Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234303a3a2f34382d3438203d3e20323035333239.roa
File:                     326131323a646434373a383234303a3a2f34382d3438203d3e20323035333239.roa (raw, json)
Hash identifier:          aB02RN1nC9w5G59I1dUrjlEPQnQ74SkCUqEDZ96frCA=
Subject key identifier:   95:47:D2:61:D4:DD:38:9E:C6:8B:2E:37:02:EE:77:6B:92:34:B7:14
Certificate issuer:       /CN=8D57D440906265349F6DEF98557AC28D0381C47E
Certificate serial:       113CDFD59684601099E361849BDB346B61A496AB
Authority key identifier: 8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
Authority info access:    rsync://rpki.co/repo/AS945/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234303a3a2f34382d3438203d3e20323035333239.roa
Signing time:             Fri 13 Oct 2023 19:55:04 +0000
ROA not before:           Fri 13 Oct 2023 19:50:04 +0000
ROA not after:            Fri 11 Oct 2024 19:55:04 +0000
asID:                     205329
IP address blocks:        2a12:dd47:8240::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:3c:df:d5:96:84:60:10:99:e3:61:84:9b:db:34:6b:61:a4:96:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D57D440906265349F6DEF98557AC28D0381C47E
        Validity
            Not Before: Oct 13 19:50:04 2023 GMT
            Not After : Oct 11 19:55:04 2024 GMT
        Subject: CN=9547D261D4DD389EC68B2E3702EE776B9234B714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:33:fa:3a:21:95:b7:ee:e0:61:c7:e8:ee:a5:
                    67:b0:99:ba:70:f2:07:49:43:c3:b3:c6:68:15:ef:
                    68:f3:2d:0c:83:2c:d6:5f:10:0e:19:8b:5e:92:d3:
                    f2:48:8c:a1:aa:ac:07:e7:88:b5:76:3b:be:2f:b3:
                    a5:ac:a0:28:af:0c:ee:18:da:34:e1:04:db:b7:70:
                    55:b5:59:98:43:c6:d8:ca:63:a9:b7:c9:4f:c5:39:
                    6d:81:a4:b2:7f:49:65:0d:15:60:84:df:24:50:e2:
                    9f:d6:9a:5a:d6:c3:1a:7c:7d:a7:9c:c8:c8:c3:f8:
                    fe:c6:d8:76:fa:de:46:c9:54:f7:40:c5:46:50:30:
                    0b:a1:93:65:54:0a:f4:94:cf:74:20:34:01:07:ef:
                    f0:72:f4:94:79:e3:12:fd:e8:9b:81:0a:1c:9c:e1:
                    ff:a6:6c:38:cd:68:de:bd:7c:91:51:ea:fc:52:0c:
                    b2:c4:54:b0:06:a2:ab:5d:29:9c:b1:a3:83:bd:44:
                    61:db:a7:7a:5b:db:07:55:9b:52:0f:39:ed:68:f1:
                    eb:d2:b3:a3:c8:c4:3e:55:8e:3c:c2:78:2b:2e:3f:
                    74:4a:95:e7:ba:6f:a4:17:0a:28:c7:8a:ed:cf:27:
                    21:1d:26:42:c1:f3:20:6d:75:8f:4b:25:73:88:db:
                    62:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:47:D2:61:D4:DD:38:9E:C6:8B:2E:37:02:EE:77:6B:92:34:B7:14
            X509v3 Authority Key Identifier:
                keyid:8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/8D57D440906265349F6DEF98557AC28D0381C47E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234303a3a2f34382d3438203d3e20323035333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8240::/48

    Signature Algorithm: sha256WithRSAEncryption
         c2:bd:9b:86:8a:03:87:72:ca:30:d2:4a:f2:69:0d:fc:21:3b:
         40:08:06:09:56:5c:2c:9b:13:16:46:a6:d9:40:1a:b1:3f:1a:
         fd:5c:ee:f4:88:a5:b1:c3:a1:60:9a:18:70:01:dc:fa:e4:6e:
         59:e3:bf:df:11:77:f2:8f:62:b1:c9:96:e0:2e:51:c9:6f:d3:
         f1:a1:ba:22:dd:56:a9:22:2e:ea:b1:52:ca:7b:7d:4c:96:e7:
         f2:b7:75:e4:d0:68:11:cb:84:02:b8:d4:6d:ce:93:bc:dd:16:
         49:bc:01:41:70:00:30:19:7f:fa:dd:75:d3:76:81:83:4e:00:
         d0:3c:1d:51:58:01:6e:a7:78:2b:4b:e8:53:2d:85:84:22:14:
         9b:57:cf:22:c9:b9:66:84:7b:64:fd:12:8e:ea:d1:ba:ed:70:
         3d:53:77:8f:f2:0f:69:a4:47:c9:84:54:8f:3b:f1:6c:4e:84:
         e8:88:3e:39:45:02:20:4a:cf:72:e7:d2:6b:e9:4a:8f:9e:29:
         12:a4:00:8f:86:60:13:a5:ea:05:64:80:78:83:11:e9:8f:b7:
         20:96:68:22:51:b0:23:9a:62:59:a2:93:cd:b9:35:b5:f6:d7:
         81:f3:79:c1:d7:23:61:81:95:2a:8f:2e:0d:91:ce:33:95:ee:
         a9:8c:65:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----