Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200993.roa
File:                     AS200993.roa (raw, json)
Hash identifier:          MdLdy9OoaMlI4UMuLcirCFKBqd+rGWw+M1t9QmLf24I=
Subject key identifier:   84:87:1A:99:2D:4B:EA:20:0C:27:73:28:D3:99:55:9B:AF:4A:27:F3
Certificate issuer:       /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial:       1130FF35116409982B1096256C0D6B3874C979A3
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200993.roa
Signing time:             Sun 01 Jan 2023 23:59:12 +0000
ROA not before:           Sun 01 Jan 2023 23:54:12 +0000
ROA not after:            Sun 31 Dec 2023 23:59:12 +0000
asID:                     200993
IP address blocks:        2a06:a005:1160::/48 maxlen: 48
                          2a06:a005:1d52::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:30:ff:35:11:64:09:98:2b:10:96:25:6c:0d:6b:38:74:c9:79:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
        Validity
            Not Before: Jan  1 23:54:12 2023 GMT
            Not After : Dec 31 23:59:12 2023 GMT
        Subject: CN=84871A992D4BEA200C277328D399559BAF4A27F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:af:d2:bc:92:84:69:35:13:c3:84:66:ed:96:
                    67:d6:4c:40:46:d9:c5:6a:20:6e:b5:b6:a9:31:76:
                    9e:c9:76:96:bf:1b:9e:b1:68:d7:f7:98:b1:f6:03:
                    06:71:9b:d4:26:4a:df:74:6d:65:76:08:a0:b6:20:
                    dc:d9:43:9f:a1:4a:74:d8:e9:66:f8:46:31:43:a7:
                    c8:28:d3:38:3d:ae:5e:a1:a5:c0:c2:67:cf:6e:69:
                    b1:93:cc:1c:76:9e:49:ff:9b:49:04:ef:8e:86:f2:
                    78:68:ec:95:7f:17:cb:07:ba:4c:de:fe:71:10:47:
                    b1:d6:fa:d2:97:63:73:48:bf:fc:5c:c8:b8:ab:b7:
                    eb:be:56:b8:ff:9b:68:f8:f8:6b:d3:35:9b:56:c5:
                    2f:13:59:56:60:7d:ed:12:cc:cc:15:da:b0:15:96:
                    00:22:1e:36:4a:19:58:e1:d9:a4:96:f4:b6:d9:c5:
                    79:02:e7:a1:33:73:61:6e:27:0a:83:bd:46:22:fd:
                    61:c9:68:a1:2d:91:40:40:fa:73:a2:38:68:73:a6:
                    f1:82:bb:39:51:f9:30:5b:72:56:71:4b:e5:70:fb:
                    0d:9b:16:55:cc:b8:12:1f:b9:14:43:a6:dc:24:fd:
                    24:89:a7:7f:6c:a3:a7:5a:a0:00:85:e1:26:b3:77:
                    9b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:87:1A:99:2D:4B:EA:20:0C:27:73:28:D3:99:55:9B:AF:4A:27:F3
            X509v3 Authority Key Identifier:
                keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200993.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1160::/48
                  2a06:a005:1d52::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:61:29:9b:08:c3:3a:bf:28:8d:6e:d5:a3:14:2f:ba:a5:1b:
         81:7e:a8:af:ef:7f:86:08:50:27:71:01:1c:b4:56:b4:d4:61:
         a8:83:7a:a3:f3:e7:ce:bd:9e:f5:e5:ef:00:f3:fd:d9:45:78:
         e0:1a:0b:41:20:76:22:38:3d:bf:18:d0:d1:5f:09:ed:29:66:
         19:b4:4c:68:6f:99:52:26:f1:1a:c6:c2:ba:80:81:23:82:8c:
         f8:26:c2:82:36:05:e9:7c:36:e7:36:f8:63:4e:44:7c:93:78:
         1f:4d:c6:b7:cf:5f:f3:0d:fd:ea:73:c6:07:9f:89:ee:08:b7:
         74:f4:b2:51:9b:15:f8:81:8c:3d:fa:5e:56:15:6f:2f:cf:86:
         c4:45:89:ca:1d:cb:63:0d:f4:ba:36:0b:62:31:a0:ba:e1:1c:
         e7:b7:ee:35:f5:ae:44:f2:bd:71:7a:e3:a0:8a:31:bc:1d:40:
         d3:1e:c1:c9:75:62:63:00:08:21:e3:8d:44:25:86:b8:8d:2a:
         d9:db:90:a0:35:f7:43:e0:30:2d:7c:52:b6:9d:67:d6:6a:77:
         f7:fd:a3:c9:6a:d2:6e:76:ca:7c:11:6a:7c:7b:27:60:1f:20:
         fc:52:20:c4:dc:1e:8f:d0:80:e6:8a:5d:e9:2b:ad:fa:74:e4:
         f6:3a:06:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----