Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204186.roa
File:                     AS204186.roa (raw, json)
Hash identifier:          6JjxI7PxfmLPHYFYHc9F0Vd9Nf3B0teD7XDVVClkuVw=
Subject key identifier:   96:D5:33:4C:F4:16:81:DE:4E:D3:98:DA:91:6D:A2:1F:07:9D:50:E1
Certificate issuer:       /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial:       7E683556521A0184859703479BDB6AC7D3F0690C
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204186.roa
Signing time:             Sun 01 Jan 2023 23:59:23 +0000
ROA not before:           Sun 01 Jan 2023 23:54:23 +0000
ROA not after:            Sun 31 Dec 2023 23:59:23 +0000
asID:                     204186
IP address blocks:        2a06:a005:150c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:68:35:56:52:1a:01:84:85:97:03:47:9b:db:6a:c7:d3:f0:69:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
        Validity
            Not Before: Jan  1 23:54:23 2023 GMT
            Not After : Dec 31 23:59:23 2023 GMT
        Subject: CN=96D5334CF41681DE4ED398DA916DA21F079D50E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:28:1d:55:ac:df:c9:1c:e6:03:bf:3f:79:61:
                    1c:30:a1:ba:ce:be:ff:cc:a9:92:0e:c8:ed:44:a7:
                    5a:a3:af:c2:d1:91:2a:fd:08:d2:b3:da:cf:d4:c2:
                    8c:2a:93:06:11:11:8c:50:70:5c:65:97:d5:35:71:
                    1c:b3:e9:7a:10:a4:78:aa:ab:3f:4e:14:42:cf:e4:
                    88:af:b7:5d:8c:52:dd:7f:5d:6d:96:9e:8e:3e:c8:
                    87:77:60:f0:9e:7c:2a:ff:04:4a:2e:3a:fd:21:33:
                    c1:12:24:63:f2:01:e9:54:57:0e:46:d7:ef:7e:63:
                    71:fb:17:5e:63:24:12:dd:d7:86:73:7b:e5:89:85:
                    ab:d9:f7:10:ff:35:ca:e1:63:f4:9e:23:69:97:f8:
                    2d:ba:51:78:12:67:c2:97:af:6f:43:a6:d0:d9:d2:
                    46:d6:24:e5:9f:05:dc:c9:24:72:6f:4b:63:01:86:
                    86:f0:49:9b:63:b6:18:f1:df:33:7d:ed:da:e5:aa:
                    01:8a:5f:53:47:3e:86:85:dd:f2:aa:66:2f:81:ff:
                    7b:7c:fc:7a:78:c3:15:b8:39:04:9c:94:77:21:4f:
                    c1:0f:36:05:34:df:ee:f3:b3:c6:a2:fd:7d:be:87:
                    1e:f2:af:1a:ef:2f:e1:4b:9b:b1:cb:40:2d:f3:84:
                    4b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D5:33:4C:F4:16:81:DE:4E:D3:98:DA:91:6D:A2:1F:07:9D:50:E1
            X509v3 Authority Key Identifier:
                keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204186.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:150c::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:ef:17:8e:52:8f:8c:0d:82:f3:61:b4:39:bf:04:c0:a9:43:
         ed:93:4a:8e:0c:2e:89:8f:8c:a4:c9:eb:ff:96:d5:95:05:55:
         17:4e:86:2d:52:91:c9:b6:9e:4d:3a:89:e2:fe:40:da:c4:22:
         93:2c:eb:13:f6:df:52:bf:db:23:1c:e9:fb:b6:d3:b6:61:5b:
         83:9c:57:b6:54:0e:bb:95:e9:ab:1f:aa:0b:25:bf:fa:aa:db:
         ab:e2:d9:d7:84:f5:b8:3b:32:0d:0b:24:83:cb:37:26:26:fd:
         fc:ba:10:6f:65:f8:23:19:d9:14:04:92:58:31:83:0d:0e:2d:
         34:f3:2b:5f:12:e9:75:65:23:6f:af:76:0e:32:13:49:13:69:
         16:87:9e:58:1d:a5:de:77:c4:50:e7:9f:a2:a0:c8:b5:75:29:
         3b:b2:a3:52:13:a0:99:25:71:dc:17:8f:3e:1d:70:59:5a:c6:
         5a:54:31:81:5f:98:75:f8:8c:10:cd:58:fc:6f:e9:6a:8f:c0:
         aa:ce:92:6d:31:cb:27:81:83:da:c7:84:46:fa:c7:fb:2c:ae:
         ed:df:8d:cd:b0:4e:2a:05:a1:0d:b4:b8:7f:d2:16:f1:df:54:
         3b:9e:d5:1d:21:5d:46:65:5b:97:ec:33:28:ee:11:9a:f3:d5:
         73:57:5c:77
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUfmg1VlIaAYSFlwNHm9tqx9PwaQwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MjNaFw0yMzEyMzEyMzU5MjNaMDMxMTAvBgNV
BAMTKDk2RDUzMzRDRjQxNjgxREU0RUQzOThEQTkxNkRBMjFGMDc5RDUwRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVKB1VrN/JHOYDvz95YRwwobrO
vv/MqZIOyO1Ep1qjr8LRkSr9CNKz2s/UwowqkwYREYxQcFxll9U1cRyz6XoQpHiq
qz9OFELP5Iivt12MUt1/XW2Wno4+yId3YPCefCr/BEouOv0hM8ESJGPyAelUVw5G
1+9+Y3H7F15jJBLd14Zze+WJhavZ9xD/NcrhY/SeI2mX+C26UXgSZ8KXr29DptDZ
0kbWJOWfBdzJJHJvS2MBhobwSZtjthjx3zN97drlqgGKX1NHPoaF3fKqZi+B/3t8
/Hp4wxW4OQSclHchT8EPNgU03+7zs8ai/X2+hx7yrxrvL+FLm7HLQC3zhEs9AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUltUzTPQWgd5O05jakW2iHwedUOEwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjA0MTg2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgag
BRUMMA0GCSqGSIb3DQEBCwUAA4IBAQCX7xeOUo+MDYLzYbQ5vwTAqUPtk0qODC6J
j4ykyev/ltWVBVUXToYtUpHJtp5NOoni/kDaxCKTLOsT9t9Sv9sjHOn7ttO2YVuD
nFe2VA67lemrH6oLJb/6qtur4tnXhPW4OzINCySDyzcmJv38uhBvZfgjGdkUBJJY
MYMNDi008ytfEul1ZSNvr3YOMhNJE2kWh55YHaXed8RQ55+ioMi1dSk7sqNSE6CZ
JXHcF48+HXBZWsZaVDGBX5h1+IwQzVj8b+lqj8CqzpJtMcsngYPax4RG+sf7LK7t
343NsE4qBaENtLh/0hbx31Q7ntUdIV1GZVuX7DMo7hGa89VzV1x3
-----END CERTIFICATE-----