Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234343a3a2f34382d3438203d3e20323035333239.roa
File:                     326131323a646434373a383234343a3a2f34382d3438203d3e20323035333239.roa (raw, json)
Hash identifier:          kAzjWIn9LbD5ppCqNr/KUTeazfnMGXntk4FLY23rI10=
Subject key identifier:   CF:E9:58:CA:19:FF:91:F3:4C:BF:9F:D0:CD:05:EC:E7:36:7F:AE:DE
Certificate issuer:       /CN=8D57D440906265349F6DEF98557AC28D0381C47E
Certificate serial:       0ED54441D25681E2FE0B75775C843FC12611277F
Authority key identifier: 8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
Authority info access:    rsync://rpki.co/repo/AS945/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234343a3a2f34382d3438203d3e20323035333239.roa
Signing time:             Fri 13 Oct 2023 19:55:04 +0000
ROA not before:           Fri 13 Oct 2023 19:50:04 +0000
ROA not after:            Fri 11 Oct 2024 19:55:04 +0000
asID:                     205329
IP address blocks:        2a12:dd47:8244::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d5:44:41:d2:56:81:e2:fe:0b:75:77:5c:84:3f:c1:26:11:27:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D57D440906265349F6DEF98557AC28D0381C47E
        Validity
            Not Before: Oct 13 19:50:04 2023 GMT
            Not After : Oct 11 19:55:04 2024 GMT
        Subject: CN=CFE958CA19FF91F34CBF9FD0CD05ECE7367FAEDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3d:48:f9:fa:1c:94:cb:be:55:81:e9:d7:c3:
                    43:9c:be:da:c8:ec:96:4a:fe:52:82:36:4a:05:60:
                    ac:46:f6:5f:b9:7b:12:73:09:e8:42:e2:8a:94:52:
                    a6:34:34:7d:6d:5c:a9:8c:de:f9:d8:06:6e:1f:b7:
                    ca:0e:1f:aa:65:2c:89:2f:2e:81:e8:c1:ad:4b:bc:
                    f4:39:72:6b:e9:48:42:59:7f:7b:7e:12:a3:b6:a6:
                    93:8d:d3:47:30:ad:96:04:2b:d3:6c:9f:5f:da:93:
                    a3:04:69:cb:24:62:63:94:69:ff:c8:43:94:e4:3b:
                    57:3c:2a:07:65:c0:3e:ea:2b:5c:a3:fe:65:b8:e5:
                    2a:e6:b8:e8:7f:04:63:f3:96:62:40:fc:0e:87:00:
                    c8:02:ce:64:23:fe:40:50:53:8b:84:db:4b:05:75:
                    9a:bf:39:75:22:1f:48:c6:a9:f0:d4:c9:48:f8:72:
                    59:98:f5:8f:be:22:f9:23:cc:43:8a:49:be:06:97:
                    b2:5a:77:4e:d2:91:5c:c3:af:68:71:eb:3a:3a:2f:
                    02:58:e8:c8:d5:26:04:65:ca:c8:a1:5f:1e:a5:33:
                    14:10:b9:a8:51:b2:d3:77:8f:41:3c:69:9e:64:e1:
                    a0:7c:e3:d7:f9:04:3e:30:cf:1d:4c:12:03:80:ac:
                    c4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E9:58:CA:19:FF:91:F3:4C:BF:9F:D0:CD:05:EC:E7:36:7F:AE:DE
            X509v3 Authority Key Identifier:
                keyid:8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/8D57D440906265349F6DEF98557AC28D0381C47E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234343a3a2f34382d3438203d3e20323035333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8244::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:a9:ff:96:fe:20:2d:54:82:25:f7:22:bb:69:4d:bc:92:4e:
         4a:98:8f:11:f9:c1:27:71:3b:00:1c:c8:41:bc:f8:3c:68:16:
         bf:ae:95:ec:02:96:2b:6a:51:39:a9:00:97:38:50:2b:5b:83:
         8f:39:2b:89:bd:4f:a2:f3:82:58:b1:be:a9:ac:99:19:d2:9b:
         58:06:e9:e4:c7:ac:7a:25:97:16:91:f4:00:9e:b8:90:17:96:
         6e:2e:6b:3d:c1:24:c3:c5:69:7f:c2:cf:e5:85:dd:3e:5b:a7:
         22:7f:b4:1f:15:36:c8:b9:62:39:fb:b4:14:e2:75:5b:bd:56:
         46:2f:e2:1a:93:c5:2f:97:a7:b7:2f:3c:e9:52:71:6d:33:fb:
         c1:ea:a4:56:74:fd:25:f2:be:e9:55:2b:1a:a9:2e:8c:30:72:
         c2:8f:06:69:9c:82:70:3d:32:4c:d0:ea:c7:f8:99:d6:70:7f:
         6d:53:e3:69:e4:6d:57:e9:2c:ec:f1:88:98:f3:4d:a4:c0:a8:
         aa:c6:e5:8e:8d:11:c0:cc:bf:8d:f0:d0:b2:33:1b:f0:f1:0e:
         68:ee:28:97:ba:b5:02:45:a1:24:b0:9d:66:04:f4:f7:2f:27:
         ed:0b:31:52:ad:c5:19:28:51:80:80:89:27:26:43:24:d1:3e:
         3a:33:85:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----