Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/D5-yTgYWopMjQGsQTZs9ZgcZ_Fs.roa
File:                     D5-yTgYWopMjQGsQTZs9ZgcZ_Fs.roa (raw, json)
Hash identifier:          IXS+DO5EWBVU/nTs1xcB2/dikj2ArzVLa22YB4JxJl8=
Subject key identifier:   0F:9F:B2:4E:06:16:A2:93:23:40:6B:10:4D:9B:3D:66:07:19:FC:5B
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       01857EDD794388521DC3EDF77AECE9D4D5CE
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/D5-yTgYWopMjQGsQTZs9ZgcZ_Fs.roa
Signing time:             Wed 04 Jan 2023 22:18:41 +0000
ROA not before:           Wed 04 Jan 2023 22:18:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     63023
IP address blocks:        2.58.87.0/24 maxlen: 24
                          2.58.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:7e:dd:79:43:88:52:1d:c3:ed:f7:7a:ec:e9:d4:d5:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Jan  4 22:18:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0f9fb24e0616a29323406b104d9b3d660719fc5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3f:56:4d:94:01:c5:91:63:b6:9a:6b:52:5a:
                    3f:b6:2d:4f:9f:6c:e9:ab:d8:61:f3:23:fe:d6:3e:
                    6e:8b:a2:91:4a:f2:76:a7:b4:d8:de:46:b9:77:9c:
                    ed:0b:3a:9f:ca:39:16:87:92:9a:a7:bb:35:a2:b4:
                    bf:69:e1:54:5f:39:24:f0:c0:c8:40:22:86:22:96:
                    ca:76:81:4a:88:92:e6:98:72:c7:01:c2:5c:b6:f1:
                    10:e3:37:5d:5e:15:e4:54:4f:50:db:43:4d:68:57:
                    fa:40:15:03:03:75:98:53:36:6f:f3:84:7a:5b:2e:
                    07:f7:db:75:51:d8:d8:31:4d:0d:74:3d:0e:97:25:
                    d5:19:ec:db:27:29:4b:dd:7a:cc:46:f7:46:dc:b2:
                    fe:45:0e:e8:98:08:6f:c1:73:92:a7:ce:cc:2a:dc:
                    57:cf:b6:bc:c3:88:d8:79:1f:29:29:0b:90:6a:f6:
                    99:84:e7:32:bf:59:b6:e0:d4:b3:22:f0:79:c3:cc:
                    27:79:77:40:9a:50:8d:e2:fd:ce:d2:4b:ab:c9:c4:
                    ad:5d:93:b6:7b:f2:67:f8:eb:53:82:f9:84:32:c3:
                    c9:03:14:6b:9b:02:8b:14:31:8e:50:33:c8:b0:7e:
                    ed:0d:9f:d4:b8:00:30:8b:0b:5d:11:c6:4b:76:dd:
                    07:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9F:B2:4E:06:16:A2:93:23:40:6B:10:4D:9B:3D:66:07:19:FC:5B
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/D5-yTgYWopMjQGsQTZs9ZgcZ_Fs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:68:14:9e:52:f5:00:f8:e9:55:8b:0a:4d:fb:85:aa:19:bd:
         ef:5e:61:2f:90:50:b7:c8:58:85:d0:a2:ec:a1:fe:fb:26:6f:
         9a:f5:a5:a0:7c:63:11:d1:47:b9:7b:6c:0e:01:13:75:44:f2:
         3e:8f:68:7e:05:5e:27:1a:0b:70:3f:d3:cd:3d:65:ab:2f:3c:
         41:de:2f:96:d0:8d:1b:a2:5c:ee:47:93:bb:21:2d:89:0d:4b:
         64:8e:55:45:82:d7:6d:04:c1:06:6c:13:7c:95:d0:04:5f:14:
         fb:40:85:7f:e1:94:b9:1e:bb:fe:ee:18:b0:b4:c7:c4:0f:57:
         8a:2c:24:1f:91:64:35:ff:6d:7e:1f:33:84:aa:8d:1b:e6:85:
         ce:41:82:70:21:8e:6a:ea:11:fd:66:73:59:f9:37:32:e6:26:
         de:d2:ad:50:09:02:52:b6:ba:6d:a5:12:7e:4d:c3:35:43:fb:
         76:23:07:45:5f:35:c7:f2:34:61:e2:dc:33:4b:ac:f8:aa:07:
         96:57:68:be:72:5d:42:71:62:66:4b:49:04:0a:f5:19:89:c9:
         dd:aa:3b:c3:ce:5d:f5:23:1e:76:2f:aa:43:c3:f5:05:94:bc:
         c9:5d:6e:80:81:1f:a0:47:fb:44:2b:e3:93:94:ce:75:59:3b:
         91:c7:47:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----