Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3231342e36392e302f32342d3234203d3e20313333343438.roa
File:                     3130332e3231342e36392e302f32342d3234203d3e20313333343438.roa (raw, json)
Hash identifier:          O0AAe6FvmOIG6keC/XPjaV34nQOlQrU/fEErBxpxaYY=
Subject key identifier:   54:48:88:5F:40:56:3D:17:37:F4:04:30:19:63:68:D4:72:52:28:EB
Certificate issuer:       /CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Certificate serial:       4CBF1B48C524DDC37E2D3DB6BB12A2C29E8019C9
Authority key identifier: 9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3231342e36392e302f32342d3234203d3e20313333343438.roa
Signing time:             Sun 01 Jan 2023 23:59:09 +0000
ROA not before:           Sun 01 Jan 2023 23:54:09 +0000
ROA not after:            Sun 31 Dec 2023 23:59:09 +0000
asID:                     133448
IP address blocks:        103.214.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:bf:1b:48:c5:24:dd:c3:7e:2d:3d:b6:bb:12:a2:c2:9e:80:19:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
        Validity
            Not Before: Jan  1 23:54:09 2023 GMT
            Not After : Dec 31 23:59:09 2023 GMT
        Subject: CN=5448885F40563D1737F40430196368D4725228EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:74:ec:15:b0:db:57:5c:89:6b:e9:9a:2c:8a:
                    60:ca:a0:7b:6c:02:63:ce:13:23:1f:d8:95:82:b4:
                    e5:83:32:e7:56:ac:be:51:27:55:a8:25:d8:d3:34:
                    a7:31:e8:11:87:a0:84:86:c7:20:2e:f7:a1:76:6a:
                    e4:50:ae:df:43:d9:e2:a5:55:93:8f:a5:42:f6:f9:
                    26:da:f7:ef:c3:5e:08:e9:0b:0e:02:db:5d:ec:85:
                    43:2a:d9:6e:be:6d:aa:da:85:3c:0f:c5:ff:b8:9c:
                    d7:80:79:77:0d:83:24:cb:5b:f7:cb:75:6d:0a:9f:
                    c1:98:66:76:77:09:77:4a:6c:72:9f:49:58:5d:87:
                    a5:4e:d3:59:c3:c3:27:c4:ed:f7:4e:5b:0b:61:da:
                    6e:af:90:a0:a0:1d:d5:f7:42:53:0c:fb:dd:d8:c5:
                    52:68:e7:93:eb:17:77:78:cb:a0:31:b3:31:80:d4:
                    e9:4b:d7:42:e5:3e:42:e3:be:13:4c:76:ee:51:56:
                    c1:f7:e7:6b:48:95:f2:f8:6b:6f:23:8a:57:e2:d6:
                    74:a0:db:74:06:dd:2e:45:40:fd:01:bc:8e:73:6a:
                    bc:33:95:b4:bc:81:3b:96:92:d7:76:36:b0:72:cf:
                    5a:47:f2:7a:18:35:2b:fe:f0:9a:f4:a9:47:b9:b7:
                    45:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:48:88:5F:40:56:3D:17:37:F4:04:30:19:63:68:D4:72:52:28:EB
            X509v3 Authority Key Identifier:
                keyid:9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/9B543395929217E3EC708AF54E58E2F938CB1CC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e3231342e36392e302f32342d3234203d3e20313333343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:84:84:b1:54:36:dc:23:81:31:f5:be:d8:5e:58:65:30:a6:
         9f:c3:a0:b8:03:0f:54:1d:3d:60:0c:9a:29:19:32:e7:f5:bf:
         f2:44:3b:6e:f3:e6:6e:9f:44:90:fa:d8:c3:a7:04:cd:ca:03:
         a3:67:6c:b5:d1:6e:fa:27:b9:0d:77:cb:fd:a6:ff:8a:1d:c5:
         53:ba:0d:4e:b3:ae:90:f7:bf:bc:87:00:27:64:ab:90:99:ce:
         b1:06:0d:fc:ea:80:43:39:00:38:3c:a8:44:97:59:d6:f0:28:
         ba:7f:59:98:6c:f2:14:2a:94:f0:44:d6:a6:6d:b4:7d:7d:bb:
         86:c9:90:81:d5:cb:a4:2b:b3:ad:b3:b7:55:75:55:cb:01:53:
         95:b5:8f:55:fb:a7:96:c7:72:6a:f6:3e:3e:fc:51:e9:80:77:
         24:48:66:6b:24:f6:51:64:7c:d8:91:b3:f4:bf:ff:b3:7b:74:
         e1:03:5d:e0:80:a9:65:bf:db:f7:bc:6f:d7:81:54:4e:ba:bf:
         9f:51:5c:3d:0b:f5:cb:09:f6:b8:99:6a:43:a8:7c:bc:f8:38:
         f7:f0:c5:9b:00:77:14:bd:a6:4e:23:1b:12:15:f9:92:cb:c8:
         02:9c:a0:9b:20:80:fd:6a:16:e6:19:1f:45:f4:b4:11:49:1c:
         14:14:4e:83
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgIUTL8bSMUk3cN+LT22uxKiwp6AGckwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTE1OTAwMDAwMTEwLwYDVQQFEyg5QjU0MzM5NTky
OTIxN0UzRUM3MDhBRjU0RTU4RTJGOTM4Q0IxQ0MxMB4XDTIzMDEwMTIzNTQwOVoX
DTIzMTIzMTIzNTkwOVowMzExMC8GA1UEAxMoNTQ0ODg4NUY0MDU2M0QxNzM3RjQw
NDMwMTk2MzY4RDQ3MjUyMjhFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANh07BWw21dciWvpmiyKYMqge2wCY84TIx/YlYK05YMy51asvlEnVagl2NM0
pzHoEYeghIbHIC73oXZq5FCu30PZ4qVVk4+lQvb5Jtr378NeCOkLDgLbXeyFQyrZ
br5tqtqFPA/F/7ic14B5dw2DJMtb98t1bQqfwZhmdncJd0pscp9JWF2HpU7TWcPD
J8Tt905bC2Habq+QoKAd1fdCUwz73djFUmjnk+sXd3jLoDGzMYDU6UvXQuU+QuO+
E0x27lFWwffna0iV8vhrbyOKV+LWdKDbdAbdLkVA/QG8jnNqvDOVtLyBO5aS13Y2
sHLPWkfyehg1K/7wmvSpR7m3Rf8CAwEAAaOCAlkwggJVMB0GA1UdDgQWBBRUSIhf
QFY9Fzf0BDAZY2jUclIo6zAfBgNVHSMEGDAWgBSbVDOVkpIX4+xwivVOWOL5OMsc
wTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mOGU3ZDg2Ny1j
MzVlLTRlNjktYTgxNS1iYTFlOWIzMzZkNjIvMy85QjU0MzM5NTkyOTIxN0UzRUM3
MDhBRjU0RTU4RTJGOTM4Q0IxQ0MxLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB
BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1
ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9tMVF6bFpLU0YtUHNjSXIxVGxqaS1U
akxITUUuY2VyMIGvBggrBgEFBQcBCwSBojCBnzCBnAYIKwYBBQUHMAuGgY9yc3lu
YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3
LWMzNWUtNGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8zLzMxMzAzMzJlMzIzMTM0MmUz
NjM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzMzMzQzNDM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAZ9ZFMA0GCSqGSIb3DQEBCwUAA4IBAQBdhISxVDbcI4Ex9b7YXlhlMKafw6C4
Aw9UHT1gDJopGTLn9b/yRDtu8+Zun0SQ+tjDpwTNygOjZ2y10W76J7kNd8v9pv+K
HcVTug1Os66Q97+8hwAnZKuQmc6xBg386oBDOQA4PKhEl1nW8Ci6f1mYbPIUKpTw
RNambbR9fbuGyZCB1cukK7Ots7dVdVXLAVOVtY9V+6eWx3Jq9j4+/FHpgHckSGZr
JPZRZHzYkbP0v/+ze3ThA13ggKllv9v3vG/XgVROur+fUVw9C/XLCfa4mWpDqHy8
+Dj38MWbAHcUvaZOIxsSFfmSy8gCnKCbIID9ahbmGR9F9LQRSRwUFE6D
-----END CERTIFICATE-----