68:ea:db:1a:e6:20:16:0e:15:
                    06:0b:7e:94:ab:df:a8:17:52:e1:c0:a0:e0:85:ea:
                    e3:f9:65:bb:1b:c7:d6:3b:86:06:27:91:8b:75:c1:
                    7a:43:88:8f:8e:17:de:94:46:16:d0:fa:55:3f:47:
                    f8:72:be:78:ba:a9:c9:8d:80:4a:ac:03:b9:8d:70:
                    bc:06:8f:e0:19:9f:0d:36:e7:69:85:ae:6d:10:2d:
                    db:f1:d6:cb:ea:18:ae:45:d3:25:41:40:9d:87:f2:
                    ae:c3:13:01:02:d8:15:e6:2c:b9:87:35:ff:49:24:
                    39:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:86:42:73:50:B3:D1:FD:5E:3B:95:3E:91:03:5B:E2:0C:91:4E:2D
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/6oZCc1Cz0f1eO5U-kQNb4gyRTi0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:85:b0:43:ee:74:56:00:59:29:88:c4:40:3e:35:1f:40:d9:
         fc:c8:a6:54:8e:74:d0:19:99:98:eb:40:e9:8b:2a:6e:6c:40:
         57:66:ba:9a:4c:18:30:e0:2b:07:ef:b7:98:10:c9:5e:a2:6e:
         26:f2:7c:38:c0:89:d2:d7:6d:73:94:43:32:14:88:5e:6b:f2:
         8b:0c:f2:ae:cb:5e:17:99:4f:bb:fd:e7:01:fc:8c:ed:dd:16:
         0a:9a:f8:ed:9b:c4:95:97:da:6b:a3:8f:78:b2:2e:73:78:99:
         73:4c:5e:20:d2:78:05:d4:f2:b6:28:fe:5b:f9:60:6d:52:14:
         06:5d:59:05:95:3f:94:38:13:e0:6c:bb:1b:f7:29:2f:a7:6f:
         c3:25:3c:af:9b:e5:cf:a1:4f:81:47:eb:27:9c:5c:c2:32:d5:
         26:7f:d1:21:27:a1:d9:c5:e3:1e:71:d2:95:92:8c:5e:7d:ae:
         d2:4c:c0:58:07:96:90:d2:4b:da:0d:2e:f5:4e:60:25:09:8b:
         64:16:7d:fe:a7:a5:3d:b6:bd:d1:49:5f:14:61:7e:a0:29:30:
         09:c0:ec:af:b9:e1:7f:79:75:63:8d:77:e0:c3:25:b1:01:7f:
         0e:99:dd:6b:6b:a8:99:73:7a:df:a5:30:fc:09:bb:15:20:88:
         3b:40:ad:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxQvN7OF8mbYVT6lbLCMg+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmE3NjVhMzkzMzY5Yzk2ZDhkODM2ZjIzZjc2ZTY3NDg5
YzdkZGUwHhcNMjMwMTAyMDY1NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTg2NDI3MzUwYjNkMWZkNWUzYjk1M2U5MTAzNWJlMjBjOTE0ZTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPLf1DtBAB0wFcJJjT82s6IFSXCm
JpXWu28NzUnwAFg4iaZcrxeDN1iNV6JftjHpDjquk2Cky6jWYkwdNlJfD/xxvWWZ
Ilg4WWDn9811FIXfumgrijLt8twxOcjBaL1B79FoW6mjgehfxUjw5j3QEKZ2EUqE
SXMJnj6XN4XC1IyuiP2H2oaFdc0ymr5o6tsa5iAWDhUGC36Uq9+oF1LhwKDgherj
+WW7G8fWO4YGJ5GLdcF6Q4iPjhfelEYW0PpVP0f4cr54uqnJjYBKrAO5jXC8Bo/g
GZ8NNudpha5tEC3b8dbL6hiuRdMlQUCdh/KuwxMBAtgV5iy5hzX/SSQ5fwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOqGQnNQs9H9XjuVPpEDW+IMkU4tMB8GA1UdIwQY
MBaAFGL6dlo5M2nJbY2DbyP3bmdInH3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXZwMldqa3phY2x0allOdklfZHVaMGljZmQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hZGZmODAtYjIwNy00ZmJkLWJmNWUt
MDdkZDFiNGM1NWQ5LzEvNm9aQ2MxQ3owZjFlTzVVLWtRTmI0Z3lSVGkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hZGZmODAtYjIwNy00ZmJkLWJmNWUtMDdkZDFiNGM1NWQ5
LzEvWXZwMldqa3phY2x0allOdklfZHVaMGljZmQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjpWMA0G
CSqGSIb3DQEBCwUAA4IBAQCqhbBD7nRWAFkpiMRAPjUfQNn8yKZUjnTQGZmY60Dp
iypubEBXZrqaTBgw4CsH77eYEMleom4m8nw4wInS121zlEMyFIhea/KLDPKuy14X
mU+7/ecB/Izt3RYKmvjtm8SVl9pro494si5zeJlzTF4g0ngF1PK2KP5b+WBtUhQG
XVkFlT+UOBPgbLsb9ykvp2/DJTyvm+XPoU+BR+snnFzCMtUmf9EhJ6HZxeMecdKV
koxefa7STMBYB5aQ0kvaDS71TmAlCYtkFn3+p6U9tr3RSV8UYX6gKTAJwOyvueF/
eXVjjXfgwyWxAX8Omd1ra6iZc3rfpTD8CbsVIIg7QK1N
-----END CERTIFICATE-----