Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3230382e38342e302f32322d3234203d3e203631313338.roa
File:                     3130332e3230382e38342e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier:          7Oxh2xlAGxtka7Nw7NPaLlwGElLudGquqmyEW+GTVpc=
Subject key identifier:   98:ED:C2:91:87:44:63:E2:EF:B2:19:57:0C:E1:9C:2B:45:86:0C:25
Certificate issuer:       /CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Certificate serial:       6AAE9FC032AA73B96AFB5E20025197806AD2638E
Authority key identifier: 9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3230382e38342e302f32322d3234203d3e203631313338.roa
Signing time:             Sun 01 Jan 2023 23:59:08 +0000
ROA not before:           Sun 01 Jan 2023 23:54:08 +0000
ROA not after:            Sun 31 Dec 2023 23:59:08 +0000
asID:                     61138
IP address blocks:        103.208.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ae:9f:c0:32:aa:73:b9:6a:fb:5e:20:02:51:97:80:6a:d2:63:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
        Validity
            Not Before: Jan  1 23:54:08 2023 GMT
            Not After : Dec 31 23:59:08 2023 GMT
        Subject: CN=98EDC291874463E2EFB219570CE19C2B45860C25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b5:c1:dc:41:ba:09:99:ea:96:35:75:5b:cd:
                    b3:56:79:60:39:88:8b:e1:bc:d3:99:9f:d6:9b:e1:
                    9d:b4:42:6e:6c:54:f7:a4:93:52:ce:78:37:8a:3f:
                    e3:95:96:9c:17:e9:dd:8a:fe:f3:7e:1d:e9:e8:a9:
                    71:5a:e2:5d:5a:96:4d:df:73:64:46:e5:68:be:cd:
                    03:62:6b:8b:76:1d:52:99:76:aa:7b:bc:50:e1:d8:
                    33:d1:8e:63:4b:96:db:93:a1:a2:1a:1b:cb:95:4a:
                    97:3b:69:cf:a6:f2:d7:93:3b:16:79:34:b3:df:41:
                    7b:d1:d8:bd:21:0f:c2:48:81:62:3d:62:3d:a8:d9:
                    99:cf:a2:14:99:35:34:cb:11:7e:04:68:07:a9:12:
                    19:f4:e6:29:9e:be:fa:61:aa:a4:d8:51:ad:3c:0e:
                    bc:a5:81:e8:82:76:03:c5:8a:ff:b3:3d:e6:2e:57:
                    62:cd:70:36:b6:fb:12:a8:37:7d:88:26:82:19:65:
                    e3:16:ae:36:67:cf:da:14:24:22:a8:8f:c3:16:3e:
                    1d:9d:84:e2:0c:c3:26:0f:a9:6e:85:61:2b:3e:60:
                    c8:26:60:4d:b1:bf:da:87:16:55:21:97:5b:43:d7:
                    c4:81:7a:22:e2:89:6b:00:68:be:bf:73:ee:90:08:
                    60:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:ED:C2:91:87:44:63:E2:EF:B2:19:57:0C:E1:9C:2B:45:86:0C:25
            X509v3 Authority Key Identifier:
                keyid:9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/9B543395929217E3EC708AF54E58E2F938CB1CC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3230382e38342e302f32322d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:48:69:22:95:9b:4e:46:7e:e7:5b:b4:54:f8:ce:a0:fd:c0:
         c5:07:74:5a:3f:66:b5:2a:c9:fe:58:8e:e1:63:f1:8b:44:f6:
         ea:9e:e7:89:3d:76:97:89:76:94:e7:d8:95:89:1e:65:2d:7c:
         eb:2b:05:42:03:84:41:01:46:bd:1f:b1:79:ff:2a:03:d3:4e:
         2d:0d:48:52:8e:7a:02:ee:23:02:1d:86:2d:cc:8d:e2:fc:58:
         cf:cb:a1:fb:a1:a8:44:64:13:a0:f2:61:58:04:ed:eb:b4:66:
         18:57:f1:c0:c4:90:57:4a:c3:f0:81:60:e0:b8:a4:9f:d0:bf:
         a1:b1:5c:10:f6:a5:02:fd:2f:c7:4a:ac:e3:06:ba:ae:b2:33:
         69:51:50:04:78:c3:f3:99:18:54:95:de:36:97:a0:c3:8d:cc:
         db:c6:4f:c6:0c:36:7b:fb:60:04:34:ee:2b:6a:69:05:5d:bf:
         cb:4a:fe:23:36:b9:5b:04:88:e8:1c:d7:20:1e:30:75:73:de:
         95:fc:18:69:bd:ea:24:d6:45:8c:58:97:ba:7f:4e:e3:77:09:
         ba:42:bd:ea:6c:42:f2:4e:89:c3:ba:37:39:3e:69:f8:99:96:
         ca:66:9e:bc:0f:c1:6e:96:7a:2e:9b:3e:42:12:2f:a5:f2:47:
         ee:f9:3b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----