Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/wz53RwSlQa3jlR2jpaGoqpwh5kE.roa
File:                     wz53RwSlQa3jlR2jpaGoqpwh5kE.roa (raw, json)
Hash identifier:          i6coEX0Pcj3ILbrQiWbJ9XMyRFSuAAoMf0Bn/rxG118=
Subject key identifier:   C3:3E:77:47:04:A5:41:AD:E3:95:1D:A3:A5:A1:A8:AA:9C:21:E6:41
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       01857142F65B0DB584A89E3FB4EC391C34C1
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/wz53RwSlQa3jlR2jpaGoqpwh5kE.roa
Signing time:             Mon 02 Jan 2023 06:54:51 +0000
ROA not before:           Mon 02 Jan 2023 06:54:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212238
IP address blocks:        45.66.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:42:f6:5b:0d:b5:84:a8:9e:3f:b4:ec:39:1c:34:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Jan  2 06:54:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c33e774704a541ade3951da3a5a1a8aa9c21e641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:59:c9:c2:34:66:83:15:11:c8:69:3e:cc:91:
                    d3:33:ca:a0:83:c8:44:4b:ba:c6:79:ca:92:c6:de:
                    1c:09:37:78:75:b7:55:b9:29:d8:b1:8b:7f:95:09:
                    6b:3e:cf:c8:40:0a:dd:92:cf:7a:7e:f2:90:1c:ea:
                    4e:f2:f1:43:d5:8c:a6:4c:91:54:31:f6:f9:09:8d:
                    fc:d7:78:34:3d:c9:ab:8a:60:e9:f0:24:08:1c:90:
                    b0:35:8a:ef:89:e5:d0:9c:69:28:cf:dc:8f:46:af:
                    19:73:93:79:3e:c1:d5:20:57:ad:da:cc:aa:e8:a5:
                    69:66:24:6e:89:65:8a:75:c9:70:d8:fd:c2:f0:9a:
                    c1:79:84:a8:31:bb:a0:92:69:b6:57:cb:4e:ca:14:
                    1e:ca:e4:42:96:d7:69:2d:75:d9:76:e7:76:98:ba:
                    00:96:9f:8d:54:c0:5f:38:c1:f8:93:bb:15:10:f6:
                    32:11:54:45:58:ad:0d:da:09:45:db:69:41:b0:6f:
                    bd:80:11:13:b9:b9:22:3d:38:f6:99:04:c7:b2:c9:
                    3d:cc:2c:b1:2f:20:dc:70:70:88:4d:75:62:ee:d8:
                    29:df:29:16:b2:1e:9d:03:05:96:e9:fc:32:1f:4e:
                    97:44:77:1f:4d:af:33:83:b2:e5:c0:40:68:eb:1a:
                    d9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3E:77:47:04:A5:41:AD:E3:95:1D:A3:A5:A1:A8:AA:9C:21:E6:41
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/wz53RwSlQa3jlR2jpaGoqpwh5kE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.66.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:60:ff:a8:72:4e:8a:cf:25:8b:bf:f7:43:b2:8b:b9:96:4e:
         fd:09:28:f7:c2:07:cb:ef:50:dd:f7:a5:d0:87:cc:5f:04:a1:
         2f:38:88:f9:50:97:64:3f:d2:0c:93:f2:44:e8:d3:7e:60:49:
         13:6f:cb:af:fc:ae:96:4d:f4:48:22:af:02:81:88:63:e1:38:
         2f:de:0e:44:31:68:24:b2:99:d8:50:42:9f:e0:62:e3:86:7c:
         7d:55:85:7c:10:18:9a:91:06:49:67:03:6c:30:b2:c8:99:f0:
         22:1d:1f:48:35:2f:c1:0f:a6:60:5c:3f:a8:52:1f:ec:f3:e1:
         35:27:6e:b2:6a:81:04:34:2f:d4:09:ad:93:3d:c2:30:d9:88:
         7a:4b:35:94:ad:e3:b8:7a:cb:60:71:f3:9f:7e:62:c0:00:ef:
         ea:6e:15:f5:28:b2:0a:a1:35:39:71:01:7d:5e:7c:56:ba:3b:
         7f:77:46:37:82:3c:c7:2f:d5:e5:b5:ca:c8:36:6a:9b:5f:64:
         6d:5c:54:b5:5f:30:ea:12:36:43:79:c2:c2:05:b0:8c:e5:c5:
         31:42:69:29:30:1c:51:47:c4:94:ef:1c:54:bb:f4:6c:2d:8a:
         6a:45:ce:8e:45:b3:65:1c:32:d5:ba:8d:af:c4:c0:f2:ca:86:
         3e:7b:0f:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxQvZbDbWEqJ4/tOw5HDTBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmE3NjVhMzkzMzY5Yzk2ZDhkODM2ZjIzZjc2ZTY3NDg5
YzdkZGUwHhcNMjMwMTAyMDY1NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzNlNzc0NzA0YTU0MWFkZTM5NTFkYTNhNWExYThhYTljMjFlNjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFnJwjRmgxURyGk+zJHTM8qgg8hE
S7rGecqSxt4cCTd4dbdVuSnYsYt/lQlrPs/IQArdks96fvKQHOpO8vFD1YymTJFU
Mfb5CY3813g0PcmrimDp8CQIHJCwNYrvieXQnGkoz9yPRq8Zc5N5PsHVIFet2syq
6KVpZiRuiWWKdclw2P3C8JrBeYSoMbugkmm2V8tOyhQeyuRCltdpLXXZdud2mLoA
lp+NVMBfOMH4k7sVEPYyEVRFWK0N2glF22lBsG+9gBETubkiPTj2mQTHssk9zCyx
LyDccHCITXVi7tgp3ykWsh6dAwWW6fwyH06XRHcfTa8zg7LlwEBo6xrZuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMM+d0cEpUGt45Udo6WhqKqcIeZBMB8GA1UdIwQY
MBaAFGL6dlo5M2nJbY2DbyP3bmdInH3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXZwMldqa3phY2x0allOdklfZHVaMGljZmQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hZGZmODAtYjIwNy00ZmJkLWJmNWUt
MDdkZDFiNGM1NWQ5LzEvd3o1M1J3U2xRYTNqbFIyanBhR29xcHdoNWtFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hZGZmODAtYjIwNy00ZmJkLWJmNWUtMDdkZDFiNGM1NWQ5
LzEvWXZwMldqa3phY2x0allOdklfZHVaMGljZmQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUKVMA0G
CSqGSIb3DQEBCwUAA4IBAQB0YP+ock6KzyWLv/dDsou5lk79CSj3wgfL71Dd96XQ
h8xfBKEvOIj5UJdkP9IMk/JE6NN+YEkTb8uv/K6WTfRIIq8CgYhj4Tgv3g5EMWgk
spnYUEKf4GLjhnx9VYV8EBiakQZJZwNsMLLImfAiHR9INS/BD6ZgXD+oUh/s8+E1
J26yaoEENC/UCa2TPcIw2Yh6SzWUreO4estgcfOffmLAAO/qbhX1KLIKoTU5cQF9
XnxWujt/d0Y3gjzHL9XltcrINmqbX2RtXFS1XzDqEjZDecLCBbCM5cUxQmkpMBxR
R8SU7xxUu/RsLYpqRc6ORbNlHDLVuo2vxMDyyoY+ew9G
-----END CERTIFICATE-----