Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS24322.roa
File:                     AS24322.roa (raw, json)
Hash identifier:          IP6Jv2KBqQ8uYLnhpSg1h8tCgbTKawRW79eLdlxOr3o=
Subject key identifier:   36:E6:9F:FE:7D:B8:A2:F4:02:4A:26:6F:0E:16:B2:22:66:6C:F7:2C
Certificate issuer:       /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial:       6545A88467E111922164EE7B7C606823D993A08B
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS24322.roa
Signing time:             Sun 01 Jan 2023 23:59:25 +0000
ROA not before:           Sun 01 Jan 2023 23:54:25 +0000
ROA not after:            Sun 31 Dec 2023 23:59:25 +0000
asID:                     24322
IP address blocks:        2a06:a005:430::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:45:a8:84:67:e1:11:92:21:64:ee:7b:7c:60:68:23:d9:93:a0:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
        Validity
            Not Before: Jan  1 23:54:25 2023 GMT
            Not After : Dec 31 23:59:25 2023 GMT
        Subject: CN=36E69FFE7DB8A2F4024A266F0E16B222666CF72C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:73:a1:d5:83:19:e4:f2:f3:47:4e:7d:b4:ff:
                    9f:bd:5b:33:ca:1f:01:e9:3d:bf:74:fc:01:d3:bb:
                    9c:2a:81:d2:3a:ef:f9:dc:2a:5b:b4:06:7b:c5:df:
                    3c:0d:af:33:e8:99:76:a2:2e:fe:0d:4e:68:4a:75:
                    bc:07:c0:89:f5:8f:be:7a:ae:5a:cf:12:39:05:ed:
                    20:ee:42:69:7f:6c:64:17:b7:ae:6c:ba:68:4e:2e:
                    55:10:ea:cb:9d:ba:c8:b5:16:42:44:02:0d:4e:c6:
                    b6:ed:3e:40:3e:8f:0a:5b:9c:ae:2a:6f:bd:2c:f7:
                    a5:c8:5c:cd:5d:fd:9c:14:93:a1:22:42:45:05:57:
                    a9:86:4b:98:50:f6:5d:11:f2:83:ae:33:4b:d2:35:
                    6d:83:b9:4b:58:2c:35:8b:99:32:20:4f:6b:5d:21:
                    0c:2d:89:a7:c4:9a:ac:41:dd:b9:b1:22:2c:0e:7b:
                    ce:7e:b0:69:bb:7b:9e:35:56:13:17:1b:dc:0b:43:
                    d4:8f:67:41:a4:ff:d8:8c:ec:2f:83:1b:3f:26:bd:
                    02:99:a1:2c:d4:8a:0f:db:69:96:c8:cd:92:ea:a2:
                    ec:7d:74:21:cb:ff:c6:3f:a8:87:b7:e1:e0:66:55:
                    f0:64:cb:f7:0d:ee:53:df:e8:e6:20:95:82:25:d1:
                    20:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E6:9F:FE:7D:B8:A2:F4:02:4A:26:6F:0E:16:B2:22:66:6C:F7:2C
            X509v3 Authority Key Identifier:
                keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS24322.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:430::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:70:ee:90:87:00:d3:9b:95:15:2c:3f:ae:a3:c0:98:ac:e3:
         5d:b5:a3:2f:71:3c:89:f9:cd:7a:2c:3f:0c:dc:f5:b0:b9:47:
         f7:b9:0d:41:ec:ac:12:ef:3d:fe:3f:28:76:8e:87:17:ae:3e:
         c0:59:17:e2:39:87:13:5d:8e:2b:ea:53:8d:52:4a:be:a1:d1:
         43:ce:a0:c4:ee:39:6f:1c:be:c8:83:cf:b6:ad:96:23:fe:bd:
         21:48:40:e7:65:71:88:cf:45:ed:61:46:d3:2c:52:5b:a7:29:
         74:cf:18:48:03:53:23:6f:b1:07:9a:0e:c8:0e:d2:36:72:8a:
         ca:7e:63:cd:71:67:c3:21:20:83:81:a4:8a:0f:06:33:35:0b:
         41:b7:a5:8a:ce:3c:37:5a:5c:09:72:9e:8a:35:80:5c:5e:52:
         7b:ce:83:cf:27:b2:a8:64:8c:15:19:f7:b6:38:5e:e9:56:fc:
         82:a1:24:06:96:72:8d:35:73:08:e0:d2:bb:9b:9c:36:b3:2b:
         33:2d:04:c0:72:45:4c:b4:28:c6:7c:b6:d3:3f:cd:98:f6:68:
         2d:ca:a9:43:68:3b:14:46:19:0d:65:fe:ee:10:49:c7:b8:93:
         f5:27:21:96:69:01:f5:b2:0c:b8:f5:0d:47:94:b3:c7:9d:41:
         f8:5e:74:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----