Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200266.roa
File:                     AS200266.roa (raw, json)
Hash identifier:          7EecO9AG5q9Z5s/egG/eSEmhvawJLDnyM5ErhYiGuDA=
Subject key identifier:   6A:A8:0D:10:65:B8:BD:36:02:D8:C3:09:22:F0:59:64:F8:A8:0A:75
Certificate issuer:       /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial:       775F8AE174D847CFD0F1F32DAFDB055FBEBF11E2
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200266.roa
Signing time:             Mon 02 Jan 2023 17:41:34 +0000
ROA not before:           Mon 02 Jan 2023 17:36:34 +0000
ROA not after:            Mon 01 Jan 2024 17:41:34 +0000
asID:                     200266
IP address blocks:        2a06:a005:ba1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:5f:8a:e1:74:d8:47:cf:d0:f1:f3:2d:af:db:05:5f:be:bf:11:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
        Validity
            Not Before: Jan  2 17:36:34 2023 GMT
            Not After : Jan  1 17:41:34 2024 GMT
        Subject: CN=6AA80D1065B8BD3602D8C30922F05964F8A80A75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:20:0d:a2:15:63:be:90:d6:30:67:e9:0d:46:
                    a1:d2:16:2c:61:e3:2b:ce:92:bd:79:d7:7a:df:0d:
                    4c:09:67:c9:fb:cc:f5:b2:00:ae:a8:33:6f:5e:e8:
                    36:f6:34:78:9b:ae:70:78:b3:b2:fb:9b:cb:a0:62:
                    be:86:e1:d3:eb:81:a0:44:fc:4e:7a:0e:41:6b:33:
                    0d:c2:9e:d0:ce:97:fd:b8:8d:c4:dc:8d:6a:e4:ad:
                    c5:48:a1:3d:f7:a9:7b:62:bf:91:08:6c:d2:b0:e3:
                    47:dd:00:5f:98:cb:d3:1c:9f:cf:9b:e2:dc:28:4c:
                    05:8c:b4:e2:d4:7a:55:a3:0b:46:ab:13:5f:fb:06:
                    9e:f6:c9:64:e9:34:05:13:db:fc:20:6f:18:bd:54:
                    51:99:d5:0f:0d:43:00:8f:a2:34:dd:2a:6c:d8:7d:
                    a2:27:be:1d:a2:4b:99:9c:9d:f6:a8:07:86:a9:50:
                    01:80:24:d0:aa:17:93:d5:21:9d:b6:0a:35:30:ec:
                    26:81:97:fe:d6:3b:36:83:f0:3d:68:e7:6e:cf:41:
                    c3:42:5e:69:68:9a:3f:24:bb:22:64:eb:e9:e9:5e:
                    4c:d9:b8:93:a9:03:bd:65:e2:cd:a8:d0:7d:fb:93:
                    ac:2e:6c:24:52:5c:9c:2e:69:3d:12:8c:c2:2e:34:
                    4f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A8:0D:10:65:B8:BD:36:02:D8:C3:09:22:F0:59:64:F8:A8:0A:75
            X509v3 Authority Key Identifier:
                keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200266.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:ba1::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:e9:e9:d1:77:76:27:a8:e3:46:44:9e:a0:b4:d4:20:f8:9e:
         3d:58:f9:fb:c0:e6:fe:1e:da:93:24:68:b2:bc:ea:be:0d:1c:
         1c:6e:d1:24:e2:5a:72:c3:7e:c4:14:45:7f:79:9a:a3:0f:2b:
         c7:b3:56:21:fb:be:cf:b3:5d:7d:81:7f:27:3c:28:1b:8e:36:
         d7:c5:df:2f:cb:b3:12:56:69:5f:b4:24:fe:fc:a8:1e:94:3b:
         02:27:6d:ff:25:c2:7e:a3:6e:3a:eb:a7:2e:30:5f:3b:55:cb:
         31:59:a5:16:f1:a0:6c:cd:93:4a:f4:a9:a9:61:5a:98:b6:e1:
         ee:83:87:49:cb:64:a4:8f:ba:11:81:83:ca:cf:8c:35:4f:c6:
         cd:54:ac:6f:cf:cf:34:96:31:25:4f:ba:2c:46:86:16:36:57:
         7f:2b:73:15:3d:6b:4d:ed:29:17:35:c7:e9:77:1c:74:47:35:
         0b:da:dc:d4:6d:49:68:21:b2:4b:61:59:20:dd:6f:37:6a:15:
         75:cf:1c:73:0d:55:e2:bf:a0:11:2b:8a:ea:53:c8:c2:c8:d7:
         51:ae:97:39:9a:60:89:45:e6:8d:b0:5d:81:cc:16:02:6a:37:
         20:47:9c:63:3f:ad:ba:f0:3b:61:88:6c:ed:4e:cc:71:be:10:
         87:f9:92:9a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUd1+K4XTYR8/Q8fMtr9sFX76/EeIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDIxNzM2MzRaFw0yNDAxMDExNzQxMzRaMDMxMTAvBgNV
BAMTKDZBQTgwRDEwNjVCOEJEMzYwMkQ4QzMwOTIyRjA1OTY0RjhBODBBNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0IA2iFWO+kNYwZ+kNRqHSFixh
4yvOkr1513rfDUwJZ8n7zPWyAK6oM29e6Db2NHibrnB4s7L7m8ugYr6G4dPrgaBE
/E56DkFrMw3CntDOl/24jcTcjWrkrcVIoT33qXtiv5EIbNKw40fdAF+Yy9Mcn8+b
4twoTAWMtOLUelWjC0arE1/7Bp72yWTpNAUT2/wgbxi9VFGZ1Q8NQwCPojTdKmzY
faInvh2iS5mcnfaoB4apUAGAJNCqF5PVIZ22CjUw7CaBl/7WOzaD8D1o527PQcNC
Xmlomj8kuyJk6+npXkzZuJOpA71l4s2o0H37k6wubCRSXJwuaT0SjMIuNE/RAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUaqgNEGW4vTYC2MMJIvBZZPioCnUwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjAwMjY2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgag
BQuhMA0GCSqGSIb3DQEBCwUAA4IBAQBC6enRd3YnqONGRJ6gtNQg+J49WPn7wOb+
HtqTJGiyvOq+DRwcbtEk4lpyw37EFEV/eZqjDyvHs1Yh+77Ps119gX8nPCgbjjbX
xd8vy7MSVmlftCT+/KgelDsCJ23/JcJ+o24666cuMF87VcsxWaUW8aBszZNK9Kmp
YVqYtuHug4dJy2Skj7oRgYPKz4w1T8bNVKxvz880ljElT7osRoYWNld/K3MVPWtN
7SkXNcfpdxx0RzUL2tzUbUloIbJLYVkg3W83ahV1zxxzDVXiv6ARK4rqU8jCyNdR
rpc5mmCJReaNsF2BzBYCajcgR5xjP6268DthiGztTsxxvhCH+ZKa
-----END CERTIFICATE-----