Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/LWpFkfbPYxAPuLQoOlpyuTpOIxo.roa
File:                     LWpFkfbPYxAPuLQoOlpyuTpOIxo.roa (raw, json)
Hash identifier:          bK/BWsl5/3RbpTzDlCHc+2JkydhQ2NUx6bNstJkPC9A=
Subject key identifier:   2D:6A:45:91:F6:CF:63:10:0F:B8:B4:28:3A:5A:72:B9:3A:4E:23:1A
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       01857142EDDF0711D4D9DCF77D5963A9AAF4
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/LWpFkfbPYxAPuLQoOlpyuTpOIxo.roa
Signing time:             Mon 02 Jan 2023 06:54:49 +0000
ROA not before:           Mon 02 Jan 2023 06:54:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43043
IP address blocks:        45.66.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:42:ed:df:07:11:d4:d9:dc:f7:7d:59:63:a9:aa:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Jan  2 06:54:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2d6a4591f6cf63100fb8b4283a5a72b93a4e231a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:83:dd:75:9c:dc:ed:f2:c3:d1:22:39:48:e9:
                    29:88:a0:45:e5:ba:08:f2:0b:a5:12:ad:38:15:bf:
                    7a:e0:15:b2:a8:7a:ca:8c:ee:91:7e:a7:85:fc:78:
                    0f:85:fc:34:64:f0:20:87:94:8a:16:56:41:be:44:
                    d5:c3:2d:6e:92:99:3c:9c:21:4f:87:ac:c1:07:c2:
                    88:f3:8d:58:67:a5:6b:3d:c6:86:d3:7b:6b:46:07:
                    41:24:db:fd:8a:c6:cb:39:e3:3e:ad:55:aa:35:32:
                    fe:8c:28:fd:fb:93:4d:1e:ac:9d:1b:9d:f9:c0:7d:
                    db:bd:2d:fb:47:21:ba:9a:53:89:f8:6f:b6:1b:c7:
                    4a:53:9a:50:b5:83:bb:aa:5b:dc:91:a4:a8:88:29:
                    45:5c:d9:f2:d9:4c:2b:fe:cb:20:c0:2e:26:c1:3a:
                    11:c2:8d:29:bd:81:77:81:b6:5d:8c:69:12:90:f8:
                    16:a0:37:e8:ff:21:0a:c5:a7:09:86:43:34:7e:a4:
                    95:cf:f3:ea:a9:b8:e3:dc:9f:b8:d6:f2:0b:db:cb:
                    00:44:f4:91:ac:88:44:a1:0a:47:50:b8:0c:7f:a4:
                    e6:6f:48:e9:ff:f0:73:60:aa:01:07:7b:97:70:dc:
                    75:f9:7a:cc:b7:58:db:98:f9:70:cb:e3:4f:91:31:
                    8d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6A:45:91:F6:CF:63:10:0F:B8:B4:28:3A:5A:72:B9:3A:4E:23:1A
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/LWpFkfbPYxAPuLQoOlpyuTpOIxo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.66.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:15:5e:99:d3:20:d4:65:3e:dd:da:68:37:45:0b:4b:75:5b:
         95:9f:4b:11:97:08:b2:a7:a3:04:ee:b1:7d:1d:73:ed:52:c1:
         09:94:93:b5:b3:5b:4f:d0:39:3f:e8:66:7d:c4:08:8d:06:7f:
         0b:09:76:ba:e7:6b:e8:af:76:38:e3:de:1f:fc:45:92:45:79:
         5b:04:40:cf:f9:af:ec:54:87:d4:14:6e:33:42:a4:53:6d:1c:
         fe:5f:6e:7e:55:0b:ec:a6:62:1d:62:b9:20:04:75:6f:06:51:
         dc:2e:17:a5:6e:2d:68:0c:8b:8a:d3:6b:8f:c7:38:54:9d:d4:
         74:4e:7d:75:ee:cc:b2:c7:e1:bf:3f:bf:15:63:1e:4a:ca:69:
         e1:46:3d:5d:8a:be:ab:f6:95:19:11:a0:41:67:2f:b8:e1:00:
         24:6c:1d:06:4d:4e:a2:8f:d8:42:72:8e:7c:96:53:2a:fb:49:
         f0:a5:7e:64:f4:5d:9c:24:c4:c9:dd:3c:a1:6c:d0:34:ec:55:
         1e:3c:18:eb:17:9c:7d:5c:06:b8:87:2e:f5:5b:30:91:4d:b2:
         6a:00:3a:20:b8:3c:64:2c:fd:20:80:04:7b:db:73:8e:bd:20:
         cc:57:c6:01:2d:a1:d8:5e:7d:d4:b4:86:da:27:e8:04:69:cf:
         8e:9e:17:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----