Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234383a3a2f34382d3438203d3e20323035333239.roa
File:                     326131323a646434373a383234383a3a2f34382d3438203d3e20323035333239.roa (raw, json)
Hash identifier:          bs0f5H6hAGSBZn47mMhTXVTC2AfAQFiCzrQENDu1Duo=
Subject key identifier:   D5:89:6E:08:98:04:9A:05:2F:2E:33:2A:26:BE:A2:6C:95:71:1E:2B
Certificate issuer:       /CN=8D57D440906265349F6DEF98557AC28D0381C47E
Certificate serial:       2853D48B1449967FF3085225684FF1F4D99745FD
Authority key identifier: 8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
Authority info access:    rsync://rpki.co/repo/AS945/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234383a3a2f34382d3438203d3e20323035333239.roa
Signing time:             Fri 13 Oct 2023 19:55:05 +0000
ROA not before:           Fri 13 Oct 2023 19:50:05 +0000
ROA not after:            Fri 11 Oct 2024 19:55:05 +0000
asID:                     205329
IP address blocks:        2a12:dd47:8248::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:53:d4:8b:14:49:96:7f:f3:08:52:25:68:4f:f1:f4:d9:97:45:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D57D440906265349F6DEF98557AC28D0381C47E
        Validity
            Not Before: Oct 13 19:50:05 2023 GMT
            Not After : Oct 11 19:55:05 2024 GMT
        Subject: CN=D5896E0898049A052F2E332A26BEA26C95711E2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2a:a7:3a:92:ae:f5:b9:a5:dd:38:8a:6c:6f:
                    0b:4f:ca:d3:3b:2c:cd:4d:b0:6e:e7:0f:c2:0d:17:
                    42:88:9e:0f:88:e8:8f:41:e8:e8:19:dc:51:7d:4e:
                    f6:b8:c8:22:37:e4:6d:c4:78:3c:1b:76:67:83:b1:
                    cd:a9:d3:5e:53:05:f2:d1:b1:f1:88:36:17:37:e4:
                    df:30:c2:07:cb:03:0c:88:40:f8:91:7c:88:a7:ab:
                    4c:f6:6f:c6:65:a6:d6:59:61:9d:76:b6:48:e5:71:
                    fa:1b:90:e7:11:6c:5a:6b:37:d2:d4:3c:f5:95:4c:
                    5d:90:96:31:ac:39:28:65:30:00:6e:58:bd:75:58:
                    2e:2f:1d:43:d5:85:94:16:d1:33:d5:9c:38:60:ee:
                    b9:9c:24:36:e2:dd:a1:05:92:bc:8a:65:e6:9c:8a:
                    ae:da:3d:25:d2:05:5c:6e:d8:e1:47:45:b2:51:c0:
                    e2:43:6c:68:9c:17:8b:85:b9:c6:f4:c9:83:93:23:
                    47:1d:ed:0a:62:6f:fd:6c:65:d0:76:d6:c2:72:f0:
                    eb:16:dc:cf:ff:3f:7b:2d:e2:d3:b2:81:79:66:b0:
                    70:2e:c6:a3:c1:36:3d:d9:d1:0c:74:81:18:10:5c:
                    4b:4a:5c:2a:b0:27:66:e4:79:64:f7:b1:3f:42:56:
                    a7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:89:6E:08:98:04:9A:05:2F:2E:33:2A:26:BE:A2:6C:95:71:1E:2B
            X509v3 Authority Key Identifier:
                keyid:8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/8D57D440906265349F6DEF98557AC28D0381C47E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234383a3a2f34382d3438203d3e20323035333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8248::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:7e:71:1f:a2:be:8b:29:ad:c9:23:ad:73:bc:15:e2:41:f1:
         67:a6:bc:b9:a0:e1:e7:29:1f:73:60:34:3b:2a:a8:a4:8d:26:
         01:c4:b3:8f:6b:c9:4a:e7:eb:22:4c:9d:77:b6:39:7e:1f:56:
         65:df:c1:3a:24:5b:c1:dd:11:5f:a6:87:8d:4a:1f:d3:3b:f8:
         d3:8b:68:2c:81:59:13:1b:f2:91:3d:6e:ed:8f:5d:8a:df:6f:
         24:e5:ac:d2:0b:1e:4f:3e:39:9d:ac:dd:f9:73:5d:51:bb:c8:
         35:8d:cb:53:87:6d:4c:96:5c:a4:9e:1e:01:74:df:58:cf:81:
         ad:7a:3f:dc:ac:b7:b8:12:6c:de:be:f3:e3:d1:95:de:c6:7d:
         51:f6:dd:08:02:52:a4:f1:bc:55:60:86:ec:b5:02:fa:31:4e:
         f9:22:de:ad:4e:87:c4:32:e1:37:e7:0b:9a:c0:7f:b5:4f:90:
         6e:90:80:f5:75:29:ef:e8:e5:bc:b1:f4:87:68:f4:52:d5:9d:
         c6:f2:83:f1:78:15:a6:8e:56:2e:58:e2:2b:98:54:1f:9b:3f:
         f3:fd:61:aa:50:a2:89:51:d1:60:7b:14:7e:bc:db:3d:55:24:
         8b:e5:9a:7b:87:5e:bf:00:df:7e:b9:8b:80:8a:a5:76:6a:0b:
         a4:84:d6:07
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUKFPUixRJln/zCFIlaE/x9NmXRf0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ1N0Q0NDA5MDYyNjUzNDlGNkRFRjk4NTU3QUMyOEQw
MzgxQzQ3RTAeFw0yMzEwMTMxOTUwMDVaFw0yNDEwMTExOTU1MDVaMDMxMTAvBgNV
BAMTKEQ1ODk2RTA4OTgwNDlBMDUyRjJFMzMyQTI2QkVBMjZDOTU3MTFFMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTKqc6kq71uaXdOIpsbwtPytM7
LM1NsG7nD8INF0KIng+I6I9B6OgZ3FF9Tva4yCI35G3EeDwbdmeDsc2p015TBfLR
sfGINhc35N8wwgfLAwyIQPiRfIinq0z2b8ZlptZZYZ12tkjlcfobkOcRbFprN9LU
PPWVTF2QljGsOShlMABuWL11WC4vHUPVhZQW0TPVnDhg7rmcJDbi3aEFkryKZeac
iq7aPSXSBVxu2OFHRbJRwOJDbGicF4uFucb0yYOTI0cd7Qpib/1sZdB21sJy8OsW
3M//P3st4tOygXlmsHAuxqPBNj3Z0Qx0gRgQXEtKXCqwJ2bkeWT3sT9CVqetAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQU1YluCJgEmgUvLjMqJr6ibJVxHiswHwYDVR0j
BBgwFoAUjVfUQJBiZTSfbe+YVXrCjQOBxH4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDY5NzE2MGMtYWNjNS00YjUxLWJmNTUtMTBjN2E2ZTY2
OTgwLzQvOEQ1N0Q0NDA5MDYyNjUzNDlGNkRFRjk4NTU3QUMyOEQwMzgxQzQ3RS5j
cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kuY28v
cmVwby9BUzk0NS8xLzhENTdENDQwOTA2MjY1MzQ5RjZERUY5ODU1N0FDMjhEMDM4
MUM0N0UuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3lu
YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Q2OTcxNjBj
LWFjYzUtNGI1MS1iZjU1LTEwYzdhNmU2Njk4MC80LzMyNjEzMTMyM2E2NDY0MzQz
NzNhMzgzMjM0MzgzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMwMzUzMzMyMzku
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwAqEt1HgkgwDQYJKoZIhvcNAQELBQADggEBACt+cR+ivosprckj
rXO8FeJB8WemvLmg4ecpH3NgNDsqqKSNJgHEs49ryUrn6yJMnXe2OX4fVmXfwTok
W8HdEV+mh41KH9M7+NOLaCyBWRMb8pE9bu2PXYrfbyTlrNILHk8+OZ2s3flzXVG7
yDWNy1OHbUyWXKSeHgF031jPga16P9yst7gSbN6+8+PRld7GfVH23QgCUqTxvFVg
huy1AvoxTvki3q1Oh8Qy4TfnC5rAf7VPkG6QgPV1Ke/o5byx9Ido9FLVncbyg/F4
FaaOVi5Y4iuYVB+bP/P9YapQoolR0WB7FH682z1VJIvlmnuHXr8A3365i4CKpXZq
C6SE1gc=
-----END CERTIFICATE-----