Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210825.roa
File:                     AS210825.roa (raw, json)
Hash identifier:          xrnwnjEvxJAyPUKtG3Y4RkTzoqft5jgko1V886dgpq8=
Subject key identifier:   F4:88:68:FE:79:F1:76:9E:92:22:A4:1C:92:34:D2:2C:2E:B1:93:58
Certificate issuer:       /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial:       57DC35B99BEDB698F45ABCE38A1C715D88D374EE
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210825.roa
Signing time:             Sun 01 Jan 2023 23:59:19 +0000
ROA not before:           Sun 01 Jan 2023 23:54:19 +0000
ROA not after:            Sun 31 Dec 2023 23:59:19 +0000
asID:                     210825
IP address blocks:        2a06:a005:5a1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:dc:35:b9:9b:ed:b6:98:f4:5a:bc:e3:8a:1c:71:5d:88:d3:74:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
        Validity
            Not Before: Jan  1 23:54:19 2023 GMT
            Not After : Dec 31 23:59:19 2023 GMT
        Subject: CN=F48868FE79F1769E9222A41C9234D22C2EB19358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:87:99:e5:e7:78:a2:94:eb:0e:24:78:c1:64:
                    0d:dd:a5:c8:37:51:c4:1b:21:01:9c:e3:aa:82:dc:
                    13:d6:70:75:11:f5:97:05:ee:44:c2:19:c0:ef:01:
                    f8:f4:d2:38:5c:96:49:86:8e:de:db:ea:d5:2a:ae:
                    dc:d8:71:1d:0b:f1:e0:33:50:2c:14:4f:7c:fd:fe:
                    64:ca:2d:48:53:67:93:ff:fe:92:3f:18:99:27:2e:
                    de:04:6f:63:3e:5c:9c:e4:4c:fe:82:fc:56:9a:53:
                    fa:f5:d1:ba:53:03:de:83:9e:6f:b6:9f:2b:81:7e:
                    df:02:4c:a6:41:20:59:79:83:43:b7:60:e3:b4:cd:
                    f1:75:e9:52:b9:56:3a:9c:9a:47:39:6c:87:ef:17:
                    97:14:6f:7b:61:17:71:5a:91:c0:c4:a5:05:59:5e:
                    3f:8b:ae:0a:43:4e:8c:43:98:ef:55:d5:ee:72:fa:
                    a8:bb:c2:60:c3:d5:ff:2a:67:1a:d5:63:3a:11:c9:
                    7a:71:ac:79:7f:4d:09:6f:f3:7f:1a:0b:77:db:c6:
                    08:a6:c7:6d:29:2f:f7:70:e5:e8:27:b0:e4:de:b5:
                    62:e4:4d:21:ae:e9:f8:79:27:85:61:ac:f7:ff:a6:
                    75:52:36:48:40:53:d1:39:29:5d:36:f8:66:23:d7:
                    95:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:88:68:FE:79:F1:76:9E:92:22:A4:1C:92:34:D2:2C:2E:B1:93:58
            X509v3 Authority Key Identifier:
                keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210825.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5a1::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:0f:e0:d3:60:c5:2b:bc:e3:38:6e:fb:e2:a3:c5:60:85:79:
         9f:0e:41:7f:f9:a6:71:eb:7c:8c:aa:b9:92:f1:dd:e2:f8:fd:
         0a:9a:1a:d4:91:ff:ca:09:6e:07:e5:e3:82:3f:e5:9e:e0:ae:
         a3:07:9c:68:e4:3a:62:20:47:77:70:bb:bd:b9:20:c1:73:0c:
         4e:c7:65:c8:9c:33:4a:08:6c:92:91:36:a7:39:87:d9:90:41:
         a8:1b:36:cb:89:7f:0c:3e:5b:84:40:5b:3c:f3:7d:a7:c7:e6:
         7d:0a:6d:a7:9a:a4:01:9d:07:0f:7d:a9:dc:96:c8:84:b0:37:
         ec:c9:d4:64:57:0a:b9:fc:7c:97:26:2e:28:a0:28:96:a2:0f:
         30:a5:9b:3f:4e:3a:65:62:6a:57:f8:f2:ed:14:ce:5c:e5:cf:
         5d:92:33:40:a4:a4:ef:31:ce:8c:b6:9a:cd:03:aa:34:ee:4b:
         33:17:46:1a:44:bb:3c:b9:c2:44:5e:64:4a:1d:1c:d6:81:a0:
         1d:e5:c4:a9:ff:09:2c:06:12:7b:07:1c:ea:72:4f:cc:fc:38:
         27:09:7f:6e:4b:db:ed:63:a8:d2:98:f5:28:06:69:7c:de:68:
         28:e2:10:d1:04:e9:84:eb:4b:a2:da:c5:67:5a:8b:30:ab:10:
         55:f5:9e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----