Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS201760.roa
File:                     AS201760.roa (raw, json)
Hash identifier:          /4dwosN2pAenvOYF0+24uz/rb2+9pwDlFctqLJhr7u8=
Subject key identifier:   27:8E:EE:8A:DE:F1:D7:36:70:FB:95:40:E9:6C:2A:DF:6A:5B:FB:00
Certificate issuer:       /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial:       239A64ABAC8A904BB2B94D082CC54BEAE0674269
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS201760.roa
Signing time:             Sun 01 Jan 2023 23:59:11 +0000
ROA not before:           Sun 01 Jan 2023 23:54:11 +0000
ROA not after:            Sun 31 Dec 2023 23:59:11 +0000
asID:                     201760
IP address blocks:        2a06:a005:1080::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:9a:64:ab:ac:8a:90:4b:b2:b9:4d:08:2c:c5:4b:ea:e0:67:42:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
        Validity
            Not Before: Jan  1 23:54:11 2023 GMT
            Not After : Dec 31 23:59:11 2023 GMT
        Subject: CN=278EEE8ADEF1D73670FB9540E96C2ADF6A5BFB00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:14:23:ff:b8:d3:0d:e0:d9:b8:d6:a1:c8:9b:
                    fc:46:03:e4:44:3a:6d:ce:db:4e:e2:f9:53:79:69:
                    62:4d:dd:3e:47:f7:54:5f:62:ea:79:26:7c:e5:cb:
                    80:f9:1b:fa:f8:87:5d:16:24:a5:11:b5:b5:44:86:
                    db:35:6a:95:df:e0:b2:64:f7:b6:ff:41:2e:df:b5:
                    2b:29:a8:38:7e:5d:d0:63:c9:aa:7f:b4:10:4c:2a:
                    ff:7c:bf:93:c9:61:14:32:d3:07:dd:ea:e5:61:66:
                    98:52:63:b8:70:39:d0:eb:be:22:dc:5f:a9:7e:1f:
                    1d:7e:70:49:82:42:2f:a4:1b:49:a1:9a:4e:22:9d:
                    fa:0a:aa:c4:6b:2d:94:26:bd:61:5e:31:a7:19:26:
                    aa:b9:5d:82:a2:da:e1:f8:be:ac:6a:30:ff:33:ee:
                    dd:59:f9:e2:7f:41:76:7d:bb:13:d6:1c:d3:ca:37:
                    59:69:3c:1a:32:76:92:d5:06:91:8c:87:16:68:db:
                    8e:8b:88:94:ec:4e:84:5c:1c:08:24:56:96:39:d0:
                    d3:27:da:ac:e5:11:b5:fa:90:0e:de:ad:86:2b:65:
                    ae:f2:83:ad:78:c2:46:43:d4:3b:43:f1:db:52:c4:
                    63:9e:1f:2e:a5:fe:5c:16:a9:29:a4:1d:a0:af:1a:
                    fb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8E:EE:8A:DE:F1:D7:36:70:FB:95:40:E9:6C:2A:DF:6A:5B:FB:00
            X509v3 Authority Key Identifier:
                keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS201760.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1080::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:3e:98:1e:a1:50:41:c1:49:7f:be:03:00:e3:8a:61:2e:f2:
         2a:93:ac:f9:9f:77:40:d7:3c:81:aa:49:c1:1e:a3:77:61:a1:
         15:4e:ad:54:8e:0d:0f:3e:fe:78:4c:3a:fb:46:8a:af:5f:64:
         a8:1f:2b:0a:0d:ff:5d:9a:6a:e9:08:54:a5:f0:ea:8e:21:e4:
         b9:32:59:d5:d0:c8:2d:06:1a:00:ff:52:e1:01:c9:9a:38:e8:
         52:be:f4:b5:26:44:86:98:3e:e6:a8:a1:d8:cd:04:e6:4b:b7:
         71:9d:d5:11:97:ee:a9:ee:a3:dd:8e:1c:28:a3:fb:2a:a4:c3:
         90:29:1c:44:6e:3b:82:bb:36:fa:d6:4f:ef:33:11:12:dc:d9:
         52:ab:d8:a2:1c:90:b2:ce:f7:0a:cd:20:60:28:89:1a:9d:2c:
         67:92:d2:35:4b:87:d0:37:8e:07:dc:8b:77:9e:48:7f:83:1f:
         a3:79:b9:a1:4c:a3:42:48:3e:2f:b3:bb:4f:52:9d:77:d6:6b:
         a4:8a:48:89:45:1d:5b:44:62:d1:87:df:61:16:5f:ef:f3:d7:
         bc:89:7d:d3:1f:f9:da:d8:d4:09:78:79:08:32:8f:b0:23:59:
         f0:30:19:47:b5:22:5a:65:92:8a:aa:2b:0a:4e:ec:bd:02:f5:
         b6:52:cb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----