Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200255.roa
File:                     AS200255.roa (raw, json)
Hash identifier:          eu3e1NoYMO0aRyFKYJwAMt8lQkww5tm+Y5Hsco3yAQc=
Subject key identifier:   ED:B0:28:7F:A8:44:C3:95:0A:C5:C3:0B:02:96:B8:B2:A7:69:B0:C6
Certificate issuer:       /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial:       3CE5958064EECE75DEE2102FAEF32DD54C09FD98
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200255.roa
Signing time:             Sun 01 Jan 2023 23:59:13 +0000
ROA not before:           Sun 01 Jan 2023 23:54:13 +0000
ROA not after:            Sun 31 Dec 2023 23:59:13 +0000
asID:                     200255
IP address blocks:        2a06:a005:a00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e5:95:80:64:ee:ce:75:de:e2:10:2f:ae:f3:2d:d5:4c:09:fd:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
        Validity
            Not Before: Jan  1 23:54:13 2023 GMT
            Not After : Dec 31 23:59:13 2023 GMT
        Subject: CN=EDB0287FA844C3950AC5C30B0296B8B2A769B0C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:21:56:30:fb:e2:b1:2d:3c:70:d6:0a:d0:a0:
                    73:b8:e8:e3:bf:90:ad:53:a4:74:8e:83:11:d4:49:
                    29:11:06:bc:97:55:e3:6f:70:34:79:1c:e1:db:4b:
                    9c:a2:8f:31:a3:b1:f6:a9:b4:2b:f1:37:d5:91:7d:
                    e1:8f:01:e7:45:b5:da:46:66:52:39:27:99:9e:ab:
                    02:67:3e:c6:2d:30:8a:eb:8c:e5:f2:1c:29:0c:4b:
                    97:c3:8b:97:c4:c2:5f:9f:12:0d:16:04:8d:c0:74:
                    28:b0:8b:39:a1:53:db:26:fc:fa:10:60:73:27:3b:
                    30:ae:0b:fd:c5:90:62:5a:02:85:eb:bd:56:f5:f4:
                    16:42:ae:aa:82:57:d9:16:5f:5a:99:e8:22:72:49:
                    0b:51:38:b2:9c:1f:2f:08:f3:85:40:7b:03:b4:da:
                    99:e7:02:17:bc:8b:a8:c3:26:9c:c6:d9:fa:ce:4b:
                    eb:98:3b:1b:c5:41:32:48:ec:2e:2a:45:de:3b:57:
                    12:28:a9:75:74:95:11:48:69:82:7c:43:a6:cb:37:
                    87:01:8c:89:69:bf:c7:9a:58:d6:6a:89:72:e5:36:
                    fb:f8:2d:30:cf:9c:52:76:69:99:f9:ec:9f:8f:08:
                    05:38:be:a1:7c:5e:d7:8c:22:76:c7:41:10:96:89:
                    b7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B0:28:7F:A8:44:C3:95:0A:C5:C3:0B:02:96:B8:B2:A7:69:B0:C6
            X509v3 Authority Key Identifier:
                keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200255.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:a00::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:b6:1c:e7:13:cc:75:cf:0e:17:6b:ef:1f:20:cf:b6:d5:0d:
         30:fc:a0:79:b1:33:a0:76:6c:67:bf:74:f4:85:37:16:b4:72:
         84:43:9e:7d:5a:2a:ea:cc:61:30:7e:d3:32:1b:7a:8d:64:a3:
         e9:3e:04:08:1d:39:20:f2:a4:a3:8b:41:58:8c:6a:6d:d3:2e:
         23:9c:84:3f:5d:e9:38:c6:07:2b:67:0b:f6:9b:90:36:b8:c0:
         c9:39:25:04:6f:40:a2:2a:9c:41:26:7a:8c:42:0e:0a:7a:cf:
         a3:40:8a:ff:b7:d2:b6:17:33:f8:6c:a7:e9:f7:ad:8e:9a:ff:
         b2:5e:94:95:d0:0a:98:47:c9:bc:53:d8:05:6c:ad:fe:36:a8:
         6d:d0:9f:89:3c:d1:d0:15:7e:8c:59:c2:98:b4:7d:cc:7f:dd:
         d2:f6:68:e9:14:bf:bb:96:fe:c5:ce:3d:15:71:75:38:8e:70:
         63:21:c6:96:14:0d:66:0e:c6:82:d4:29:a5:a7:52:c3:ae:c4:
         cf:a1:73:40:52:c8:20:c0:c7:85:24:74:7e:25:6b:2b:42:8b:
         49:b9:ce:aa:ac:7c:c5:f4:7d:9b:cb:ca:e1:82:a1:44:b0:10:
         ea:b9:26:8e:cb:4f:a0:5d:f2:e2:ab:5b:bd:e0:60:34:fb:d7:
         8a:88:a7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----