Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202888.roa
File:                     AS202888.roa (raw, json)
Hash identifier:          08viOYVbghozKISP9UGdfaK3WdM07b8VhrAy/o3AUPo=
Subject key identifier:   A3:EB:44:A0:F9:0D:C7:7E:25:F5:2B:F7:5D:F7:7A:F4:CF:41:2B:31
Certificate issuer:       /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial:       23D039445B58B3E8ECA6A307225D3324F939E2D3
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202888.roa
Signing time:             Sun 01 Jan 2023 23:59:21 +0000
ROA not before:           Sun 01 Jan 2023 23:54:21 +0000
ROA not after:            Sun 31 Dec 2023 23:59:21 +0000
asID:                     202888
IP address blocks:        2a06:a005:1c70::/45 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:d0:39:44:5b:58:b3:e8:ec:a6:a3:07:22:5d:33:24:f9:39:e2:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
        Validity
            Not Before: Jan  1 23:54:21 2023 GMT
            Not After : Dec 31 23:59:21 2023 GMT
        Subject: CN=A3EB44A0F90DC77E25F52BF75DF77AF4CF412B31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:62:83:dd:ae:46:92:69:a0:68:3a:62:b0:
                    86:49:be:4a:94:b8:8b:fc:d9:34:f2:be:48:fe:35:
                    c0:1e:55:3b:b4:ed:f1:63:68:6a:3c:53:3a:30:bc:
                    b1:1f:fa:9e:f6:a2:43:2a:0f:39:dc:9f:6c:3b:aa:
                    cc:90:82:1d:47:af:04:14:c8:c6:f5:44:39:92:8c:
                    dd:81:7e:98:3c:78:26:47:b2:4f:bc:7c:d7:ec:22:
                    66:8d:cb:11:28:09:5a:b7:d5:5a:2e:9a:7e:e3:dd:
                    7e:9c:ad:20:f0:c8:7d:96:a4:c7:16:dc:2f:d6:a2:
                    09:a7:50:aa:68:ce:c5:78:37:cc:3f:f5:4c:44:f9:
                    2e:b0:8f:4c:04:18:58:08:2e:a8:96:a2:30:a2:27:
                    0c:81:39:b7:fe:0d:df:d4:4b:93:2b:6f:5b:5e:71:
                    83:13:e2:f3:fd:a0:dc:9e:8f:41:76:87:5e:80:cd:
                    05:22:18:b7:a3:d7:4b:72:56:9c:2f:99:16:65:92:
                    36:16:63:97:0d:f2:b6:fe:3f:2d:ca:3b:56:7e:15:
                    9c:5b:d1:f5:6f:47:69:bf:43:d6:11:e4:4a:9a:ec:
                    13:17:6b:83:d9:35:45:ee:c7:37:17:df:7b:c0:03:
                    4d:3c:98:ab:8a:90:13:25:89:de:8d:3e:90:22:61:
                    32:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:EB:44:A0:F9:0D:C7:7E:25:F5:2B:F7:5D:F7:7A:F4:CF:41:2B:31
            X509v3 Authority Key Identifier:
                keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202888.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1c70::/45

    Signature Algorithm: sha256WithRSAEncryption
         20:19:52:3a:a1:5f:75:19:75:48:08:4b:9a:6c:3d:94:cc:f8:
         4c:f6:91:1c:75:a7:f5:68:a8:0c:f4:30:9f:a1:db:90:00:3e:
         c2:7c:ca:ab:41:7d:67:55:84:c3:88:37:b4:4b:b6:23:dd:51:
         3a:2f:13:00:e5:d3:c8:37:b4:67:68:d8:eb:39:f4:a5:a6:b6:
         28:02:c0:37:80:73:cc:c1:98:32:7a:d6:a4:b8:88:b6:99:62:
         54:16:18:36:76:11:c6:bd:28:17:d2:ce:c9:fe:77:dd:80:0d:
         cf:47:2c:cd:40:17:15:3c:b6:e8:5f:13:8b:fc:d8:c7:ec:ce:
         a9:47:5e:f6:b0:70:07:48:5d:48:3f:56:a6:ae:aa:cf:4b:c2:
         58:27:cc:ab:cc:ca:d5:5e:bc:8c:70:68:b7:27:59:a3:44:e7:
         79:32:22:6e:bf:59:1f:fd:6f:fd:33:77:a3:ce:28:7c:cd:e4:
         62:73:bd:86:8b:39:e0:6f:6d:30:53:b8:29:e4:04:06:2a:9a:
         c1:05:b6:c7:5a:3a:79:fd:46:5b:fa:78:98:60:29:88:d8:6b:
         eb:e4:71:31:64:e4:a5:51:2a:1a:0f:62:a8:56:2a:25:6e:55:
         f6:e0:e7:ca:63:af:b9:8a:de:0c:8e:0d:a9:95:8f:67:b5:d7:
         27:42:b4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----