Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89c18018-a328-4860-a723-6d50c8e9b038/1/3138352e312e3134382e302f32342d3234203d3e203536373338.roa
File:                     3138352e312e3134382e302f32342d3234203d3e203536373338.roa (raw, json)
Hash identifier:          XDPnL67bB6psmf7mVEW/86F/6jMaxZesMBCes7+9eNA=
Subject key identifier:   D4:F9:8F:12:07:1A:08:EE:76:7E:E1:5B:30:7C:F2:6F:77:5B:49:8A
Certificate issuer:       /CN=f82ab198ecf4f9e5ed150916cb682034c93d74e8
Certificate serial:       193A5EB106919DDB2423EB1ADC9B23ACE97C3EBD
Authority key identifier: F8:2A:B1:98:EC:F4:F9:E5:ED:15:09:16:CB:68:20:34:C9:3D:74:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-CqxmOz0-eXtFQkWy2ggNMk9dOg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89c18018-a328-4860-a723-6d50c8e9b038/1/3138352e312e3134382e302f32342d3234203d3e203536373338.roa
Signing time:             Mon 26 Dec 2022 23:18:42 +0000
ROA not before:           Mon 26 Dec 2022 23:13:42 +0000
ROA not after:            Mon 25 Dec 2023 23:18:42 +0000
asID:                     56738
IP address blocks:        185.1.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:3a:5e:b1:06:91:9d:db:24:23:eb:1a:dc:9b:23:ac:e9:7c:3e:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f82ab198ecf4f9e5ed150916cb682034c93d74e8
        Validity
            Not Before: Dec 26 23:13:42 2022 GMT
            Not After : Dec 25 23:18:42 2023 GMT
        Subject: CN=D4F98F12071A08EE767EE15B307CF26F775B498A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:40:f1:b1:e1:a8:5c:fb:67:88:93:24:44:c7:
                    fd:05:51:63:ec:b3:ec:31:98:28:cf:5d:cd:f8:3c:
                    43:ea:68:15:b4:46:65:29:ee:e4:8a:e0:14:b8:24:
                    e2:05:fe:d9:12:41:bf:19:17:bc:61:43:f4:c6:98:
                    b5:9e:be:74:32:21:21:db:ad:a1:26:33:7d:9d:d9:
                    b6:43:30:88:98:23:94:31:29:2c:ed:1d:66:d7:b0:
                    f3:67:d0:45:10:42:51:01:04:b6:98:80:47:cc:af:
                    69:c1:1d:7a:56:26:b6:48:58:34:e1:64:44:75:7a:
                    f2:c8:fa:1d:ac:65:fd:61:45:98:b1:57:fd:4e:90:
                    ae:e8:59:c8:c1:20:65:62:d5:10:2d:b7:c2:04:4a:
                    69:c0:d7:b7:bc:35:81:c3:f4:be:79:64:44:ab:56:
                    11:7d:0d:70:7f:bd:da:e4:c1:7c:dc:08:1d:84:e6:
                    3f:54:f1:36:ae:ee:e5:14:0f:d5:db:24:3e:cd:44:
                    90:0b:16:b2:3f:1b:39:b4:bd:58:82:83:5f:1d:03:
                    63:18:53:cc:b5:a2:6e:59:2e:60:e6:c7:53:55:dc:
                    49:d6:53:f4:11:58:f0:90:38:1a:f0:b2:7f:25:be:
                    8e:3a:32:7a:24:b0:ed:d4:b7:b3:a6:e4:dd:70:8a:
                    6e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F9:8F:12:07:1A:08:EE:76:7E:E1:5B:30:7C:F2:6F:77:5B:49:8A
            X509v3 Authority Key Identifier:
                keyid:F8:2A:B1:98:EC:F4:F9:E5:ED:15:09:16:CB:68:20:34:C9:3D:74:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89c18018-a328-4860-a723-6d50c8e9b038/1/F82AB198ECF4F9E5ED150916CB682034C93D74E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CqxmOz0-eXtFQkWy2ggNMk9dOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89c18018-a328-4860-a723-6d50c8e9b038/1/3138352e312e3134382e302f32342d3234203d3e203536373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.1.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:6b:c1:7a:b8:d0:66:f4:b2:c4:38:d6:d3:83:c4:3c:da:81:
         01:ab:7e:27:b2:d6:c4:15:3c:0c:ee:c8:94:1c:18:6d:e7:e9:
         b6:8e:ab:8b:18:bd:32:c5:2d:ac:9f:68:42:0b:9f:9b:be:5d:
         cf:d6:12:03:48:a1:5f:72:05:40:c9:65:c3:d0:f1:ba:47:03:
         6d:41:bc:4d:d8:01:c2:ba:e4:45:d8:01:07:a2:51:4b:fa:a4:
         ca:46:04:a1:ee:71:11:73:c7:46:07:31:77:dc:45:2d:21:94:
         ae:e7:01:b3:18:9b:64:0a:a2:01:13:cb:e5:67:bc:6a:13:c1:
         37:bb:c4:dc:81:47:b6:95:28:fb:96:3a:a6:b1:65:6d:ff:0c:
         c4:fd:33:69:1d:7e:f5:7c:12:7d:7f:a6:17:25:1d:fd:1f:d0:
         ae:0b:33:ff:1f:da:0d:97:9a:6b:a5:7c:6e:5a:94:cb:a6:03:
         08:f7:00:f2:a9:dc:ff:0b:8f:01:ce:2f:97:fd:5d:b5:af:24:
         c7:83:ab:4b:22:36:57:89:d1:7d:44:25:50:c9:8a:a5:4d:9b:
         03:6a:18:c2:8e:9d:ed:e7:53:9f:6b:cc:d5:93:2b:0c:2a:f7:
         5a:17:35:b4:74:39:30:55:ad:18:e3:32:94:6b:c9:69:fc:cd:
         71:28:16:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----