Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/948906b5-432c-4e6a-b5e2-110f2945863b/0/3138352e3231322e3131332e302f32342d3234203d3e20323036353035.roa
File:                     3138352e3231322e3131332e302f32342d3234203d3e20323036353035.roa (raw, json)
Hash identifier:          q0egcl2tJX9WKCucFWooBB6dNwGxhL5P5gXcQIQ3Mhk=
Subject key identifier:   22:39:EF:26:7A:FB:0A:E2:A5:37:88:2D:32:4F:A2:53:7A:68:B3:D8
Certificate issuer:       /CN=afb20114c4090291ec402479a620ddeae6bad620
Certificate serial:       49E9ECC48C558FC41719A931AB3FB9EE7B44509C
Authority key identifier: AF:B2:01:14:C4:09:02:91:EC:40:24:79:A6:20:DD:EA:E6:BA:D6:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r7IBFMQJApHsQCR5piDd6ua61iA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/948906b5-432c-4e6a-b5e2-110f2945863b/0/3138352e3231322e3131332e302f32342d3234203d3e20323036353035.roa
Signing time:             Wed 24 May 2023 11:42:17 +0000
ROA not before:           Wed 24 May 2023 11:37:17 +0000
ROA not after:            Wed 22 May 2024 11:42:17 +0000
asID:                     206505
IP address blocks:        185.212.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e9:ec:c4:8c:55:8f:c4:17:19:a9:31:ab:3f:b9:ee:7b:44:50:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afb20114c4090291ec402479a620ddeae6bad620
        Validity
            Not Before: May 24 11:37:17 2023 GMT
            Not After : May 22 11:42:17 2024 GMT
        Subject: CN=2239EF267AFB0AE2A537882D324FA2537A68B3D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:73:54:e8:68:46:dd:7e:83:15:64:9b:c7:ee:
                    40:10:7e:d2:e7:69:18:02:5b:40:c0:c9:d6:08:6f:
                    4b:14:a9:01:9e:1a:4a:ea:54:b3:a5:5c:9c:6f:a3:
                    6f:35:01:8f:7a:8d:8f:7f:5f:f1:64:82:45:ca:70:
                    df:ba:87:95:c4:0c:50:c5:4e:d7:88:bb:fa:d0:04:
                    b5:71:43:89:c3:21:0c:89:5d:18:4a:7d:bd:08:34:
                    69:3b:b6:87:8d:f1:d2:e4:74:6a:e5:50:5f:fb:66:
                    7a:3a:d2:7d:3e:05:2b:dc:d1:79:1e:6b:62:d8:5a:
                    08:50:d8:02:ed:e9:ab:29:c4:e1:1d:28:9b:04:cb:
                    0a:6f:d4:36:b9:3d:88:2d:54:d6:a0:f5:f0:e7:6e:
                    37:a2:51:b7:c8:2d:71:55:b9:b5:1f:5b:70:85:9f:
                    aa:54:de:d0:63:c8:a3:15:d2:07:a2:d5:ab:07:69:
                    98:87:e6:b8:17:ab:e6:e7:24:e1:ac:68:3e:f1:5e:
                    f9:e6:1b:bb:cd:9f:5d:fb:bf:3d:12:c9:68:1b:e4:
                    6c:a0:4f:4f:8e:e5:67:b2:d7:07:80:ee:52:37:88:
                    01:0e:7d:fd:3f:d0:64:09:11:7e:0d:6c:57:84:63:
                    db:10:ab:58:a3:cd:56:75:60:d0:f1:d1:05:8e:99:
                    da:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:39:EF:26:7A:FB:0A:E2:A5:37:88:2D:32:4F:A2:53:7A:68:B3:D8
            X509v3 Authority Key Identifier:
                keyid:AF:B2:01:14:C4:09:02:91:EC:40:24:79:A6:20:DD:EA:E6:BA:D6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/948906b5-432c-4e6a-b5e2-110f2945863b/0/AFB20114C4090291EC402479A620DDEAE6BAD620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7IBFMQJApHsQCR5piDd6ua61iA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/948906b5-432c-4e6a-b5e2-110f2945863b/0/3138352e3231322e3131332e302f32342d3234203d3e20323036353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:62:a6:ac:a8:69:1a:e7:49:9f:ad:10:16:5d:30:6b:41:d8:
         c8:43:46:3d:ee:0f:30:52:3d:15:7f:38:af:7a:48:24:cd:d5:
         e4:37:39:44:56:c6:ab:5f:ee:72:11:f5:76:69:87:5b:46:49:
         e3:c4:29:dd:d6:15:e7:cd:7f:1c:c0:c2:0b:a2:19:8c:b7:54:
         53:d5:17:cb:4e:01:c4:5e:06:e6:16:97:b5:0a:0b:88:30:02:
         f9:5c:f2:28:ef:5e:51:71:67:15:33:b0:4a:bd:6f:fb:0f:6c:
         c5:df:ab:d0:a4:b1:e6:b5:79:c2:67:39:44:34:5f:a9:f8:4f:
         d0:6b:b4:6b:69:73:d5:83:f3:b0:3b:89:ad:c3:f4:55:f9:69:
         d2:10:35:df:b8:f9:d1:82:1f:a2:f5:30:8d:e8:e4:ab:b9:f2:
         06:0f:1b:7f:e9:f2:b3:e1:cf:2b:e8:f2:81:d5:92:ab:e6:e4:
         f3:73:53:18:15:23:00:1d:dc:1d:1e:a5:99:9e:bc:26:08:3d:
         ad:1e:a8:9a:53:94:94:27:25:ef:2c:13:93:b7:b0:f0:32:85:
         f2:85:b4:1a:68:46:18:0a:e1:5f:49:50:4b:c4:c3:ea:c2:00:
         e1:17:82:86:f5:5a:73:75:87:0e:eb:ab:d0:02:a9:75:f4:a7:
         c5:9b:81:10
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUSensxIxVj8QXGakxqz+57ntEUJwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWZiMjAxMTRjNDA5MDI5MWVjNDAyNDc5YTYyMGRkZWFl
NmJhZDYyMDAeFw0yMzA1MjQxMTM3MTdaFw0yNDA1MjIxMTQyMTdaMDMxMTAvBgNV
BAMTKDIyMzlFRjI2N0FGQjBBRTJBNTM3ODgyRDMyNEZBMjUzN0E2OEIzRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClc1ToaEbdfoMVZJvH7kAQftLn
aRgCW0DAydYIb0sUqQGeGkrqVLOlXJxvo281AY96jY9/X/FkgkXKcN+6h5XEDFDF
TteIu/rQBLVxQ4nDIQyJXRhKfb0INGk7toeN8dLkdGrlUF/7Zno60n0+BSvc0Xke
a2LYWghQ2ALt6aspxOEdKJsEywpv1Da5PYgtVNag9fDnbjeiUbfILXFVubUfW3CF
n6pU3tBjyKMV0gei1asHaZiH5rgXq+bnJOGsaD7xXvnmG7vNn137vz0SyWgb5Gyg
T0+O5Wey1weA7lI3iAEOff0/0GQJEX4NbFeEY9sQq1ijzVZ1YNDx0QWOmdoHAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUIjnvJnr7CuKlN4gtMk+iU3pos9gwHwYDVR0j
BBgwFoAUr7IBFMQJApHsQCR5piDd6ua61iAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTQ4OTA2YjUtNDMyYy00ZTZhLWI1ZTItMTEwZjI5NDU4
NjNiLzAvQUZCMjAxMTRDNDA5MDI5MUVDNDAyNDc5QTYyMERERUFFNkJBRDYyMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3I3SUJGTVFKQXBIc1FDUjVwaURkNnVh
NjFpQS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTQ4OTA2YjUt
NDMyYy00ZTZhLWI1ZTItMTEwZjI5NDU4NjNiLzAvMzEzODM1MmUzMjMxMzIyZTMx
MzEzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNjM1MzAzNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALnUcTANBgkqhkiG9w0BAQsFAAOCAQEAEWKmrKhpGudJn60QFl0wa0HYyENG
Pe4PMFI9FX84r3pIJM3V5Dc5RFbGq1/uchH1dmmHW0ZJ48Qp3dYV581/HMDCC6IZ
jLdUU9UXy04BxF4G5haXtQoLiDAC+VzyKO9eUXFnFTOwSr1v+w9sxd+r0KSx5rV5
wmc5RDRfqfhP0Gu0a2lz1YPzsDuJrcP0Vflp0hA137j50YIfovUwjejkq7nyBg8b
f+nys+HPK+jygdWSq+bk83NTGBUjAB3cHR6lmZ68Jgg9rR6omlOUlCcl7ywTk7ew
8DKF8oW0GmhGGArhX0lQS8TD6sIA4ReChvVac3WHDuur0AKpdfSnxZuBEA==
-----END CERTIFICATE-----