Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134302e302f32342d3234203d3e20343030383636.roa
File:                     34352e3134382e3134302e302f32342d3234203d3e20343030383636.roa (raw, json)
Hash identifier:          0g0KwivFGdIodeYgyos//DuSKVlRzH+i6PA0JK3RPCk=
Subject key identifier:   4B:56:DC:06:82:C4:3C:12:22:B1:DA:51:21:42:CF:01:B6:66:85:EE
Certificate issuer:       /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial:       5C9DC5331A165FE8267318761BCDA579BE20756C
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134302e302f32342d3234203d3e20343030383636.roa
Signing time:             Fri 22 Sep 2023 13:28:25 +0000
ROA not before:           Fri 22 Sep 2023 13:23:25 +0000
ROA not after:            Fri 20 Sep 2024 13:28:25 +0000
asID:                     400866
IP address blocks:        45.148.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:9d:c5:33:1a:16:5f:e8:26:73:18:76:1b:cd:a5:79:be:20:75:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
        Validity
            Not Before: Sep 22 13:23:25 2023 GMT
            Not After : Sep 20 13:28:25 2024 GMT
        Subject: CN=4B56DC0682C43C1222B1DA512142CF01B66685EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a0:c7:3b:ab:7c:67:72:2a:ca:d6:91:87:b5:
                    47:90:76:70:51:7d:05:b5:1a:9e:d8:59:9c:2a:e8:
                    ee:5a:93:30:72:62:90:93:33:fd:b0:cd:b8:b0:97:
                    4c:8a:b0:19:82:be:15:2e:30:90:2b:ce:92:b4:1e:
                    f2:db:47:c0:35:5c:e6:cb:bc:24:55:cd:83:26:f4:
                    70:20:ac:5d:eb:c3:d0:14:e9:4e:18:cc:68:86:71:
                    d2:60:5b:90:fe:95:fa:05:17:12:63:47:ab:ea:0d:
                    f9:96:6b:6d:95:a4:bf:97:70:67:d9:8f:c2:fe:5f:
                    b0:39:bf:ab:0a:a9:69:4b:97:36:ed:c7:47:59:cd:
                    ca:46:74:89:41:40:62:52:26:e2:ba:bc:07:53:1b:
                    6d:86:b8:52:b7:f7:ec:1b:72:67:39:66:5f:3a:a3:
                    5b:11:5c:44:94:bb:6f:fa:0b:0e:48:70:e4:4e:e4:
                    1e:84:b9:13:29:29:02:51:bc:06:7d:7a:a2:b2:bd:
                    06:82:ce:7f:5c:bc:b8:e1:ed:3a:e3:be:7a:32:02:
                    37:19:79:48:b9:ee:92:9f:bb:f9:10:c8:3f:a0:b5:
                    a9:59:5e:99:c6:5b:fa:68:c2:5b:de:3a:5f:c1:e0:
                    9d:d3:9c:c7:1c:4c:21:ca:92:60:66:17:48:e1:72:
                    d7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:56:DC:06:82:C4:3C:12:22:B1:DA:51:21:42:CF:01:B6:66:85:EE
            X509v3 Authority Key Identifier:
                keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134302e302f32342d3234203d3e20343030383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.148.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:4f:44:a7:0c:e4:94:c9:e5:e0:3e:e0:0d:00:3b:11:c9:98:
         44:cd:e9:13:17:9f:bf:74:8a:2c:c1:b7:9a:e5:d4:36:d4:20:
         f1:8b:61:97:d3:02:9a:4b:5a:74:db:da:a3:bb:a4:74:ea:e0:
         02:d3:aa:d9:a3:b2:98:b1:89:82:3f:1d:29:c6:6c:e9:ef:32:
         2c:c4:e2:a3:9f:5e:8e:e4:3b:38:43:e8:a5:2a:a1:c5:3c:bc:
         00:26:87:cf:f1:c2:a4:7c:fd:3c:16:73:8f:f0:1e:44:43:5d:
         3d:4b:af:cb:6a:09:e5:f5:0f:8a:3c:69:89:e6:61:e1:bf:89:
         e1:68:84:25:db:b7:54:b8:17:3f:b9:74:e7:dd:38:50:30:fb:
         e0:cb:bb:da:bc:33:17:78:85:18:91:96:06:a6:0f:ff:cb:b1:
         c1:2f:a9:40:1a:7e:88:0a:8c:f4:78:c0:b8:3c:55:8b:40:f0:
         b9:78:3f:93:bb:be:09:1d:12:05:da:b1:64:99:3d:8e:1b:1f:
         01:1f:ff:dd:1b:ea:9c:6c:e6:8d:40:d9:fa:5d:37:39:cd:00:
         07:6f:69:c7:7b:d2:c0:a8:7e:e6:d9:e6:15:17:7d:0a:fd:30:
         66:e4:35:c2:9a:09:75:40:a2:3e:46:8b:0f:32:71:70:d0:27:
         f6:ea:e1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----