Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/3/326130373a353463353a613030303a3a2f34382d3438203d3e20323132363138.roa
File:                     326130373a353463353a613030303a3a2f34382d3438203d3e20323132363138.roa (raw, json)
Hash identifier:          WD2wK2g6fffxt9IFE2UP4xNChLzYtEdXvU9PqkG7fgk=
Subject key identifier:   E6:83:71:4A:A3:87:D8:F5:08:DC:43:D6:30:A6:DF:EC:3D:3A:C9:BA
Certificate issuer:       /CN=851E6B12F9EBE8768ADF142B318E2E2E4CC90AE8
Certificate serial:       03246195058CACE680F1130911B202B533E10551
Authority key identifier: 85:1E:6B:12:F9:EB:E8:76:8A:DF:14:2B:31:8E:2E:2E:4C:C9:0A:E8
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/851E6B12F9EBE8768ADF142B318E2E2E4CC90AE8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/3/326130373a353463353a613030303a3a2f34382d3438203d3e20323132363138.roa
Signing time:             Sun 09 Jul 2023 09:31:36 +0000
ROA not before:           Sun 09 Jul 2023 09:26:36 +0000
ROA not after:            Sun 07 Jul 2024 09:31:36 +0000
asID:                     212618
IP address blocks:        2a07:54c5:a000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:24:61:95:05:8c:ac:e6:80:f1:13:09:11:b2:02:b5:33:e1:05:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=851E6B12F9EBE8768ADF142B318E2E2E4CC90AE8
        Validity
            Not Before: Jul  9 09:26:36 2023 GMT
            Not After : Jul  7 09:31:36 2024 GMT
        Subject: CN=E683714AA387D8F508DC43D630A6DFEC3D3AC9BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:91:84:18:50:74:49:f9:f9:eb:cf:77:f9:cc:
                    ce:26:96:4e:09:81:53:38:73:02:ae:c1:ac:0d:53:
                    a5:11:d3:03:16:9b:55:fc:44:6a:72:46:02:2c:d7:
                    c8:96:0d:94:af:6d:f6:16:6c:2e:b2:6a:67:7c:69:
                    71:aa:f3:16:6a:f5:31:59:c9:aa:1b:b8:7f:a4:a8:
                    99:3a:9e:ee:ac:74:26:e6:6d:e3:03:bc:32:1f:7c:
                    7a:91:0c:89:f9:52:ec:fa:d8:7d:e3:18:fc:9f:70:
                    03:5b:df:a1:5d:1a:00:b7:e1:70:89:b2:72:38:18:
                    16:84:c9:2c:cb:ba:43:e3:f0:2a:c4:f4:7b:51:82:
                    79:b2:4b:0e:a9:58:42:81:3e:db:fd:4a:3f:f4:d9:
                    3b:e3:1b:04:27:a9:87:57:ec:04:1e:32:99:e9:f5:
                    ba:18:d3:2a:46:92:d3:a2:3c:14:00:b0:47:4f:9d:
                    f1:ee:2c:93:07:45:e4:40:18:4a:fb:5c:0b:76:c9:
                    8d:9c:1a:7e:7f:21:72:38:ed:1b:01:9e:36:6b:72:
                    70:58:6b:da:8a:90:82:09:07:3a:48:bd:14:84:1f:
                    96:7f:d2:39:36:27:57:ab:fe:72:16:ea:35:56:76:
                    86:7f:ac:42:19:c0:e3:9d:91:5d:dd:52:f5:86:5f:
                    d0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:83:71:4A:A3:87:D8:F5:08:DC:43:D6:30:A6:DF:EC:3D:3A:C9:BA
            X509v3 Authority Key Identifier:
                keyid:85:1E:6B:12:F9:EB:E8:76:8A:DF:14:2B:31:8E:2E:2E:4C:C9:0A:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/3/851E6B12F9EBE8768ADF142B318E2E2E4CC90AE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/851E6B12F9EBE8768ADF142B318E2E2E4CC90AE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/3/326130373a353463353a613030303a3a2f34382d3438203d3e20323132363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c5:a000::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:c4:16:2b:84:2a:f4:c0:88:7e:fa:04:f9:c0:e7:81:1f:ca:
         4e:47:15:c4:f8:50:d6:61:bc:16:dc:16:2a:5f:bb:2c:7f:ff:
         ea:bb:0a:db:ef:64:82:8f:e4:83:9b:0f:3a:11:a1:2a:c7:f9:
         92:56:20:e8:eb:e6:fc:11:5e:d3:2f:f1:09:21:88:55:12:78:
         a8:1d:58:75:75:cc:cb:14:45:e0:71:db:18:36:0e:72:e7:be:
         b4:c6:1f:5a:49:2e:b9:46:7a:f4:ab:65:b3:c4:36:1e:b0:a1:
         e6:81:f5:73:02:80:85:9b:0f:21:8c:e4:16:ec:9c:d3:d7:ba:
         bf:27:32:4b:93:b7:09:af:80:6b:ca:26:5d:80:16:77:6d:c7:
         ee:e9:e7:7f:5c:ab:56:26:fb:77:9a:8d:b1:2a:1d:12:7b:27:
         40:a8:62:dd:fa:c9:65:20:0e:c5:34:6d:13:cf:01:27:e1:24:
         df:0a:ee:8d:29:5c:0f:df:ee:60:6d:cd:e6:27:35:ff:de:62:
         c5:93:4b:c5:61:a0:4c:0d:52:b2:17:22:2d:b9:01:e6:5f:8f:
         74:f3:20:6c:b6:45:82:37:fe:cf:ca:e0:58:2e:fa:4a:d0:57:
         33:b5:4c:a7:89:ae:e8:4e:a0:47:53:0e:23:ae:78:fe:ad:d6:
         92:26:bd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----