Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e31322e302f32322d3234203d3e20383334.roa
File:                     33312e362e31322e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          eLW64IYMr8N8dctWhg6IKCuxtY9TteB/354Q9uffQos=
Subject key identifier:   70:9A:2C:37:A7:D1:22:AB:3E:9E:85:50:31:C0:44:91:DC:F4:73:0C
Certificate issuer:       /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial:       773D09D134A46A0B2A87021DC9EA92121C234D5A
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e31322e302f32322d3234203d3e20383334.roa
Signing time:             Thu 17 Aug 2023 14:30:05 +0000
ROA not before:           Thu 17 Aug 2023 14:25:05 +0000
ROA not after:            Thu 15 Aug 2024 14:30:05 +0000
asID:                     834
IP address blocks:        31.6.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:3d:09:d1:34:a4:6a:0b:2a:87:02:1d:c9:ea:92:12:1c:23:4d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
        Validity
            Not Before: Aug 17 14:25:05 2023 GMT
            Not After : Aug 15 14:30:05 2024 GMT
        Subject: CN=709A2C37A7D122AB3E9E855031C04491DCF4730C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b1:92:5c:68:54:f4:bf:e8:1c:c6:d3:f5:a3:
                    b3:5e:4d:aa:82:95:94:05:38:2c:98:bf:2e:21:7c:
                    b3:0f:ae:d6:b3:bc:a1:f4:ec:ff:d0:2a:ec:5c:72:
                    0f:ec:36:3e:9b:75:19:4d:d4:d7:8b:3b:52:38:44:
                    b7:ac:1a:e8:0f:f3:55:af:4f:48:0b:08:8a:ca:13:
                    ff:e5:2a:65:d7:3e:4c:81:cc:4a:77:5a:91:44:ab:
                    14:67:5b:95:91:96:6f:cb:36:a4:7f:f5:ba:d1:1a:
                    d1:f2:aa:3e:bc:88:37:7e:1e:c0:2d:ba:25:c7:e4:
                    8b:93:b5:28:b1:54:be:a0:1d:c2:51:2e:84:b8:90:
                    6a:80:7f:f7:60:70:ee:fc:9e:69:73:9f:2e:46:77:
                    20:4e:ea:ba:47:66:63:93:a1:f5:4f:f2:fd:d8:f8:
                    26:9d:c0:d3:66:21:e7:a9:1b:7a:51:c1:e1:eb:35:
                    fd:4b:f3:6e:5d:e8:6f:f1:47:52:fd:2c:e2:36:ac:
                    cb:1a:bc:f2:2a:a7:02:e1:c4:c1:b6:f2:28:67:6d:
                    34:3b:fe:e2:c7:eb:10:8e:f3:ae:86:47:48:28:86:
                    7e:fa:84:8a:ce:bc:d6:84:79:54:10:90:f5:10:98:
                    1c:9d:a2:b2:f7:0f:21:32:ae:bc:6d:f7:aa:f8:9e:
                    c9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9A:2C:37:A7:D1:22:AB:3E:9E:85:50:31:C0:44:91:DC:F4:73:0C
            X509v3 Authority Key Identifier:
                keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e31322e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.6.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:b9:76:64:f6:89:f4:5f:13:bf:8e:08:3f:b2:af:3d:23:1d:
         88:ff:17:3c:4b:e6:69:30:3c:6d:b5:fa:f0:2d:8e:d8:ed:31:
         e1:aa:36:9c:d9:f7:55:c7:88:91:03:09:d8:c4:dc:bf:e8:f6:
         c3:56:22:db:af:bf:81:16:57:f8:9e:fa:13:77:d3:b1:08:ae:
         af:32:22:5e:88:73:31:54:8a:4c:f8:2e:4c:f4:41:e2:44:0e:
         74:c5:07:27:08:b5:70:ff:e5:85:24:96:c6:c9:0c:27:67:7b:
         d8:2d:d3:e7:ca:da:46:d9:96:00:5a:60:30:47:00:54:c9:d3:
         16:8d:4c:41:b0:a9:62:c8:d3:49:c6:02:1d:18:8f:97:44:7d:
         0b:3c:8b:7a:83:a8:60:01:1b:d4:d7:4a:c4:19:d2:b2:b6:db:
         9b:69:95:bc:3e:f2:28:8f:eb:cf:ad:85:4c:54:33:41:64:26:
         41:91:27:d6:4e:b8:5a:4e:b2:c4:70:c9:d9:d4:45:f4:4e:89:
         0f:6d:b6:97:32:d1:59:bd:8e:e0:53:31:67:4b:13:24:8d:03:
         69:81:b9:0f:50:8c:55:1d:e5:88:d9:41:0d:42:7a:c1:39:64:
         5f:00:0b:79:f9:0b:fa:ba:73:45:de:d7:4d:a8:19:f4:f4:9b:
         62:94:44:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----