Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/3130332e3132312e34312e302f32342d3234203d3e203630383538.roa
File:                     3130332e3132312e34312e302f32342d3234203d3e203630383538.roa (raw, json)
Hash identifier:          b2x7MZprqbbAIpsx+sSxiXsr5J83A4QTubzNhjLJQpY=
Subject key identifier:   50:A3:A6:92:9E:6A:D4:70:16:6B:8F:8E:84:B1:65:A7:22:43:13:28
Certificate issuer:       /CN=A916C10F0000/serialNumber=8C0E373D1F19183CF1BD8220B14020B8BF2C674D
Certificate serial:       4751CA3F2010DAE2889A46C3C83820CFEB102A7A
Authority key identifier: 8C:0E:37:3D:1F:19:18:3C:F1:BD:82:20:B1:40:20:B8:BF:2C:67:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jA43PR8ZGDzxvYIgsUAguL8sZ00.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/3130332e3132312e34312e302f32342d3234203d3e203630383538.roa
Signing time:             Wed 10 Apr 2024 10:23:58 +0000
ROA not before:           Wed 10 Apr 2024 10:18:58 +0000
ROA not after:            Wed 09 Apr 2025 10:23:58 +0000
asID:                     60858
IP address blocks:        103.121.41.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:51:ca:3f:20:10:da:e2:88:9a:46:c3:c8:38:20:cf:eb:10:2a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C10F0000/serialNumber=8C0E373D1F19183CF1BD8220B14020B8BF2C674D
        Validity
            Not Before: Apr 10 10:18:58 2024 GMT
            Not After : Apr  9 10:23:58 2025 GMT
        Subject: CN=50A3A6929E6AD470166B8F8E84B165A722431328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c9:fd:b9:cc:c5:b0:96:e0:b0:98:cd:68:83:
                    e8:41:87:0a:25:11:f7:fd:3a:95:5b:a1:f0:29:72:
                    c4:00:6c:3e:ec:3d:33:c1:74:08:71:18:c7:0c:34:
                    d7:e8:fd:6b:85:0a:18:3e:e7:bb:73:1d:b6:89:3b:
                    dd:72:74:c3:15:64:84:85:aa:54:fe:f3:5c:50:ff:
                    3c:39:e8:9e:1a:08:29:ac:99:39:16:03:bc:d7:5a:
                    30:36:ec:c3:af:96:46:9e:ef:94:bd:fa:2d:2b:c7:
                    a6:95:ec:ca:94:57:ee:0a:65:fd:5f:3b:87:c9:93:
                    02:07:2c:71:6e:08:5d:6e:6c:17:15:f1:3d:cc:a5:
                    9f:6b:91:a7:0d:01:f0:b2:7d:93:9e:69:f0:a5:63:
                    a9:24:e5:3f:db:8a:a2:35:69:9a:84:f2:bb:30:ab:
                    be:f4:d3:a9:2e:5e:d1:b3:fc:d2:1d:50:6b:21:b7:
                    51:56:79:08:bc:f1:54:84:19:04:c1:7f:32:30:82:
                    13:2c:f6:b9:74:e7:35:3c:00:6d:a9:d2:ea:91:af:
                    ef:0b:2f:a4:6f:28:3c:ba:b7:8d:c7:17:0a:ba:cc:
                    2f:8e:68:8a:77:c6:4a:09:32:5e:b1:a8:d8:fa:7d:
                    00:b0:8b:f9:7f:d1:d3:f5:0b:0b:95:3c:2b:b8:cd:
                    ba:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A3:A6:92:9E:6A:D4:70:16:6B:8F:8E:84:B1:65:A7:22:43:13:28
            X509v3 Authority Key Identifier:
                keyid:8C:0E:37:3D:1F:19:18:3C:F1:BD:82:20:B1:40:20:B8:BF:2C:67:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/8C0E373D1F19183CF1BD8220B14020B8BF2C674D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jA43PR8ZGDzxvYIgsUAguL8sZ00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/3130332e3132312e34312e302f32342d3234203d3e203630383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:da:e8:3f:e5:a2:89:be:b5:0b:56:70:77:41:08:0c:6b:94:
         1f:28:dd:d8:a2:84:99:b0:d9:54:e9:ae:b7:db:7d:e9:5c:f9:
         06:9d:7c:8c:88:79:2f:cb:f2:29:d9:0c:1a:43:1e:c4:b4:62:
         30:15:96:31:a7:2e:46:91:6c:fb:bc:0a:78:f0:87:51:0e:ff:
         d0:75:8f:3c:6d:5b:b2:a2:61:d9:c9:fe:3d:f0:d1:94:f6:7e:
         f3:f6:44:09:85:b3:af:d5:0c:32:42:8b:3b:36:01:04:e0:99:
         e8:26:9c:74:1a:e8:9d:31:84:c4:3c:3f:b1:94:b2:a2:06:46:
         4f:90:95:72:5b:fc:0a:eb:f5:9e:36:0b:cd:a7:11:bd:a1:15:
         14:d9:37:ba:d3:bd:7f:42:9d:e4:24:3a:02:37:5b:ed:c5:3a:
         1b:1a:bf:e3:f0:67:94:27:61:42:b0:da:5b:d1:ee:15:26:44:
         a1:d2:38:14:7c:e7:0a:47:29:cc:d6:ed:3e:67:b8:50:3e:f4:
         47:3d:48:14:57:aa:70:a2:e2:5b:04:fe:51:ca:1f:6b:7a:20:
         d1:ea:96:f5:99:b7:3b:01:83:c2:56:4d:cb:3a:62:a9:f9:ec:
         fd:d9:1e:6c:bb:94:30:d1:78:8a:0d:96:13:6e:24:78:2b:71:
         22:c0:f1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----