Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204005.roa
File:                     AS204005.roa (raw, json)
Hash identifier:          VnqujEtXipdZBbyB3B788L7ypdei/mj15Ozbu06CufA=
Subject key identifier:   5C:F8:EC:C0:1B:C6:D1:56:96:07:3B:EC:B4:90:D0:1C:F4:43:1D:78
Certificate issuer:       /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial:       77539C578098DEE45E292D6CC2BBCAAE64BAC462
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204005.roa
Signing time:             Sun 01 Jan 2023 23:59:22 +0000
ROA not before:           Sun 01 Jan 2023 23:54:22 +0000
ROA not after:            Sun 31 Dec 2023 23:59:22 +0000
asID:                     204005
IP address blocks:        2a06:a005:ba9::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:53:9c:57:80:98:de:e4:5e:29:2d:6c:c2:bb:ca:ae:64:ba:c4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
        Validity
            Not Before: Jan  1 23:54:22 2023 GMT
            Not After : Dec 31 23:59:22 2023 GMT
        Subject: CN=5CF8ECC01BC6D15696073BECB490D01CF4431D78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:60:7e:b3:11:1b:c8:10:42:f7:09:ea:f9:1c:
                    1a:66:4c:64:d6:74:e3:f5:d9:e1:47:44:92:df:fa:
                    23:6a:e5:2c:2f:18:8d:b9:52:8e:80:76:4e:c3:80:
                    1c:6d:a5:19:7e:bd:1b:0e:08:79:b5:14:10:0a:e7:
                    8f:45:b4:8e:90:f2:73:54:0a:eb:82:bd:00:63:94:
                    12:e0:46:a6:96:3b:a3:3b:f4:60:ac:14:7a:87:90:
                    6e:13:d8:92:f6:c4:aa:e3:95:b8:7c:42:ce:95:8a:
                    00:fc:2f:f0:7f:be:0b:d5:73:9a:06:6e:c3:99:f7:
                    71:b5:17:4d:9e:17:b2:8a:b4:d6:cf:b7:9c:7d:fb:
                    83:fc:7f:43:6c:ce:96:c0:cf:88:41:20:72:94:bf:
                    8e:4f:c3:d0:97:61:63:77:c1:db:7b:ed:ea:32:db:
                    d5:21:90:d8:79:33:c4:85:19:a2:7d:dd:d4:2f:b0:
                    aa:0d:f2:d1:d8:a8:ea:e1:48:dd:30:f6:d3:6b:15:
                    52:5c:23:0c:8c:a1:1b:4d:2d:f9:32:a1:ca:65:99:
                    91:ce:5a:26:51:4a:67:58:be:08:7a:99:81:78:27:
                    5c:be:b1:96:8f:4b:0e:e4:de:a8:33:3e:31:48:20:
                    3b:44:4d:85:d1:ec:f9:15:60:c2:f5:de:0a:fa:91:
                    25:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F8:EC:C0:1B:C6:D1:56:96:07:3B:EC:B4:90:D0:1C:F4:43:1D:78
            X509v3 Authority Key Identifier:
                keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204005.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:ba9::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:d8:06:c5:0d:4c:3e:94:8f:c6:2f:18:84:8f:96:ab:9e:80:
         26:39:4c:60:4d:33:25:52:cb:f4:d0:68:58:06:41:f6:8d:7c:
         96:db:a1:48:ea:69:d2:4e:e9:e2:06:e2:b0:c1:f4:0a:9b:86:
         73:9b:ec:5b:91:3a:2a:44:71:a9:03:42:d6:1c:da:75:df:a4:
         68:e6:b7:b9:b6:68:45:d0:1f:dc:52:ee:52:1a:41:a6:fb:0a:
         0a:a8:eb:38:5e:a2:6c:42:0d:c5:58:5f:30:44:03:6d:39:a8:
         3c:fe:a8:d7:b8:05:9c:5a:a0:38:d3:94:cb:14:f5:92:2f:42:
         3e:92:1e:05:e0:fe:f3:5c:18:87:ce:b7:43:b4:df:f4:48:0b:
         a2:35:f2:12:94:88:62:65:f4:36:20:42:b3:53:c7:bb:4d:65:
         63:51:19:4f:6f:e3:00:1d:c1:96:f4:2a:24:66:0e:8c:fc:07:
         b6:43:6c:31:0b:bf:a3:bd:ce:7d:72:95:73:74:d6:b2:95:e2:
         fc:8e:ab:8c:4f:73:8b:fa:87:95:e6:44:22:87:da:82:00:62:
         e4:cd:4e:03:c7:0a:86:74:1f:b5:7f:bf:5f:90:2f:32:29:63:
         c4:ca:6f:c9:a0:b9:52:e8:62:c6:0f:b3:96:c1:0a:60:49:2b:
         2e:10:f3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----