Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b138f581-e8b2-4416-8302-716b6ce65206/0/34352e3134352e3234312e302f32342d3234203d3e203536393133.roa
File:                     34352e3134352e3234312e302f32342d3234203d3e203536393133.roa (raw, json)
Hash identifier:          zv0Grn1FwCxAF/2I2cu749Sba9HhnjPpQdEWhycXHxE=
Subject key identifier:   47:28:0E:32:AA:F9:DE:2F:3A:F3:5D:19:E1:AE:61:F6:BC:E1:7E:9E
Certificate issuer:       /CN=3fee952bad4efed0ee5b17937a75fbec861dbff7
Certificate serial:       0E67E41975C95A6AFDFFE59DC4B3DD67082395A8
Authority key identifier: 3F:EE:95:2B:AD:4E:FE:D0:EE:5B:17:93:7A:75:FB:EC:86:1D:BF:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P-6VK61O_tDuWxeTenX77IYdv_c.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b138f581-e8b2-4416-8302-716b6ce65206/0/34352e3134352e3234312e302f32342d3234203d3e203536393133.roa
Signing time:             Fri 31 Mar 2023 14:22:57 +0000
ROA not before:           Fri 31 Mar 2023 14:17:57 +0000
ROA not after:            Fri 29 Mar 2024 14:22:57 +0000
asID:                     56913
IP address blocks:        45.145.241.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:67:e4:19:75:c9:5a:6a:fd:ff:e5:9d:c4:b3:dd:67:08:23:95:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fee952bad4efed0ee5b17937a75fbec861dbff7
        Validity
            Not Before: Mar 31 14:17:57 2023 GMT
            Not After : Mar 29 14:22:57 2024 GMT
        Subject: CN=47280E32AAF9DE2F3AF35D19E1AE61F6BCE17E9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6c:e9:cf:de:c4:b9:00:9f:13:0c:2f:bb:e3:
                    4c:16:54:84:71:32:fd:e8:2d:06:8f:4c:09:56:fa:
                    25:55:f6:bc:c9:1f:9e:ac:44:6d:0e:0b:d1:92:29:
                    8a:bb:b9:f3:f1:84:bb:cb:e5:29:4d:72:cb:6d:7f:
                    11:b4:ee:98:73:a9:8a:dc:c4:11:5b:b2:25:3d:16:
                    5b:b9:f2:49:35:f4:4e:49:80:73:1f:70:a3:79:d1:
                    4a:10:72:ca:45:40:b1:a1:9e:dd:d3:59:f8:d2:9d:
                    1f:62:8d:31:02:a9:5d:c5:11:ec:fe:94:d6:51:e8:
                    e6:3e:4a:b8:ab:99:db:bc:f1:04:df:c4:87:53:76:
                    b6:bc:de:7d:df:f2:ed:d7:87:51:1b:a0:2d:59:fb:
                    d1:4b:f4:44:c2:d3:2f:be:f0:11:56:47:43:4e:1c:
                    2a:1e:dd:74:92:15:d1:67:8e:c7:ed:70:68:34:76:
                    63:f1:0a:c9:d0:08:2f:0b:41:fe:0d:3a:7f:fc:b3:
                    a6:48:de:85:31:b3:75:a2:33:b5:b9:0e:32:78:9c:
                    27:d0:8d:43:c4:3e:d8:0d:9f:a9:82:e1:e2:b2:d9:
                    da:ca:29:90:ee:cc:1b:91:37:da:d4:5e:8b:3d:4e:
                    74:05:a5:bb:18:21:db:0d:98:ad:8f:2a:23:22:b6:
                    99:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:28:0E:32:AA:F9:DE:2F:3A:F3:5D:19:E1:AE:61:F6:BC:E1:7E:9E
            X509v3 Authority Key Identifier:
                keyid:3F:EE:95:2B:AD:4E:FE:D0:EE:5B:17:93:7A:75:FB:EC:86:1D:BF:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b138f581-e8b2-4416-8302-716b6ce65206/0/3FEE952BAD4EFED0EE5B17937A75FBEC861DBFF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-6VK61O_tDuWxeTenX77IYdv_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b138f581-e8b2-4416-8302-716b6ce65206/0/34352e3134352e3234312e302f32342d3234203d3e203536393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.145.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:40:e5:c8:b6:f8:78:3f:f1:ef:49:2b:e4:73:c0:42:97:1a:
         c8:e1:5c:f6:3d:67:7a:24:5c:f0:6a:3d:8d:20:b6:a8:ec:6a:
         1f:88:f7:8d:b8:24:4e:08:eb:d5:71:9c:f0:37:53:68:3b:86:
         05:c7:4c:82:d2:28:3e:78:0f:eb:68:fc:06:7c:86:76:d1:04:
         a6:db:16:9e:49:d4:5f:84:5a:79:93:8a:10:7c:91:ab:58:f3:
         fe:c0:58:00:e1:19:6a:36:c9:07:68:f6:1f:c8:91:c9:8b:67:
         64:e6:80:24:5f:e9:aa:bc:9b:8f:17:47:3d:5d:78:d0:70:bd:
         d0:67:e8:7a:9e:79:15:72:a3:8e:80:3e:5b:87:ea:2d:94:68:
         b0:5d:d7:86:e8:91:35:b3:1d:f5:ee:32:08:17:22:55:10:0f:
         1f:ac:92:93:89:be:6c:1d:5a:e8:1e:af:19:d1:8d:c5:b8:43:
         d9:f3:50:08:5b:9a:ca:a2:60:ed:41:fa:5a:ca:c4:63:44:18:
         2b:c3:c7:0e:ad:8d:cf:96:00:32:2e:ff:59:7d:be:dd:b5:c9:
         83:51:eb:ff:27:29:e2:8d:62:34:0e:e6:a5:91:05:73:67:08:
         cf:c4:d1:2f:1f:bd:6f:07:24:72:9c:a4:21:14:7b:3f:48:ce:
         73:13:26:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----