Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/RmPb4cqneBuzJKZh6NfuXqIeWdk.roa
File:                     RmPb4cqneBuzJKZh6NfuXqIeWdk.roa (raw, json)
Hash identifier:          kgSOS8AEWBOx2C98f4LKvW9ud4TSZ8mN1USmdxaDOe8=
Subject key identifier:   46:63:DB:E1:CA:A7:78:1B:B3:24:A6:61:E8:D7:EE:5E:A2:1E:59:D9
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       0186C1FE98F0B21F17B9EF1B2EBD25F1B289
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/RmPb4cqneBuzJKZh6NfuXqIeWdk.roa
Signing time:             Wed 08 Mar 2023 16:12:13 +0000
ROA not before:           Wed 08 Mar 2023 16:12:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201364
IP address blocks:        2.58.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:c1:fe:98:f0:b2:1f:17:b9:ef:1b:2e:bd:25:f1:b2:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Mar  8 16:12:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4663dbe1caa7781bb324a661e8d7ee5ea21e59d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6c:d1:5f:cb:b9:20:d1:35:21:e1:0c:35:08:
                    a4:d2:a9:32:c3:a3:fc:8f:cc:6a:4a:e0:6e:fa:13:
                    a5:1b:76:ba:0a:56:95:5a:5d:62:4b:0b:b9:c0:cf:
                    ef:0a:42:00:c8:57:a9:6f:c8:39:25:f8:28:86:77:
                    34:ae:3b:07:ac:da:66:a6:c1:86:f0:17:2c:48:42:
                    2d:73:0c:d0:00:17:2a:b5:c0:fe:81:79:3f:73:15:
                    a3:45:2a:b9:d6:db:e4:9b:d1:d3:d7:5d:88:55:37:
                    de:da:e1:e2:ba:4f:a7:24:6b:1b:3d:fe:15:6f:d2:
                    0f:c2:eb:94:c8:d0:b1:89:c0:f1:8a:d8:ec:eb:e1:
                    89:99:21:a0:d1:d2:85:8b:6e:3e:3f:da:66:55:16:
                    1d:b8:63:36:79:25:5b:ad:d1:0b:a2:46:5a:a4:0f:
                    a0:0b:fc:33:21:98:9e:11:a3:a3:20:39:b5:22:28:
                    78:0d:99:ff:cc:66:12:f9:f2:8d:e2:f7:33:0c:60:
                    be:5c:82:c1:6b:b6:88:1e:a5:f0:6e:ac:53:e6:30:
                    3f:11:7f:75:4c:9e:de:90:a7:df:cb:8c:8c:96:a9:
                    49:31:60:75:b3:94:98:7a:f6:86:c2:4e:a8:d5:bb:
                    8e:93:fc:e3:c5:73:b5:5a:db:b2:74:4f:7e:ff:e5:
                    3e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:63:DB:E1:CA:A7:78:1B:B3:24:A6:61:E8:D7:EE:5E:A2:1E:59:D9
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/RmPb4cqneBuzJKZh6NfuXqIeWdk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:b8:e0:67:f1:7c:70:79:f3:3d:e3:db:db:8c:0c:ff:05:61:
         ff:db:c4:e1:57:a7:36:d7:d6:bc:02:fb:5d:a8:d5:0f:28:fb:
         14:9a:2b:4e:91:cb:26:2e:c2:b7:1c:0d:5b:7c:57:2a:00:4d:
         7a:0d:26:41:a5:d4:1f:1e:d3:1a:f3:7a:59:e0:07:f2:13:62:
         47:05:25:37:1f:cf:63:bc:f3:81:62:10:5a:d1:dd:12:33:67:
         09:21:74:64:56:7d:30:73:28:21:cb:61:c1:22:b5:7a:54:d2:
         8e:4a:86:16:9f:61:4a:d6:3f:85:3e:94:58:34:9f:a3:b7:0b:
         d5:8a:86:36:58:ff:25:d7:30:34:88:de:fd:ea:ab:bf:88:d4:
         c5:f8:70:a5:c8:d3:1d:d2:67:6b:52:b7:59:36:6e:66:86:6c:
         ae:37:f1:c8:da:e1:77:7b:3f:62:27:01:a4:ac:68:21:60:57:
         a5:70:94:bc:a3:7f:9d:7a:4f:78:53:6f:28:46:71:f8:34:10:
         17:95:30:32:8f:d1:9a:1e:88:af:e4:c8:82:b0:58:74:55:11:
         3c:19:cf:9a:75:87:45:24:a2:b5:94:f3:26:f4:65:30:c9:c4:
         4b:50:e6:87:39:21:a9:69:bd:58:46:82:83:17:10:ad:b6:3d:
         4b:82:1a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----