Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89c18018-a328-4860-a723-6d50c8e9b038/1/323030313a3766383a3134303a3a2f34382d3438203d3e203536373338.roa
File:                     323030313a3766383a3134303a3a2f34382d3438203d3e203536373338.roa (raw, json)
Hash identifier:          hRxLCTyRgzBqdt8dOFrppdDUTc9b4dMMXZlT6CKax+Q=
Subject key identifier:   08:69:AB:3A:9C:E4:1D:B4:15:ED:36:BC:57:E4:E1:27:48:D4:27:F0
Certificate issuer:       /CN=f82ab198ecf4f9e5ed150916cb682034c93d74e8
Certificate serial:       19EF7D9E3E6830F64F553BFA66709D0DDE281D95
Authority key identifier: F8:2A:B1:98:EC:F4:F9:E5:ED:15:09:16:CB:68:20:34:C9:3D:74:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-CqxmOz0-eXtFQkWy2ggNMk9dOg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89c18018-a328-4860-a723-6d50c8e9b038/1/323030313a3766383a3134303a3a2f34382d3438203d3e203536373338.roa
Signing time:             Mon 26 Dec 2022 23:18:42 +0000
ROA not before:           Mon 26 Dec 2022 23:13:42 +0000
ROA not after:            Mon 25 Dec 2023 23:18:42 +0000
asID:                     56738
IP address blocks:        2001:7f8:140::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ef:7d:9e:3e:68:30:f6:4f:55:3b:fa:66:70:9d:0d:de:28:1d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f82ab198ecf4f9e5ed150916cb682034c93d74e8
        Validity
            Not Before: Dec 26 23:13:42 2022 GMT
            Not After : Dec 25 23:18:42 2023 GMT
        Subject: CN=0869AB3A9CE41DB415ED36BC57E4E12748D427F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1d:96:f3:6d:e9:5a:48:4a:ca:5a:a9:e3:3c:
                    11:fd:ef:53:4b:da:1d:99:07:a3:ce:4e:4e:64:eb:
                    a4:22:87:c4:f0:62:0a:1d:4d:54:9d:44:e4:0a:bf:
                    37:25:a9:48:7e:f3:1a:13:12:00:dd:d8:c0:22:6e:
                    e7:66:22:97:cb:80:1d:24:ae:89:91:ed:b1:39:d9:
                    2a:43:fa:80:f3:29:89:c7:93:ab:9c:2f:5a:c8:e6:
                    3c:a1:29:91:00:39:ac:0d:09:16:45:c3:68:b4:61:
                    a4:13:fa:86:d6:59:62:ca:9a:00:bf:12:bf:0d:ef:
                    ee:08:7f:b9:2c:91:80:70:bc:f1:98:26:5c:ff:17:
                    df:86:c9:38:ff:64:a0:36:6b:f5:f3:26:b0:1c:69:
                    f3:25:51:7d:b3:8d:e7:82:6f:96:b7:29:e4:6a:e5:
                    c8:ee:fe:58:73:bd:3e:f2:25:f1:59:08:a3:1f:99:
                    3b:41:de:bb:09:2f:63:7f:51:19:cd:a7:dd:b1:d9:
                    67:67:96:60:0c:82:44:67:1e:2d:2a:97:b3:1a:a0:
                    b9:9a:e3:2c:42:a8:cc:f2:5a:6c:d0:6c:37:73:cd:
                    57:d0:b2:ea:05:90:88:d2:50:1d:9e:72:e0:e1:cc:
                    db:dd:48:29:04:df:2e:2c:cb:82:aa:8b:71:9b:37:
                    3c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:69:AB:3A:9C:E4:1D:B4:15:ED:36:BC:57:E4:E1:27:48:D4:27:F0
            X509v3 Authority Key Identifier:
                keyid:F8:2A:B1:98:EC:F4:F9:E5:ED:15:09:16:CB:68:20:34:C9:3D:74:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89c18018-a328-4860-a723-6d50c8e9b038/1/F82AB198ECF4F9E5ED150916CB682034C93D74E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CqxmOz0-eXtFQkWy2ggNMk9dOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89c18018-a328-4860-a723-6d50c8e9b038/1/323030313a3766383a3134303a3a2f34382d3438203d3e203536373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:7f8:140::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:0d:26:f4:6f:1f:01:2e:75:e6:1e:fc:3a:26:dd:ac:15:cc:
         bd:c3:55:48:4c:eb:28:f2:45:e4:c0:16:63:5f:f4:43:8e:10:
         38:3d:97:df:fc:c0:6a:8b:4c:7b:c8:72:ba:5b:b9:27:01:ab:
         bf:7e:24:60:d5:7a:35:6e:df:3d:59:00:05:86:27:9b:ba:d7:
         79:11:1a:ac:cb:3f:20:39:4c:a8:bd:07:28:43:43:91:0e:db:
         22:8d:5f:0a:ec:74:46:d0:35:82:59:d5:c8:e7:0b:fc:b7:7a:
         26:33:7f:9f:f7:47:11:14:cf:d7:04:e2:5e:f9:3b:0d:ac:e2:
         6c:d3:71:bb:5d:b0:ee:ab:31:3c:4f:27:39:02:21:35:7b:af:
         d5:fb:18:24:c7:d3:17:5e:ef:9e:a6:14:8c:6c:f7:45:12:da:
         f1:5d:e4:e9:3b:c1:57:e8:26:cd:42:b6:09:c5:0a:29:b6:97:
         fd:c6:1a:ea:b8:d1:4a:0a:a2:8b:cf:a0:41:d7:78:76:23:8f:
         39:19:1e:d2:30:28:93:89:2c:15:a4:c1:08:1f:22:19:f9:91:
         a7:ce:5b:dc:ab:6c:9f:f4:56:2a:34:7b:87:83:80:2d:c4:c0:
         24:a0:63:25:fa:91:05:57:37:cb:f6:be:ab:24:80:c8:f9:13:
         53:6e:f2:00
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIUGe99nj5oMPZPVTv6ZnCdDd4oHZUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjgyYWIxOThlY2Y0ZjllNWVkMTUwOTE2Y2I2ODIwMzRj
OTNkNzRlODAeFw0yMjEyMjYyMzEzNDJaFw0yMzEyMjUyMzE4NDJaMDMxMTAvBgNV
BAMTKDA4NjlBQjNBOUNFNDFEQjQxNUVEMzZCQzU3RTRFMTI3NDhENDI3RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTHZbzbelaSErKWqnjPBH971NL
2h2ZB6POTk5k66Qih8TwYgodTVSdROQKvzclqUh+8xoTEgDd2MAibudmIpfLgB0k
romR7bE52SpD+oDzKYnHk6ucL1rI5jyhKZEAOawNCRZFw2i0YaQT+obWWWLKmgC/
Er8N7+4If7kskYBwvPGYJlz/F9+GyTj/ZKA2a/XzJrAcafMlUX2zjeeCb5a3KeRq
5cju/lhzvT7yJfFZCKMfmTtB3rsJL2N/URnNp92x2WdnlmAMgkRnHi0ql7MaoLma
4yxCqMzyWmzQbDdzzVfQsuoFkIjSUB2ecuDhzNvdSCkE3y4sy4Kqi3GbNzy3AgMB
AAGjggJFMIICQTAdBgNVHQ4EFgQUCGmrOpzkHbQV7Ta8V+ThJ0jUJ/AwHwYDVR0j
BBgwFoAU+CqxmOz0+eXtFQkWy2ggNMk9dOgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODljMTgwMTgtYTMyOC00ODYwLWE3MjMtNmQ1MGM4ZTli
MDM4LzEvRjgyQUIxOThFQ0Y0RjlFNUVEMTUwOTE2Q0I2ODIwMzRDOTNENzRFOC5j
cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtQ3F4bU96MC1lWHRGUWtXeTJnZ05N
azlkT2cuY2VyMIGxBggrBgEFBQcBCwSBpDCBoTCBngYIKwYBBQUHMAuGgZFyc3lu
YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5YzE4MDE4
LWEzMjgtNDg2MC1hNzIzLTZkNTBjOGU5YjAzOC8xLzMyMzAzMDMxM2EzNzY2Mzgz
YTMxMzQzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzYzNzMzMzgucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAgAQf4AUAwDQYJKoZIhvcNAQELBQADggEBAKINJvRvHwEudeYe/Dom3awV
zL3DVUhM6yjyReTAFmNf9EOOEDg9l9/8wGqLTHvIcrpbuScBq79+JGDVejVu3z1Z
AAWGJ5u613kRGqzLPyA5TKi9ByhDQ5EO2yKNXwrsdEbQNYJZ1cjnC/y3eiYzf5/3
RxEUz9cE4l75Ow2s4mzTcbtdsO6rMTxPJzkCITV7r9X7GCTH0xde756mFIxs90US
2vFd5Ok7wVfoJs1CtgnFCim2l/3GGuq40UoKoovPoEHXeHYjjzkZHtIwKJOJLBWk
wQgfIhn5kafOW9yrbJ/0Vio0e4eDgC3EwCSgYyX6kQVXN8v2vqskgMj5E1Nu8gA=
-----END CERTIFICATE-----