Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/3130332e3132312e34332e302f32342d3234203d3e20323135363035.roa
File:                     3130332e3132312e34332e302f32342d3234203d3e20323135363035.roa (raw, json)
Hash identifier:          ONO8IqEAMlFN6LY66BDsbVYG+zLKhlVwVU/DrWJV+WQ=
Subject key identifier:   C2:DE:82:E9:B6:10:4E:CF:82:71:0A:D9:D9:6F:FA:CE:7F:B8:E9:F5
Certificate issuer:       /CN=A916C10F0000/serialNumber=8C0E373D1F19183CF1BD8220B14020B8BF2C674D
Certificate serial:       35DFC93FF9C30C6C238E3AF24115551F3E9D0FB4
Authority key identifier: 8C:0E:37:3D:1F:19:18:3C:F1:BD:82:20:B1:40:20:B8:BF:2C:67:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jA43PR8ZGDzxvYIgsUAguL8sZ00.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/3130332e3132312e34332e302f32342d3234203d3e20323135363035.roa
Signing time:             Thu 11 Apr 2024 19:36:49 +0000
ROA not before:           Thu 11 Apr 2024 19:31:49 +0000
ROA not after:            Thu 10 Apr 2025 19:36:49 +0000
asID:                     215605
IP address blocks:        103.121.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:df:c9:3f:f9:c3:0c:6c:23:8e:3a:f2:41:15:55:1f:3e:9d:0f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C10F0000/serialNumber=8C0E373D1F19183CF1BD8220B14020B8BF2C674D
        Validity
            Not Before: Apr 11 19:31:49 2024 GMT
            Not After : Apr 10 19:36:49 2025 GMT
        Subject: CN=C2DE82E9B6104ECF82710AD9D96FFACE7FB8E9F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c8:93:75:73:89:54:c7:e9:a3:c8:8f:c5:4d:
                    38:2b:bb:9f:a5:73:0a:78:58:d9:8b:10:c8:83:b8:
                    15:04:90:f8:d2:2a:98:92:02:a4:75:a2:1d:75:2b:
                    8b:0a:35:06:b2:60:c5:40:64:23:3a:a6:59:d8:45:
                    d5:b9:22:7f:6c:d5:30:8c:9f:5a:09:e5:d5:73:d0:
                    db:cf:21:ea:e9:fd:fe:56:01:d8:0e:20:ce:19:d0:
                    42:41:39:53:37:73:4f:29:54:40:17:a7:c7:94:66:
                    4d:2f:84:ef:82:57:fd:4a:59:23:9c:f8:ad:fa:a6:
                    3d:97:42:01:f3:61:10:d9:d3:f0:64:65:23:50:ec:
                    b3:ff:66:50:4d:4b:74:16:70:1b:42:bf:58:b4:dc:
                    76:d6:89:8c:eb:29:e1:17:50:da:7a:ed:9b:8d:50:
                    8d:49:22:11:9d:f3:78:2f:0f:05:6a:4c:37:d4:b1:
                    80:c0:5f:c0:83:a9:b7:9b:b7:17:05:8c:70:23:72:
                    22:1a:de:53:c7:f8:d6:97:73:25:0a:78:7b:7b:a5:
                    69:9b:80:6d:79:47:d7:b5:f4:a5:16:cc:62:13:9f:
                    fa:1e:a7:13:3a:6d:db:b3:ba:21:99:7f:cb:b9:03:
                    ff:f8:09:00:93:44:fd:c7:4d:f5:33:ea:cc:d9:06:
                    7b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DE:82:E9:B6:10:4E:CF:82:71:0A:D9:D9:6F:FA:CE:7F:B8:E9:F5
            X509v3 Authority Key Identifier:
                keyid:8C:0E:37:3D:1F:19:18:3C:F1:BD:82:20:B1:40:20:B8:BF:2C:67:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/8C0E373D1F19183CF1BD8220B14020B8BF2C674D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jA43PR8ZGDzxvYIgsUAguL8sZ00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/3130332e3132312e34332e302f32342d3234203d3e20323135363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:dd:80:59:35:1b:8e:71:f8:ec:65:a8:72:ce:c3:76:f5:c6:
         62:24:78:f5:37:0b:3e:35:a5:70:64:b3:ca:33:73:89:25:62:
         42:f2:65:6d:d4:32:7f:64:2f:a0:73:8b:85:81:db:19:f7:a0:
         f6:d7:9d:40:4b:d1:ca:73:6a:60:9e:99:55:62:86:d0:06:f3:
         ff:f6:fc:a8:a2:31:9e:a5:15:73:68:86:fa:b3:58:67:9b:9f:
         f9:41:36:03:b4:5f:d9:6d:1e:6b:55:91:53:e3:c7:39:45:e4:
         0c:5d:70:89:7c:f1:72:c0:c6:65:7b:66:77:fe:9b:15:f0:b4:
         e7:59:3f:15:aa:24:0b:93:b6:79:1d:40:84:5a:6c:40:ff:c3:
         b7:86:cf:cc:65:15:28:0a:86:62:03:91:7d:1a:b8:0d:f9:15:
         c8:7c:ab:89:4e:c1:bb:7f:07:98:d3:bd:52:d4:17:8d:8c:6d:
         65:59:7b:65:aa:42:aa:02:69:3d:37:71:de:3b:9c:0d:f6:4f:
         5d:84:79:90:85:35:ad:7f:88:dc:1e:ec:ba:ca:e8:91:2b:31:
         78:d8:66:12:66:4c:5a:49:a2:a3:96:90:3f:62:ae:79:b0:ac:
         7a:36:d7:00:6e:70:40:40:4c:d4:10:9d:96:b3:0e:7b:85:a9:
         01:17:aa:33
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgIUNd/JP/nDDGwjjjryQRVVHz6dD7QwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNkMxMEYwMDAwMTEwLwYDVQQFEyg4QzBFMzczRDFG
MTkxODNDRjFCRDgyMjBCMTQwMjBCOEJGMkM2NzREMB4XDTI0MDQxMTE5MzE0OVoX
DTI1MDQxMDE5MzY0OVowMzExMC8GA1UEAxMoQzJERTgyRTlCNjEwNEVDRjgyNzEw
QUQ5RDk2RkZBQ0U3RkI4RTlGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJPIk3VziVTH6aPIj8VNOCu7n6VzCnhY2YsQyIO4FQSQ+NIqmJICpHWiHXUr
iwo1BrJgxUBkIzqmWdhF1bkif2zVMIyfWgnl1XPQ288h6un9/lYB2A4gzhnQQkE5
UzdzTylUQBenx5RmTS+E74JX/UpZI5z4rfqmPZdCAfNhENnT8GRlI1Dss/9mUE1L
dBZwG0K/WLTcdtaJjOsp4RdQ2nrtm41QjUkiEZ3zeC8PBWpMN9SxgMBfwIOpt5u3
FwWMcCNyIhreU8f41pdzJQp4e3ulaZuAbXlH17X0pRbMYhOf+h6nEzpt27O6IZl/
y7kD//gJAJNE/cdN9TPqzNkGe2ECAwEAAaOCAlkwggJVMB0GA1UdDgQWBBTC3oLp
thBOz4JxCtnZb/rOf7jp9TAfBgNVHSMEGDAWgBSMDjc9HxkYPPG9giCxQCC4vyxn
TTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wNDAzMmM4Zi0x
ZDU3LTRjM2ItOTA0My1hMGU3ZmViZjE2N2QvMy84QzBFMzczRDFGMTkxODNDRjFC
RDgyMjBCMTQwMjBCOEJGMkM2NzRELmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB
BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1
ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9qQTQzUFI4WkdEenh2WUlnc1VBZ3VM
OHNaMDAuY2VyMIGvBggrBgEFBQcBCwSBojCBnzCBnAYIKwYBBQUHMAuGgY9yc3lu
YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA0MDMyYzhm
LTFkNTctNGMzYi05MDQzLWEwZTdmZWJmMTY3ZC8zLzMxMzAzMzJlMzEzMjMxMmUz
NDMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM1MzYzMDM1LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAZ3krMA0GCSqGSIb3DQEBCwUAA4IBAQBZ3YBZNRuOcfjsZahyzsN29cZiJHj1
Nws+NaVwZLPKM3OJJWJC8mVt1DJ/ZC+gc4uFgdsZ96D2151AS9HKc2pgnplVYobQ
BvP/9vyoojGepRVzaIb6s1hnm5/5QTYDtF/ZbR5rVZFT48c5ReQMXXCJfPFywMZl
e2Z3/psV8LTnWT8VqiQLk7Z5HUCEWmxA/8O3hs/MZRUoCoZiA5F9GrgN+RXIfKuJ
TsG7fweY071S1BeNjG1lWXtlqkKqAmk9N3HeO5wN9k9dhHmQhTWtf4jcHuy6yuiR
KzF42GYSZkxaSaKjlpA/Yq55sKx6NtcAbnBAQEzUEJ2Wsw57hakBF6oz
-----END CERTIFICATE-----