Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/326131323a646434373a383466663a3a2f34382d3438203d3e203134363138.roa
File:                     326131323a646434373a383466663a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier:          oG+PN41Q4LjOy3rd+9OXVEhSQIQ8kCfFtTjyFSKl/OA=
Subject key identifier:   5D:27:16:CD:85:92:32:0D:86:1E:23:29:84:AC:64:F0:65:08:F9:40
Certificate issuer:       /CN=34E6AAC74193FE34C57CB5F562608EE1E50DAD51
Certificate serial:       69D82B6BF698DB7ABCDEFF3F96D8054DB277C537
Authority key identifier: 34:E6:AA:C7:41:93:FE:34:C5:7C:B5:F5:62:60:8E:E1:E5:0D:AD:51
Authority info access:    rsync://rpki.co/repo/AS945/1/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/326131323a646434373a383466663a3a2f34382d3438203d3e203134363138.roa
Signing time:             Sat 14 Oct 2023 16:06:43 +0000
ROA not before:           Sat 14 Oct 2023 16:01:43 +0000
ROA not after:            Sat 12 Oct 2024 16:06:43 +0000
asID:                     14618
IP address blocks:        2a12:dd47:84ff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d8:2b:6b:f6:98:db:7a:bc:de:ff:3f:96:d8:05:4d:b2:77:c5:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34E6AAC74193FE34C57CB5F562608EE1E50DAD51
        Validity
            Not Before: Oct 14 16:01:43 2023 GMT
            Not After : Oct 12 16:06:43 2024 GMT
        Subject: CN=5D2716CD8592320D861E232984AC64F06508F940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4d:f6:e9:08:a7:3b:af:19:11:3e:bd:e7:3b:
                    b0:91:c0:a2:c4:aa:fc:22:92:3f:b1:b6:0b:ee:ef:
                    7b:97:a6:7a:94:b3:0a:d2:5a:ec:7e:89:3c:d5:46:
                    d7:5e:d2:07:17:0a:ec:54:7a:55:17:0f:05:b2:e2:
                    36:c0:8e:23:c2:a0:40:2a:3c:31:2a:51:a0:60:c7:
                    7d:ab:38:97:84:d3:96:88:e0:0e:26:8f:d9:26:1d:
                    9f:c3:72:6a:b6:64:1b:0c:c1:f7:76:64:08:7c:23:
                    dd:4a:2b:09:45:2e:f9:b6:b9:9e:af:ca:00:fd:8f:
                    40:24:4b:d6:b7:3c:39:46:25:9b:e4:35:4d:35:de:
                    b7:7a:d7:07:32:12:bb:4c:b8:4c:a6:1b:13:91:f9:
                    0d:e1:3b:62:d1:59:12:15:7d:7a:f1:c5:c8:19:da:
                    41:8e:2d:88:89:23:ec:f6:36:de:73:d9:9f:7b:87:
                    4a:41:24:8e:a1:d1:f3:e3:a5:89:41:fd:98:0b:5b:
                    92:15:2c:af:6f:14:77:4a:a0:56:84:28:20:72:bb:
                    77:e7:d8:20:57:09:59:5a:70:7d:58:9a:76:74:16:
                    e5:41:6f:0e:0a:b4:8f:12:3c:64:79:0e:a9:9a:78:
                    33:3b:5e:c7:54:28:db:86:cc:82:1d:3d:18:5c:99:
                    ff:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:27:16:CD:85:92:32:0D:86:1E:23:29:84:AC:64:F0:65:08:F9:40
            X509v3 Authority Key Identifier:
                keyid:34:E6:AA:C7:41:93:FE:34:C5:7C:B5:F5:62:60:8E:E1:E5:0D:AD:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/326131323a646434373a383466663a3a2f34382d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:84ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:37:2c:e3:37:ae:da:eb:b5:bf:30:aa:53:fe:12:21:9b:35:
         73:fa:90:f8:82:94:3b:e8:c1:cb:a2:a5:2a:89:4a:33:95:29:
         b4:31:da:31:6e:c7:6b:80:9e:9a:38:74:3f:f6:e5:ff:45:02:
         25:20:6f:04:94:6a:b4:14:af:8c:c1:55:33:3a:82:60:7e:70:
         56:ad:43:e9:f3:1b:bc:2f:aa:7a:c2:a1:53:8d:13:b7:8a:2e:
         c7:77:4b:a2:ec:7d:a2:40:31:41:66:79:8b:c7:5d:cf:56:c2:
         82:98:95:b4:05:25:55:4d:50:ed:66:f7:7f:cb:65:0e:f4:ca:
         9c:1a:af:bc:37:0a:6b:5b:ad:08:ae:e7:0e:1a:05:a9:c6:04:
         28:f2:2b:b7:71:36:a0:b8:08:c3:cb:93:e1:30:02:c9:33:1f:
         07:d4:37:ae:43:5b:be:a3:16:2f:ac:5f:d8:b7:4d:2d:8c:e3:
         30:71:b2:32:43:81:2c:2f:d1:9d:d1:fb:4b:74:75:05:68:71:
         d8:23:db:57:d6:c2:79:ae:02:2e:3c:e0:f3:2d:84:1f:73:89:
         8a:6a:73:b9:99:3d:92:99:9b:ae:af:c8:d3:2a:46:df:7b:c7:
         83:74:1a:5c:f2:97:1a:4f:8e:89:e9:a7:5b:7d:7a:9b:31:c2:
         4d:dc:eb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----