Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/ypJ-V59VHGXg_X-IBo8ghJLD0a0.roa
File:                     ypJ-V59VHGXg_X-IBo8ghJLD0a0.roa (raw, json)
Hash identifier:          NfkqK0rs+C27UicMTzEOfzoBDCuD+qvKUTXF8p29bFY=
Subject key identifier:   CA:92:7E:57:9F:55:1C:65:E0:FD:7F:88:06:8F:20:84:92:C3:D1:AD
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       01857142F014C690490ED3F30939F1ED6D5D
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/ypJ-V59VHGXg_X-IBo8ghJLD0a0.roa
Signing time:             Mon 02 Jan 2023 06:54:50 +0000
ROA not before:           Mon 02 Jan 2023 06:54:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60721
IP address blocks:        45.66.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:42:f0:14:c6:90:49:0e:d3:f3:09:39:f1:ed:6d:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Jan  2 06:54:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ca927e579f551c65e0fd7f88068f208492c3d1ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:58:55:e2:d4:0a:6e:ff:1a:51:90:34:f2:10:
                    5c:b3:7b:61:b4:40:ef:68:5f:0e:04:98:f0:9a:5c:
                    14:7a:bd:48:d4:d7:75:f1:86:a6:52:6a:46:70:b6:
                    68:a3:ec:31:4c:70:8e:31:68:7b:31:bb:c8:94:69:
                    e5:e9:ad:a6:d8:92:4a:ce:35:a7:7d:ba:10:4b:52:
                    0a:5c:ea:4c:c0:5f:e7:ef:71:e5:5d:8e:b6:b8:15:
                    7e:56:31:8b:18:82:bb:78:96:8e:05:d4:72:8d:60:
                    4b:9e:d3:e9:b0:39:12:87:b2:29:4b:77:90:fa:0b:
                    e6:dd:27:94:7b:27:b6:70:7a:18:cf:29:f7:b1:a2:
                    1e:11:be:63:82:81:45:b7:5e:f8:70:39:66:5d:e8:
                    56:c7:64:08:9b:50:c9:7d:70:14:bc:f5:f1:7a:9a:
                    db:f4:a0:89:b5:d7:64:6c:ef:ef:d8:55:05:b2:10:
                    61:01:21:23:52:95:a0:e8:7f:f4:d3:aa:1c:79:b2:
                    43:20:1d:a9:1c:e4:31:e7:67:67:24:3d:57:4e:ee:
                    c4:0d:f2:bc:e9:c3:68:d1:3a:a1:59:ca:75:10:25:
                    87:25:f8:50:98:0a:35:16:2c:d0:3e:57:9a:93:5d:
                    b2:23:87:52:03:fd:44:32:18:10:77:23:23:c3:86:
                    6f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:92:7E:57:9F:55:1C:65:E0:FD:7F:88:06:8F:20:84:92:C3:D1:AD
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/ypJ-V59VHGXg_X-IBo8ghJLD0a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.66.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         f2:f5:b5:f9:23:c1:5b:e3:96:3e:a2:c1:4f:da:64:d3:47:6f:
         bd:0b:3a:2e:7d:c9:94:44:ea:b9:ea:75:db:f1:e3:42:2a:7f:
         b9:f5:92:d0:14:74:87:ac:22:06:44:05:e5:b7:14:05:f6:31:
         72:f3:a6:ce:1f:7c:a0:f2:6d:1a:58:9e:b5:2f:ab:4e:bf:f7:
         db:ca:0c:29:73:a5:9e:33:a3:e3:01:15:bb:a1:41:07:24:bc:
         03:e7:0c:22:5c:87:45:d7:0c:b5:5b:e6:38:0d:b1:bb:20:3f:
         e4:b0:7c:d9:a6:30:aa:e3:ea:33:c5:3f:da:13:17:de:ae:a1:
         ca:5b:e4:48:43:47:04:6f:35:da:92:5b:e5:cd:19:33:d4:da:
         60:5b:27:1d:b5:52:14:c1:b3:66:d2:29:0d:b2:9c:0a:dd:ac:
         35:bb:b9:3e:c1:75:5a:88:8d:ce:41:28:25:d4:8e:98:aa:54:
         67:5b:aa:41:3e:52:18:0d:cf:99:49:21:73:1f:a8:35:6e:7f:
         3d:48:f3:28:03:aa:5a:d6:eb:c5:8e:a1:81:9c:80:e1:31:b3:
         09:a4:52:25:9b:7e:04:83:65:54:77:ce:b8:18:64:0f:62:f7:
         77:e3:90:a9:60:0e:3d:e6:c2:9e:c3:ff:b0:a9:b5:e1:8f:0b:
         9e:b4:66:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxQvAUxpBJDtPzCTnx7W1dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmE3NjVhMzkzMzY5Yzk2ZDhkODM2ZjIzZjc2ZTY3NDg5
YzdkZGUwHhcNMjMwMTAyMDY1NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTkyN2U1NzlmNTUxYzY1ZTBmZDdmODgwNjhmMjA4NDkyYzNkMWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVhV4tQKbv8aUZA08hBcs3thtEDv
aF8OBJjwmlwUer1I1Nd18YamUmpGcLZoo+wxTHCOMWh7MbvIlGnl6a2m2JJKzjWn
fboQS1IKXOpMwF/n73HlXY62uBV+VjGLGIK7eJaOBdRyjWBLntPpsDkSh7IpS3eQ
+gvm3SeUeye2cHoYzyn3saIeEb5jgoFFt174cDlmXehWx2QIm1DJfXAUvPXxeprb
9KCJtddkbO/v2FUFshBhASEjUpWg6H/006ocebJDIB2pHOQx52dnJD1XTu7EDfK8
6cNo0TqhWcp1ECWHJfhQmAo1FizQPleak12yI4dSA/1EMhgQdyMjw4ZvUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMqSflefVRxl4P1/iAaPIISSw9GtMB8GA1UdIwQY
MBaAFGL6dlo5M2nJbY2DbyP3bmdInH3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXZwMldqa3phY2x0allOdklfZHVaMGljZmQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hZGZmODAtYjIwNy00ZmJkLWJmNWUt
MDdkZDFiNGM1NWQ5LzEveXBKLVY1OVZIR1hnX1gtSUJvOGdoSkxEMGEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hZGZmODAtYjIwNy00ZmJkLWJmNWUtMDdkZDFiNGM1NWQ5
LzEvWXZwMldqa3phY2x0allOdklfZHVaMGljZmQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUKUMA0G
CSqGSIb3DQEBCwUAA4IBAQDy9bX5I8Fb45Y+osFP2mTTR2+9CzoufcmUROq56nXb
8eNCKn+59ZLQFHSHrCIGRAXltxQF9jFy86bOH3yg8m0aWJ61L6tOv/fbygwpc6We
M6PjARW7oUEHJLwD5wwiXIdF1wy1W+Y4DbG7ID/ksHzZpjCq4+ozxT/aExferqHK
W+RIQ0cEbzXaklvlzRkz1NpgWycdtVIUwbNm0ikNspwK3aw1u7k+wXVaiI3OQSgl
1I6YqlRnW6pBPlIYDc+ZSSFzH6g1bn89SPMoA6pa1uvFjqGBnIDhMbMJpFIlm34E
g2VUd864GGQPYvd345CpYA495sKew/+wqbXhjwuetGYr
-----END CERTIFICATE-----