Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623030623a3a2f34382d3438203d3e20313937393139.roa
File:                     326130363a313238333a623030623a3a2f34382d3438203d3e20313937393139.roa (raw, json)
Hash identifier:          xzpJqNHBI6jFejABZ2bXOQCZDU6bM36EI3rJAw4bM84=
Subject key identifier:   20:6C:BF:87:43:8F:07:FD:88:B2:E9:AE:1D:CF:E8:2D:DF:01:9C:92
Certificate issuer:       /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial:       5971054B107D26D74A3FB7258450A33EE4680015
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623030623a3a2f34382d3438203d3e20313937393139.roa
Signing time:             Mon 13 Nov 2023 18:29:24 +0000
ROA not before:           Mon 13 Nov 2023 18:24:24 +0000
ROA not after:            Mon 11 Nov 2024 18:29:24 +0000
asID:                     197919
IP address blocks:        2a06:1283:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:71:05:4b:10:7d:26:d7:4a:3f:b7:25:84:50:a3:3e:e4:68:00:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
        Validity
            Not Before: Nov 13 18:24:24 2023 GMT
            Not After : Nov 11 18:29:24 2024 GMT
        Subject: CN=206CBF87438F07FD88B2E9AE1DCFE82DDF019C92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7d:4d:70:6b:df:04:e7:6d:ef:ea:e2:60:16:
                    22:65:d1:68:fe:85:16:54:45:f9:37:df:31:c5:73:
                    7d:e4:e4:f0:21:fc:70:9c:f2:10:d9:db:8f:8b:a8:
                    27:8d:9c:b7:2a:de:55:17:e0:3b:ee:a6:52:c7:67:
                    d1:c1:ed:cf:d0:99:16:45:ca:bc:58:bf:77:b7:a4:
                    7c:ed:32:ff:76:10:18:34:da:89:e1:04:36:f8:6e:
                    ee:23:81:29:d4:be:2a:0e:23:88:bc:09:2b:91:e2:
                    f2:d0:d5:60:4c:b4:15:af:f2:13:a3:e8:1e:92:a9:
                    51:eb:2a:f2:ce:96:dd:c7:9f:b9:90:4b:0e:67:e0:
                    f1:50:79:23:b5:9b:dd:69:3d:08:ac:45:c5:56:9e:
                    9c:1f:ef:10:5a:e7:9d:b7:e2:38:0f:52:24:97:12:
                    6f:db:16:66:40:5b:b0:de:e5:55:de:e2:05:43:19:
                    cd:bc:06:b6:10:87:df:04:be:f5:3c:ae:98:59:ed:
                    6e:10:75:83:96:70:3c:e4:ea:51:b3:e4:b0:3c:be:
                    eb:2f:18:ca:2a:d7:1c:d4:a4:e5:95:42:ba:3d:4e:
                    d3:7c:be:70:3e:6d:e4:0e:d6:37:a0:c9:95:28:f7:
                    c0:54:6a:79:ba:b3:1a:2f:78:11:0a:d0:a5:33:65:
                    ac:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6C:BF:87:43:8F:07:FD:88:B2:E9:AE:1D:CF:E8:2D:DF:01:9C:92
            X509v3 Authority Key Identifier:
                keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623030623a3a2f34382d3438203d3e20313937393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:e4:de:f9:4f:6f:04:f3:04:e2:01:2e:4b:1f:6a:e1:4d:4b:
         5f:f4:c1:d2:00:64:da:8a:aa:a4:a0:10:83:6d:fc:e1:91:97:
         b3:55:f2:bd:16:7c:a3:3a:6a:29:a9:ce:ff:a0:f3:41:06:2e:
         a7:0d:8d:7a:ad:cc:7d:1c:bd:0c:fb:58:3e:92:5b:a1:d9:60:
         5a:78:b8:4f:8b:38:42:41:9c:32:bf:97:44:06:2e:c3:a8:f0:
         de:9b:77:4a:91:64:f2:0f:07:a2:44:76:be:95:54:78:11:ed:
         95:da:f4:64:75:fa:3e:f3:9c:99:ed:25:30:09:ef:42:0b:2d:
         cb:e4:ab:54:33:09:e4:43:a8:93:31:0f:20:f9:05:f0:83:c4:
         60:af:0c:ee:c8:75:1e:b5:94:0a:45:d2:11:18:6a:25:6d:43:
         0e:14:de:17:a4:79:5d:79:fb:f6:e9:ec:a5:b4:b3:72:9a:8c:
         f9:2f:68:e1:ee:7e:6f:05:41:de:a8:37:84:26:5e:3a:c6:00:
         37:49:79:31:28:b2:9b:85:97:15:4f:15:b6:1f:fe:0e:01:57:
         82:fb:ca:7b:17:85:23:9d:49:44:0f:db:c8:7a:52:d4:6b:92:
         1b:38:18:72:74:17:dd:8c:6d:a3:ae:0b:ce:db:39:b5:17:31:
         1b:d3:86:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----