Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623030623a3a2f34382d3438203d3e20323136323932.roa
File:                     326130363a313238333a623030623a3a2f34382d3438203d3e20323136323932.roa (raw, json)
Hash identifier:          Gb9sXTmwzmR46pY59c+5udXWp6zzoqY6ol9bqd09oks=
Subject key identifier:   7E:9F:47:C7:61:86:1F:C6:33:E7:D3:66:AE:68:E7:D7:94:98:7A:2A
Certificate issuer:       /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial:       622A89B22400E6BB0FFAF7548DD99D64636A0103
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623030623a3a2f34382d3438203d3e20323136323932.roa
Signing time:             Sun 12 Nov 2023 20:45:32 +0000
ROA not before:           Sun 12 Nov 2023 20:40:32 +0000
ROA not after:            Sun 10 Nov 2024 20:45:32 +0000
asID:                     216292
IP address blocks:        2a06:1283:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:2a:89:b2:24:00:e6:bb:0f:fa:f7:54:8d:d9:9d:64:63:6a:01:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
        Validity
            Not Before: Nov 12 20:40:32 2023 GMT
            Not After : Nov 10 20:45:32 2024 GMT
        Subject: CN=7E9F47C761861FC633E7D366AE68E7D794987A2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:92:04:00:71:41:11:26:87:11:67:80:a8:f8:
                    04:a6:18:c0:a4:d2:6c:10:63:d3:f6:d2:d3:db:55:
                    18:d0:0a:cc:bf:48:4b:f7:e9:f7:f0:ec:c4:93:5d:
                    d5:47:fd:41:1b:68:fd:59:38:42:c6:30:6d:4e:c2:
                    d1:ee:e6:cd:45:e6:5d:63:40:1f:bd:13:e6:d5:c6:
                    16:e7:f9:55:bf:cb:ef:e1:e5:1f:15:66:d0:f8:40:
                    4e:81:96:53:28:8d:42:36:a5:b6:0d:d1:a5:5a:38:
                    a7:9d:cd:d4:bf:85:a4:e8:18:47:bc:ea:43:a0:43:
                    fd:b4:56:15:fa:d6:a4:29:44:40:80:35:74:90:b2:
                    6b:f0:ec:11:e7:aa:c3:78:41:61:6e:68:ad:74:f3:
                    d6:6c:13:22:65:fc:c9:43:6c:fc:4d:2f:9d:9b:16:
                    df:0b:b4:29:51:1f:ce:c5:38:0b:e5:95:ff:f1:44:
                    4f:63:f5:0e:1d:df:51:37:b9:a5:ed:29:ed:25:0f:
                    4d:e2:eb:91:88:6d:e0:6a:8e:b8:d8:db:cd:6e:a2:
                    8b:83:f7:7c:df:db:1d:e8:98:a2:5c:e8:d5:a8:aa:
                    db:72:f2:f1:77:f0:56:e1:90:92:cb:2c:2c:7e:02:
                    66:c7:50:63:35:e5:f3:7c:06:1a:75:44:5f:ee:38:
                    c0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9F:47:C7:61:86:1F:C6:33:E7:D3:66:AE:68:E7:D7:94:98:7A:2A
            X509v3 Authority Key Identifier:
                keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623030623a3a2f34382d3438203d3e20323136323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:50:6e:44:2e:d2:3b:e9:05:07:be:b0:b8:dd:4e:ea:50:4a:
         11:6a:96:08:16:ea:11:e7:e7:7c:f7:b2:ed:dd:df:d7:0b:ac:
         e5:5c:28:a8:a4:d3:3a:d4:77:7a:9b:5b:00:a4:cf:eb:39:27:
         2c:3f:fa:c0:ce:ab:fe:94:08:56:b9:24:7a:e6:33:3c:37:95:
         b8:b8:22:c6:aa:e7:1f:8f:0c:48:4c:31:40:bb:c0:b5:41:c8:
         90:53:80:5c:95:a2:83:38:87:ae:e3:6f:cc:a2:5e:35:ef:12:
         e3:1b:ce:04:c5:d9:2a:f9:e5:90:da:d6:93:52:5b:d8:3e:1e:
         a4:bd:6a:b8:4f:2a:16:99:95:df:67:54:aa:79:92:67:06:a4:
         cc:86:68:ec:4f:20:90:e8:d2:fe:31:66:dc:e5:51:43:03:31:
         6c:fa:50:0a:90:ec:0c:d6:63:e3:cc:ad:5a:c8:42:a7:97:83:
         e7:7c:44:ef:c9:19:97:43:23:57:a4:da:9d:f1:0b:da:09:70:
         95:9a:b8:64:ae:4e:54:ed:29:e9:db:33:86:25:c1:b9:30:12:
         2f:58:bf:21:e8:aa:47:ea:18:04:32:fa:56:66:17:6c:bc:66:
         69:0e:57:c7:bf:29:70:76:77:6c:b0:e8:29:3f:ee:f2:c2:24:
         32:16:a4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----