Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS213368.roa
File:                     AS213368.roa (raw, json)
Hash identifier:          BLE8/cv3eeR7IS0h7QY+87ihjrrCbvnDcq2RUGF2Jk0=
Subject key identifier:   2F:A0:79:16:DE:5B:80:4B:8D:67:52:B2:E3:5A:4C:50:FB:00:F8:AD
Certificate issuer:       /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial:       58704E3A9A0E04725CE29658860BA14AC774C68C
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS213368.roa
Signing time:             Sun 01 Jan 2023 23:59:21 +0000
ROA not before:           Sun 01 Jan 2023 23:54:21 +0000
ROA not after:            Sun 31 Dec 2023 23:59:21 +0000
asID:                     213368
IP address blocks:        2a06:a005:482::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:70:4e:3a:9a:0e:04:72:5c:e2:96:58:86:0b:a1:4a:c7:74:c6:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
        Validity
            Not Before: Jan  1 23:54:21 2023 GMT
            Not After : Dec 31 23:59:21 2023 GMT
        Subject: CN=2FA07916DE5B804B8D6752B2E35A4C50FB00F8AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:12:ca:f5:de:46:6d:3e:66:b0:56:fe:2c:4d:
                    86:7d:29:0c:16:47:18:b8:5f:03:57:ed:84:b1:76:
                    97:f7:ab:41:3e:4b:8f:05:55:91:53:8a:89:4e:bb:
                    41:86:17:ca:4b:53:8d:ff:da:de:f9:97:0a:b2:97:
                    ff:fa:f0:96:d8:03:98:b6:fa:4f:4a:2f:f7:28:34:
                    80:56:94:93:3b:19:02:d3:4d:29:a0:ac:01:43:58:
                    23:1d:e6:71:23:d5:bd:b3:e7:bc:b9:5f:65:c9:b1:
                    f0:5c:b6:f6:84:92:bb:21:a5:91:4f:33:81:c8:91:
                    88:87:79:f3:ae:3a:11:02:37:f6:ca:7e:72:2f:59:
                    ed:a5:cd:d3:67:ca:33:e0:25:fb:c7:e7:62:55:d6:
                    52:b7:78:7a:f1:9a:8f:54:bd:09:24:7f:45:82:29:
                    21:67:9f:44:6c:bd:b4:f8:6d:71:06:9d:e6:0a:0a:
                    b4:64:e7:bb:bb:65:08:ba:85:ce:20:89:f3:9e:9d:
                    c9:3d:8e:39:5a:58:3e:6b:89:05:b5:24:89:35:e9:
                    1c:29:35:74:a0:55:75:2b:97:f3:1b:63:51:1a:b0:
                    d1:6f:97:7d:0c:5d:70:b0:9d:38:3b:70:89:41:bc:
                    c3:cd:11:5e:d4:6c:92:27:69:87:1f:71:a5:18:cb:
                    25:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A0:79:16:DE:5B:80:4B:8D:67:52:B2:E3:5A:4C:50:FB:00:F8:AD
            X509v3 Authority Key Identifier:
                keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS213368.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:482::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:26:49:1f:92:ff:79:75:4e:98:39:2b:8a:b9:ab:12:e5:e8:
         ff:51:cf:9f:28:fe:77:72:ef:1f:52:9e:8e:71:7c:ed:91:b9:
         cc:1e:7f:79:db:1f:77:11:3e:8f:49:03:d8:9b:71:a5:81:de:
         85:93:13:bf:30:54:e5:e5:28:f4:dc:29:a8:73:d7:3c:85:3e:
         14:1b:df:2b:59:0b:3d:8c:f2:71:e9:14:8e:60:08:32:24:86:
         4d:80:7d:b6:00:ac:3e:c0:93:41:25:3e:48:65:b7:69:23:a3:
         07:85:a9:94:21:89:0b:f1:44:9c:3e:ce:d9:97:bc:98:76:b1:
         6c:3c:17:7d:14:40:cb:5f:f3:2f:96:fc:2c:85:d0:20:38:ed:
         b7:59:8e:35:9b:00:99:8f:5e:ae:d7:2d:87:f3:64:aa:ad:0d:
         25:fa:9d:d7:65:bd:d7:da:3e:c1:56:3b:41:b8:7c:73:cb:a6:
         31:d9:aa:87:be:53:c8:e4:92:a9:de:ef:16:d5:e4:76:64:cd:
         49:6d:0b:09:6b:be:54:2a:55:67:d4:f4:e5:e4:94:70:9a:fe:
         55:ef:42:6c:f7:0b:63:fb:2d:9b:1e:ad:5c:f9:3c:42:0f:43:
         3c:96:d1:7d:63:d3:46:c1:11:f4:fe:fb:30:37:ef:c6:0c:ac:
         c0:49:9d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----