Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a3a2f33322d3332203d3e203438373030.roa
File:                     326130363a313238333a3a2f33322d3332203d3e203438373030.roa (raw, json)
Hash identifier:          tORBkObkMqAc0Z6Qz4bZargiQS3B7mumXj6Ac3C8nnU=
Subject key identifier:   F9:41:92:D5:21:CC:88:67:73:A8:7F:48:86:F4:DE:BE:DC:0E:2F:34
Certificate issuer:       /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial:       68058F5D0E4CD7884BC084A382D8859F8CDFBEF5
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a3a2f33322d3332203d3e203438373030.roa
Signing time:             Mon 11 Dec 2023 14:11:12 +0000
ROA not before:           Mon 11 Dec 2023 14:06:12 +0000
ROA not after:            Mon 09 Dec 2024 14:11:12 +0000
asID:                     48700
IP address blocks:        2a06:1283::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:05:8f:5d:0e:4c:d7:88:4b:c0:84:a3:82:d8:85:9f:8c:df:be:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
        Validity
            Not Before: Dec 11 14:06:12 2023 GMT
            Not After : Dec  9 14:11:12 2024 GMT
        Subject: CN=F94192D521CC886773A87F4886F4DEBEDC0E2F34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0a:d4:4e:cb:33:ec:31:d0:a8:2b:36:c7:78:
                    d3:e7:7b:c9:50:b2:db:c8:d1:9d:7f:aa:21:cf:30:
                    21:3e:00:60:5d:14:90:60:6d:c7:4c:dd:5a:aa:ae:
                    91:65:ef:1c:3e:a1:49:fb:90:ea:26:50:e7:94:f2:
                    69:99:52:60:9f:d8:45:2f:f1:0b:fb:7d:76:46:b6:
                    1b:56:2e:6a:64:b6:74:2b:16:e4:e0:5f:3e:2f:f3:
                    02:89:35:de:da:db:30:28:57:cf:8c:82:0d:9e:9d:
                    f7:df:79:b8:ab:07:14:e5:af:5e:f5:a5:ce:f0:91:
                    a2:0f:ee:a7:3d:aa:b6:33:6a:00:eb:c4:ac:30:35:
                    a7:40:cb:a6:ef:2f:8a:bd:24:ea:b1:24:d9:3d:61:
                    fb:3a:ad:1d:eb:74:40:86:df:c8:19:d4:ab:ce:e4:
                    05:23:59:29:6f:22:30:ec:4a:ee:ea:6f:6f:4a:5d:
                    46:8e:8b:70:09:9f:f4:f3:b0:c7:0f:78:2f:29:90:
                    54:bf:aa:02:99:81:ae:9e:c1:b3:cf:54:4c:0d:be:
                    4a:f2:9b:12:f8:5d:9e:bb:91:03:57:18:71:a4:48:
                    b6:f5:20:bd:66:f3:20:f1:45:44:a5:a4:69:68:7b:
                    55:2f:31:e5:3a:fc:c5:c8:7b:d4:05:19:72:e7:62:
                    c4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:41:92:D5:21:CC:88:67:73:A8:7F:48:86:F4:DE:BE:DC:0E:2F:34
            X509v3 Authority Key Identifier:
                keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a3a2f33322d3332203d3e203438373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:a4:8a:a4:9a:e3:87:b5:f5:57:70:58:3c:87:47:35:f7:b3:
         db:2a:bd:32:98:e7:c9:f7:89:06:9f:73:c2:89:9d:d9:29:de:
         15:f4:8f:fe:94:da:9f:f6:45:42:19:0f:14:d7:cc:b1:d2:df:
         f7:30:38:85:ac:dd:95:43:6f:61:01:1f:77:b2:9f:32:12:01:
         97:f3:62:9c:a6:03:48:4f:b4:ca:6b:86:3f:7e:55:cb:9f:cf:
         fb:67:6b:25:ba:6a:b1:31:40:05:7e:93:07:77:24:85:64:3c:
         36:12:55:71:d0:5e:f7:68:70:db:b3:18:52:ef:9e:b9:2f:42:
         e6:13:7d:78:45:bb:f7:3c:44:6a:f4:d7:3e:31:57:32:43:b3:
         aa:5f:eb:2e:d7:ed:23:69:78:20:df:08:29:12:d5:1c:c9:77:
         a3:9c:59:d5:3a:01:30:58:c8:1e:fc:38:82:96:01:66:80:8a:
         ab:df:0d:cc:1a:b7:8f:ac:63:82:83:7b:27:fc:e8:c3:ca:fc:
         be:10:81:4e:ed:69:b9:4f:78:9e:00:f9:34:8c:24:1b:84:bc:
         68:19:37:25:c3:b0:c8:b7:e8:9c:11:25:89:c8:49:fb:0e:20:
         e9:4d:c1:fd:db:08:a3:aa:93:88:47:ff:cf:ae:42:39:e0:6c:
         b0:f5:06:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----