Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS201097.roa
File:                     AS201097.roa (raw, json)
Hash identifier:          Mn5dOTWeMPqIF6BJulLEqc2ZByLXM9/XcdHWwORWxBA=
Subject key identifier:   1E:56:D2:A5:DE:07:21:8B:94:86:7A:5C:CE:40:58:94:B6:9A:E3:1C
Certificate issuer:       /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial:       4FAFBA53F035B71C2F371F1D1278D5E0E44DF713
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS201097.roa
Signing time:             Mon 02 Jan 2023 19:49:35 +0000
ROA not before:           Mon 02 Jan 2023 19:44:35 +0000
ROA not after:            Mon 01 Jan 2024 19:49:35 +0000
asID:                     201097
IP address blocks:        2a06:a005:29f0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:af:ba:53:f0:35:b7:1c:2f:37:1f:1d:12:78:d5:e0:e4:4d:f7:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
        Validity
            Not Before: Jan  2 19:44:35 2023 GMT
            Not After : Jan  1 19:49:35 2024 GMT
        Subject: CN=1E56D2A5DE07218B94867A5CCE405894B69AE31C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:24:da:6d:14:25:4e:d6:6d:b2:75:d3:8a:b0:
                    b0:83:a4:ab:cd:81:11:5e:6e:38:db:e1:78:1e:37:
                    59:af:37:01:27:c0:d8:90:a7:69:2c:79:b5:c2:76:
                    29:b3:f1:45:5a:ae:a0:c9:6c:2a:bf:21:2b:f8:10:
                    8f:2a:5a:41:76:55:80:d6:f8:ea:04:7e:48:a5:5d:
                    77:69:6e:3c:50:96:ec:44:41:66:5b:cb:98:c7:33:
                    b3:3d:ae:56:0d:98:6f:40:4b:cf:89:4f:26:19:ae:
                    a2:6e:ce:0d:fa:f2:71:6f:fe:bb:a9:8f:d4:c4:b0:
                    03:b6:5d:9b:3a:07:9c:93:1b:ed:63:d3:e2:54:ba:
                    88:1b:fc:3b:24:74:57:93:37:76:16:a8:85:28:f4:
                    f2:64:53:f9:62:78:f8:6b:82:01:4d:c8:92:08:66:
                    76:12:03:4a:31:37:19:28:75:87:44:51:d1:b6:56:
                    e2:5f:e2:9c:55:1c:38:60:19:9b:c5:e8:6f:0f:d7:
                    90:06:e7:ca:be:97:9e:8a:00:d5:5d:fc:77:7f:a0:
                    ce:f7:e2:a6:02:ff:61:15:f6:ef:2e:b3:fc:6c:24:
                    40:fb:3b:f9:14:77:6f:69:ba:76:ce:3f:30:99:ea:
                    eb:c5:03:a6:e5:b1:2a:5f:3c:d2:08:5a:0c:3d:40:
                    5b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:56:D2:A5:DE:07:21:8B:94:86:7A:5C:CE:40:58:94:B6:9A:E3:1C
            X509v3 Authority Key Identifier:
                keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS201097.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:29f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         3b:63:79:31:41:e5:d2:65:7b:47:a0:38:89:64:a4:59:ab:72:
         d7:f7:a1:a3:bf:5b:d2:cd:e5:87:fa:d6:9a:44:dc:d0:61:4b:
         48:2d:d8:8b:48:a5:a1:a1:7b:c6:f2:93:f9:39:8f:e2:99:6e:
         c2:e4:6c:e0:97:8d:ee:78:21:78:dc:c6:30:c2:56:37:f4:12:
         ea:de:d4:b5:31:e4:4b:8d:5f:28:a1:32:0e:16:cf:89:c4:47:
         51:11:d9:1b:7f:dc:bc:52:66:62:e8:2d:79:c5:25:6f:4f:19:
         62:54:35:5d:e1:8f:2a:8f:13:0c:db:b8:df:73:98:3e:9e:67:
         2f:65:ad:37:ba:13:05:be:4f:50:c6:72:c8:19:d9:94:83:20:
         87:17:d4:a6:b3:e1:8e:42:14:e1:42:03:d4:ce:2e:cf:3a:1d:
         c8:f3:e1:f3:c9:81:d8:1a:3a:8c:69:a5:d4:ec:dc:4e:bb:62:
         67:b5:11:a5:60:90:a7:be:50:50:46:eb:32:6a:f9:27:4a:2a:
         9b:5c:38:de:fa:05:3f:26:d6:2b:5b:82:63:d7:6a:81:72:03:
         8f:b0:4b:7a:94:8a:ab:de:5d:2d:57:c9:dc:3a:da:e9:03:0c:
         19:c9:fa:42:f9:d3:50:fd:06:04:52:34:0c:37:ac:bf:35:fc:
         e4:65:7c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----