Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3231342e36382e302f32342d3234203d3e20313338313935.roa
File:                     3130332e3231342e36382e302f32342d3234203d3e20313338313935.roa (raw, json)
Hash identifier:          8yLU2pz+aqCdv44RHq8X48C4fe7DB9M4wj87rxwpHxM=
Subject key identifier:   02:D3:2E:6B:CE:F7:66:9B:C4:3F:10:E5:63:F9:19:2A:DC:15:22:44
Certificate issuer:       /CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Certificate serial:       2905128552E9B5BF77300CA1ABEB34878BD57761
Authority key identifier: 9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3231342e36382e302f32342d3234203d3e20313338313935.roa
Signing time:             Sun 01 Jan 2023 23:59:09 +0000
ROA not before:           Sun 01 Jan 2023 23:54:09 +0000
ROA not after:            Sun 31 Dec 2023 23:59:09 +0000
asID:                     138195
IP address blocks:        103.214.68.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:05:12:85:52:e9:b5:bf:77:30:0c:a1:ab:eb:34:87:8b:d5:77:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
        Validity
            Not Before: Jan  1 23:54:09 2023 GMT
            Not After : Dec 31 23:59:09 2023 GMT
        Subject: CN=02D32E6BCEF7669BC43F10E563F9192ADC152244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:94:67:c4:99:eb:3b:9c:3e:ba:02:64:78:d6:
                    d9:bf:46:27:84:1c:b0:81:29:a3:94:cf:c0:c2:48:
                    39:e2:9b:4d:4b:b7:1c:44:b7:2b:89:88:c8:67:2d:
                    4a:62:13:34:d7:e6:16:dc:46:b9:3a:06:f7:09:f5:
                    bb:41:df:1f:5d:80:fb:f2:11:da:8a:51:11:5e:38:
                    f4:de:cf:a8:aa:81:d4:66:15:d2:af:d8:fa:0e:b9:
                    89:92:bc:1c:8b:50:3a:8a:51:e9:eb:81:37:90:57:
                    f5:82:c8:ee:63:10:13:63:d8:49:de:4b:73:2e:c5:
                    10:8d:50:28:88:59:ab:2b:e6:e9:92:42:c3:a4:10:
                    43:b7:cd:51:ef:85:f0:71:f8:e4:2b:03:8d:63:25:
                    a0:62:b5:ec:40:75:8d:2a:26:ce:6a:45:29:15:4a:
                    d5:24:88:b9:76:16:26:10:a3:96:3d:b0:9b:60:61:
                    e3:2a:b9:40:36:b9:ab:50:c0:9e:55:15:8e:3a:5a:
                    6e:e0:56:a0:e3:1a:e2:0f:57:e5:86:a4:b8:aa:31:
                    4d:ec:1e:7d:13:5a:5c:9a:11:3e:2c:ae:c0:e7:b0:
                    cd:94:de:e5:1c:54:ac:4a:70:69:bf:50:1c:4c:f8:
                    ce:82:2d:d0:cb:c4:71:0e:eb:6c:9f:19:70:bd:f6:
                    64:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D3:2E:6B:CE:F7:66:9B:C4:3F:10:E5:63:F9:19:2A:DC:15:22:44
            X509v3 Authority Key Identifier:
                keyid:9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/9B543395929217E3EC708AF54E58E2F938CB1CC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3231342e36382e302f32342d3234203d3e20313338313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:31:e5:56:93:38:d1:25:6d:f5:43:79:f0:c7:87:ff:7f:6c:
         5e:8f:55:9f:7f:4d:be:c9:08:0d:13:77:77:0d:01:8e:ef:35:
         ab:48:d2:c5:0f:28:7a:a5:db:2f:00:38:7c:25:41:4f:e5:5e:
         74:7f:fa:f2:c0:02:60:56:79:44:b0:41:b1:c8:38:25:a7:45:
         c6:b2:42:8e:87:2c:cf:51:3a:e5:b9:1a:11:9b:8d:a1:cc:aa:
         1f:c4:29:40:32:f6:06:0a:56:c4:d9:34:35:e6:b6:65:02:dd:
         a3:13:af:01:f2:09:cb:3d:ce:3c:a0:e7:6c:cc:88:55:78:8b:
         f2:77:f2:c7:5d:90:49:b9:6d:f5:46:07:05:58:b5:87:3d:5b:
         fa:a0:53:2d:1e:e9:3f:45:b2:3c:e7:e5:34:ef:ba:d5:24:aa:
         9c:7f:3d:a4:b7:91:91:34:5e:72:cb:bb:73:57:65:8b:a5:a7:
         67:06:7e:9b:09:54:14:04:5e:68:97:dd:81:9a:88:a4:f0:2c:
         a0:69:0b:a4:e3:0d:01:ab:e7:ab:99:2a:58:c7:ff:82:c0:cc:
         b3:01:6c:e6:07:e3:0e:80:1b:f6:a5:e9:35:84:ae:56:73:ed:
         8e:c7:79:fb:9a:94:d4:ab:d1:42:57:c0:34:5e:f9:ad:ff:4e:
         86:ed:c6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----