Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS142164.roa
File:                     AS142164.roa (raw, json)
Hash identifier:          +ANSpN5hFGTU8hn7rdPqKZQwz0Or4R4kT5oWTLu1NT4=
Subject key identifier:   7C:E8:82:B9:64:3F:B1:52:84:9E:25:5F:DE:A7:68:60:F5:C5:60:03
Certificate issuer:       /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial:       2617D9815A30176122B8F8F2283FD20B698B5F3B
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS142164.roa
Signing time:             Sun 01 Jan 2023 23:59:25 +0000
ROA not before:           Sun 01 Jan 2023 23:54:25 +0000
ROA not after:            Sun 31 Dec 2023 23:59:25 +0000
asID:                     142164
IP address blocks:        2a06:a005:e80::/44 maxlen: 48
                          2a06:a005:e90::/44 maxlen: 48
                          2a06:a005:ea0::/44 maxlen: 48
                          2a06:a005:eb0::/44 maxlen: 48
                          2a06:a005:ec0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:17:d9:81:5a:30:17:61:22:b8:f8:f2:28:3f:d2:0b:69:8b:5f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
        Validity
            Not Before: Jan  1 23:54:25 2023 GMT
            Not After : Dec 31 23:59:25 2023 GMT
        Subject: CN=7CE882B9643FB152849E255FDEA76860F5C56003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:28:3d:33:3c:d7:5e:0e:82:9f:9a:3d:35:db:
                    f5:b5:bc:2b:83:b5:71:a4:61:2f:bc:26:9b:77:1c:
                    f9:65:17:93:4a:f6:de:3b:c7:7a:4d:60:3a:c3:eb:
                    63:00:e0:91:a2:56:bb:a0:08:a0:67:79:98:5c:31:
                    61:5d:12:48:c1:28:c8:78:0a:16:55:66:10:3e:37:
                    5f:48:23:cb:28:55:3d:dc:0e:fe:23:28:67:66:f9:
                    e3:10:f7:7d:ce:b3:56:b1:df:e7:1a:1f:9b:da:61:
                    1d:5b:6f:86:55:d0:87:ac:15:c6:8a:f3:55:e0:71:
                    07:3e:e1:97:98:df:c5:f6:33:61:f0:e5:49:a7:e1:
                    18:e2:35:57:9c:22:a9:91:ee:e6:79:cc:52:56:cb:
                    93:37:d6:8d:2d:d6:ef:92:45:50:cb:ef:ae:52:ec:
                    80:f0:88:20:2a:3f:61:bf:98:be:d8:b4:da:3b:c9:
                    0e:b2:b7:e5:36:aa:d5:19:cf:9e:2c:fd:2b:ed:9b:
                    6a:04:23:84:db:47:a7:8f:32:f1:de:8f:3b:b2:29:
                    d9:7c:f8:77:79:15:96:f6:b9:1e:2f:50:45:0e:ef:
                    e0:63:4a:9d:6c:1f:17:c1:fa:33:a0:b1:9a:cb:78:
                    20:f7:24:a3:a3:f3:96:fe:f2:d8:ec:52:a4:fe:00:
                    11:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E8:82:B9:64:3F:B1:52:84:9E:25:5F:DE:A7:68:60:F5:C5:60:03
            X509v3 Authority Key Identifier:
                keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS142164.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:e80::-2a06:a005:ecf:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         01:6c:f3:3e:36:b8:e8:52:d9:a6:6c:1a:3a:e0:94:20:46:76:
         6b:36:db:98:3b:a5:13:1b:54:a6:c3:c5:e9:94:06:33:4e:c4:
         29:47:34:4a:3a:8e:95:f5:0c:fa:36:71:03:81:38:35:70:97:
         4b:4b:15:4a:52:90:33:0f:fb:50:46:c7:3c:ae:94:fd:b2:76:
         86:16:8f:c3:cc:85:ac:c6:58:b5:c1:e6:3e:7b:fa:9c:33:2e:
         90:39:a8:f9:c7:ed:7d:25:38:75:3c:eb:23:29:5d:ab:14:0a:
         86:ae:d8:31:42:a1:12:fd:fb:80:58:55:62:84:e5:84:94:88:
         7c:27:94:05:6a:25:f8:97:b6:6f:6c:9e:8c:a7:51:ab:39:27:
         b9:b4:3d:cf:6a:b7:3c:70:de:24:6c:cd:da:44:d3:64:e1:ae:
         a9:56:91:36:60:75:85:5a:be:cb:d3:05:83:3e:4e:22:d8:52:
         d3:4d:02:63:8f:93:24:f6:78:b3:7e:7a:e3:c2:79:3e:51:1c:
         cf:24:a2:a1:3e:e6:91:81:c6:38:a8:da:68:80:56:12:ce:3b:
         62:dc:d8:41:9f:08:51:99:75:27:5b:93:97:78:c4:42:c7:14:
         00:9d:dd:a3:03:4b:f0:4e:74:26:d2:6b:69:a0:a2:2c:d5:48:
         b2:0b:31:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----