Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2de6eee2-7e59-4b38-b0b0-c931d6a7af38/0/323030313a3637633a313239633a3a2f34382d3438203d3e20323030393735.roa
File:                     323030313a3637633a313239633a3a2f34382d3438203d3e20323030393735.roa (raw, json)
Hash identifier:          jA9jY0dvmgIsSMiw47W8X92LxTzwIwOzJBbP3AtjHdQ=
Subject key identifier:   E5:A0:A0:CD:03:B7:87:4A:AC:88:95:75:E4:22:C1:C8:16:67:0E:23
Certificate issuer:       /CN=7cf58a51fb1af5af7586050df9a4d20deed5e258
Certificate serial:       7F123E3C31E4F22303281D47D77BE20A14BC7345
Authority key identifier: 7C:F5:8A:51:FB:1A:F5:AF:75:86:05:0D:F9:A4:D2:0D:EE:D5:E2:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fPWKUfsa9a91hgUN-aTSDe7V4lg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2de6eee2-7e59-4b38-b0b0-c931d6a7af38/0/323030313a3637633a313239633a3a2f34382d3438203d3e20323030393735.roa
Signing time:             Sun 24 Sep 2023 11:46:06 +0000
ROA not before:           Sun 24 Sep 2023 11:41:06 +0000
ROA not after:            Sun 22 Sep 2024 11:46:06 +0000
asID:                     200975
IP address blocks:        2001:67c:129c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:12:3e:3c:31:e4:f2:23:03:28:1d:47:d7:7b:e2:0a:14:bc:73:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cf58a51fb1af5af7586050df9a4d20deed5e258
        Validity
            Not Before: Sep 24 11:41:06 2023 GMT
            Not After : Sep 22 11:46:06 2024 GMT
        Subject: CN=E5A0A0CD03B7874AAC889575E422C1C816670E23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2f:9c:6c:d5:42:c3:43:d8:cf:ca:23:d2:90:
                    db:0a:ee:86:2b:3c:ca:b5:74:48:fd:a8:61:17:59:
                    f2:78:09:18:5a:c3:0b:8a:4c:ea:0f:c8:f3:26:cc:
                    07:16:e0:11:4b:e8:85:c9:b3:9a:97:ea:d1:c1:8f:
                    93:3f:61:99:ea:86:ca:2f:91:fc:a2:37:b7:07:74:
                    ab:73:d2:67:7d:28:89:86:bc:0b:1a:34:16:ce:10:
                    46:22:73:32:b6:33:6e:0d:84:dc:e3:fa:a6:b2:ff:
                    de:33:6a:83:fd:fa:43:3f:be:28:7a:4b:25:e4:d6:
                    59:cb:56:ef:36:47:42:0e:a5:53:f8:8e:db:a7:ac:
                    6d:7e:ff:c1:31:c7:92:77:b6:e4:ab:e2:45:4a:92:
                    12:89:59:c8:8f:7b:c1:8c:74:07:37:4f:33:d5:b5:
                    a9:fa:a8:71:21:61:a8:ec:16:2b:ee:18:78:5b:c7:
                    e9:63:ef:25:a5:93:93:ab:01:c2:34:ba:f8:16:e9:
                    a7:20:72:fa:5c:86:6b:d0:6a:e1:c9:60:09:9a:dd:
                    cf:d3:1c:cf:d8:fe:ae:88:cd:7c:89:5b:87:c1:cd:
                    1e:73:2c:cb:a5:95:79:61:4d:50:61:b1:5d:9e:57:
                    25:b2:90:7a:3f:44:af:88:fe:51:6b:3e:f3:2b:9d:
                    8d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A0:A0:CD:03:B7:87:4A:AC:88:95:75:E4:22:C1:C8:16:67:0E:23
            X509v3 Authority Key Identifier:
                keyid:7C:F5:8A:51:FB:1A:F5:AF:75:86:05:0D:F9:A4:D2:0D:EE:D5:E2:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2de6eee2-7e59-4b38-b0b0-c931d6a7af38/0/7CF58A51FB1AF5AF7586050DF9A4D20DEED5E258.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPWKUfsa9a91hgUN-aTSDe7V4lg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de6eee2-7e59-4b38-b0b0-c931d6a7af38/0/323030313a3637633a313239633a3a2f34382d3438203d3e20323030393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:129c::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:7b:a4:40:b4:cb:0f:f0:ff:6f:53:9c:62:2f:41:47:e5:6e:
         c1:2d:90:34:d5:10:28:b8:52:58:7b:06:10:03:d8:7f:3f:71:
         5d:10:d1:3f:b8:55:bf:f1:40:b1:b2:f0:de:1c:e9:36:3b:d2:
         82:9c:51:75:09:3a:1f:16:8f:e0:56:a9:e1:b4:cc:27:4d:5f:
         32:5f:79:40:e5:ba:65:31:7e:53:14:4f:06:43:57:b1:91:24:
         96:ca:0b:1f:27:2b:b9:a2:00:73:82:69:5b:15:ce:67:ad:fc:
         ed:60:33:2d:81:ba:64:0b:ca:95:af:1b:32:ca:b2:d3:09:8c:
         5f:a1:e1:4a:96:43:88:78:75:86:72:6b:38:ea:55:5a:7e:9f:
         5b:f8:f6:d5:57:28:a1:b4:6c:04:24:27:16:57:ea:8b:f2:ad:
         37:d3:a3:01:4e:23:46:83:08:c0:70:41:4c:eb:08:22:ff:ed:
         fd:bb:5d:e8:c3:79:0b:97:fb:32:59:b5:2d:f7:37:bb:4f:ae:
         d3:68:e8:30:e3:b8:30:1d:22:a8:52:65:92:bf:c0:77:ec:13:
         ad:56:00:53:fe:56:55:af:3b:4f:d5:ab:e8:68:86:04:b4:d0:
         33:4e:bb:6f:77:53:7b:c5:7a:f3:3c:e4:51:ba:f6:53:0b:32:
         de:15:2f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----