Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/0/39332e39322e31372e302f32342d3234203d3e20383334.roa
File:                     39332e39322e31372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          7jTExYhytOKk0XC38J8D4xxS/E217TcSc7BrVVth1bM=
Subject key identifier:   8A:9F:A1:25:25:F7:72:88:B5:3F:E4:A7:A1:C6:90:ED:75:AD:2F:B9
Certificate issuer:       /CN=7a7a3a519711f6f3d9bb6f4b95008c532104d350
Certificate serial:       3414D9CD3F7BFDAE6E4FE1CC35FA869604B9D1BF
Authority key identifier: 7A:7A:3A:51:97:11:F6:F3:D9:BB:6F:4B:95:00:8C:53:21:04:D3:50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eno6UZcR9vPZu29LlQCMUyEE01A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/0/39332e39322e31372e302f32342d3234203d3e20383334.roa
Signing time:             Wed 26 Apr 2023 13:20:13 +0000
ROA not before:           Wed 26 Apr 2023 13:15:13 +0000
ROA not after:            Wed 24 Apr 2024 13:20:13 +0000
asID:                     834
IP address blocks:        93.92.17.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:14:d9:cd:3f:7b:fd:ae:6e:4f:e1:cc:35:fa:86:96:04:b9:d1:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a7a3a519711f6f3d9bb6f4b95008c532104d350
        Validity
            Not Before: Apr 26 13:15:13 2023 GMT
            Not After : Apr 24 13:20:13 2024 GMT
        Subject: CN=8A9FA12525F77288B53FE4A7A1C690ED75AD2FB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cc:fd:fb:d2:78:3a:23:20:1f:68:8d:57:e7:
                    86:cc:39:f7:18:3d:8c:b3:fb:2b:10:96:3e:5f:d9:
                    46:e0:a9:83:9a:16:93:f8:66:1b:98:98:cb:c1:4f:
                    fb:4e:68:0a:15:e4:54:2d:13:cb:79:08:01:c8:60:
                    40:35:8a:b0:96:ae:94:91:40:48:92:45:5e:b0:09:
                    78:de:eb:20:b5:0a:6c:11:e8:02:01:3f:47:3a:21:
                    d4:94:f7:dd:e8:75:c9:50:01:0d:34:c2:48:03:b2:
                    45:ef:b3:e7:38:a5:9b:38:91:12:5f:ed:67:b5:32:
                    72:29:10:b2:b8:fa:2e:e3:bc:0b:dc:bb:12:45:72:
                    45:ff:44:34:36:9a:22:1e:bc:50:04:c6:79:3b:c8:
                    3e:27:0f:4c:95:03:34:13:4b:e9:e2:65:c2:e9:7e:
                    85:e7:cd:10:a5:18:91:6d:c0:d9:9b:82:ad:ae:83:
                    c3:cf:55:c2:c9:ec:44:5e:6d:7b:61:a5:73:9f:6d:
                    61:a8:92:bb:4e:99:f9:7d:57:76:ae:6a:c4:c4:19:
                    f7:c5:66:46:8e:a7:68:ae:47:74:73:09:f1:28:0b:
                    42:ec:80:2c:b9:ce:fb:46:9c:99:62:f7:67:f9:d5:
                    05:8e:f7:89:ea:6f:fa:5d:74:52:07:b0:10:78:ac:
                    a2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9F:A1:25:25:F7:72:88:B5:3F:E4:A7:A1:C6:90:ED:75:AD:2F:B9
            X509v3 Authority Key Identifier:
                keyid:7A:7A:3A:51:97:11:F6:F3:D9:BB:6F:4B:95:00:8C:53:21:04:D3:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/0/7A7A3A519711F6F3D9BB6F4B95008C532104D350.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eno6UZcR9vPZu29LlQCMUyEE01A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/0/39332e39322e31372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.92.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:a1:a3:9d:f0:8c:ce:b1:15:0e:5c:8b:4f:82:6a:53:d9:57:
         0a:6a:55:6c:68:b6:e4:18:4b:34:b1:f7:07:fb:99:15:df:90:
         3d:c3:17:3b:3d:62:5c:ae:91:ad:7b:4b:82:ce:c1:1f:b0:6d:
         3d:8a:fa:2d:db:91:a9:8c:e1:e2:06:a3:63:1b:6d:c4:f9:3e:
         90:c6:e6:b2:a9:85:be:8a:5a:06:8c:22:8e:bf:16:09:a7:5d:
         b4:a4:64:8a:b1:73:f4:26:bf:4f:fc:6b:80:c6:93:99:55:9f:
         df:b0:79:b7:9d:ee:4c:ce:f3:99:0d:48:04:a0:76:f4:d1:ff:
         30:9a:a6:22:32:44:58:a4:ee:9e:67:fb:c1:ba:bb:cb:1a:3d:
         2d:7a:ee:10:b4:fb:91:98:e7:f6:f5:08:c5:96:fe:22:f5:61:
         41:c0:f1:44:39:3b:d8:50:7d:a9:dc:07:92:b8:b0:43:27:0f:
         e2:75:b2:7b:a1:3a:a5:11:a7:19:78:9e:f6:62:17:ee:2c:2b:
         79:4a:e6:30:28:c1:b7:3a:de:5b:6d:0d:99:c0:dc:15:75:bc:
         bf:0c:d5:64:75:2d:25:3b:97:d0:ff:f3:75:07:1c:b3:49:26:
         13:9a:fe:86:a3:d7:0b:91:23:8d:4d:41:76:32:83:a7:d7:96:
         66:6d:ba:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----