Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/17/323030313a3766383a3133373a3a2f34382d3438203d3e20323032303736.roa
File:                     323030313a3766383a3133373a3a2f34382d3438203d3e20323032303736.roa (raw, json)
Hash identifier:          9QsaK7Yvo9N6AJs7uwaiDq9fU+/eCn19urK4cqPyPAE=
Subject key identifier:   F7:08:B3:2C:93:AD:01:EE:FB:3F:ED:FD:F3:90:6D:6D:9F:FC:B5:9A
Certificate issuer:       /CN=5c39713123c652e0f02b25389490f94f89dd818a
Certificate serial:       58ABD771241B77B4048F94D9B007E3B63917F680
Authority key identifier: 5C:39:71:31:23:C6:52:E0:F0:2B:25:38:94:90:F9:4F:89:DD:81:8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XDlxMSPGUuDwKyU4lJD5T4ndgYo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/17/323030313a3766383a3133373a3a2f34382d3438203d3e20323032303736.roa
Signing time:             Sun 30 Jun 2024 12:15:23 +0000
ROA not before:           Sun 30 Jun 2024 12:10:23 +0000
ROA not after:            Sun 29 Jun 2025 12:15:23 +0000
asID:                     202076
IP address blocks:        2001:7f8:137::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ab:d7:71:24:1b:77:b4:04:8f:94:d9:b0:07:e3:b6:39:17:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c39713123c652e0f02b25389490f94f89dd818a
        Validity
            Not Before: Jun 30 12:10:23 2024 GMT
            Not After : Jun 29 12:15:23 2025 GMT
        Subject: CN=F708B32C93AD01EEFB3FEDFDF3906D6D9FFCB59A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fc:25:e6:59:7a:f4:96:a2:26:1b:2a:fe:86:
                    6f:6f:55:15:b0:fc:0f:20:d3:13:b8:71:05:5f:e5:
                    94:9d:62:ca:9c:7d:87:cb:53:dd:f9:8f:5d:65:2d:
                    12:01:8a:86:8c:4f:e9:66:25:32:c5:8e:46:40:32:
                    1a:98:8a:e5:51:2c:c2:82:6f:2e:2b:e8:1e:35:30:
                    53:82:7f:47:62:22:20:ad:9b:96:05:81:9c:7b:4e:
                    f1:19:89:85:bc:ac:cc:bc:f8:fb:55:13:1e:2a:e4:
                    e7:66:1a:76:d4:65:47:02:ba:4c:39:7a:b1:2c:66:
                    42:3e:1c:da:f4:0e:c6:ac:87:5a:37:98:01:20:bf:
                    40:e3:97:35:80:37:c4:1a:e2:7f:00:9d:13:c3:04:
                    ef:88:67:5f:7b:23:49:8b:5d:d1:cd:8b:b3:56:d1:
                    6b:6e:90:aa:b5:1d:b5:aa:df:d1:f8:72:8f:ad:dc:
                    6f:ed:eb:32:50:94:ed:12:88:f4:6a:34:ca:29:3e:
                    dc:c7:e4:85:c7:d3:e4:cf:c4:d2:b7:19:db:7c:86:
                    fb:c1:8b:a9:f1:88:78:43:4b:42:36:19:a1:d4:7b:
                    48:56:ab:fc:b9:20:fe:2c:7d:3c:e8:4c:c0:7f:60:
                    70:7c:4e:77:9d:b0:d1:dd:3f:e8:16:1b:78:7e:da:
                    f5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:08:B3:2C:93:AD:01:EE:FB:3F:ED:FD:F3:90:6D:6D:9F:FC:B5:9A
            X509v3 Authority Key Identifier:
                keyid:5C:39:71:31:23:C6:52:E0:F0:2B:25:38:94:90:F9:4F:89:DD:81:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/17/5C39713123C652E0F02B25389490F94F89DD818A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDlxMSPGUuDwKyU4lJD5T4ndgYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/17/323030313a3766383a3133373a3a2f34382d3438203d3e20323032303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:7f8:137::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:e0:c3:02:cd:a4:11:82:7f:1b:2c:87:c1:9b:8d:76:06:91:
         d3:dd:9f:65:f0:5f:81:18:f4:47:f8:22:ef:5f:6f:cd:43:ef:
         3f:ca:98:ca:63:39:fe:75:b0:eb:f6:24:ed:67:9e:a8:35:1b:
         7a:80:07:72:9d:c7:1c:cb:41:aa:c8:87:46:ce:3d:c0:67:49:
         23:68:26:d0:43:16:7b:da:ce:27:93:ac:ed:71:31:5b:88:8e:
         95:fa:58:98:03:81:fc:1e:63:6a:05:76:4a:87:13:f1:2e:74:
         64:80:96:3c:56:8b:4c:83:f7:c0:5a:af:f5:68:ae:6b:9f:b8:
         87:2a:3c:8a:0f:be:f3:05:6e:9e:10:49:a8:42:64:2d:4f:1e:
         5f:25:84:07:7f:93:b8:4d:55:33:79:3c:bc:c4:cb:e2:d3:a7:
         9c:96:7c:5b:bf:c4:d4:14:29:7e:e7:d3:73:5e:d0:11:ed:e4:
         82:09:e7:a0:a7:a0:2e:a3:bb:8b:cb:38:94:d9:96:e8:34:ea:
         78:a5:92:4f:7d:44:44:f8:43:6f:9b:ab:f8:d5:3d:16:27:71:
         ac:3b:32:94:e4:59:fb:ee:59:2e:36:01:54:af:81:3c:58:ff:
         be:ea:2a:f0:2e:b3:4e:1f:6d:d7:98:53:33:20:98:6a:16:d2:
         3e:fc:6e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----