Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e36382e3130382e302f32342d3234203d3e203631313338.roa
File:                     3130332e36382e3130382e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          QPM4rwHyV2kVVE51gkATA9N8AqKKL3oTGz8VDd6PlBA=
Subject key identifier:   08:F5:28:B3:FF:D2:20:FE:B9:98:D8:99:5F:7D:37:A0:BD:C1:0A:DD
Certificate issuer:       /CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Certificate serial:       214CC5B2C8A5D7D4A4882AA72FAA54123F51D722
Authority key identifier: 9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e36382e3130382e302f32342d3234203d3e203631313338.roa
Signing time:             Sun 01 Jan 2023 23:59:09 +0000
ROA not before:           Sun 01 Jan 2023 23:54:09 +0000
ROA not after:            Sun 31 Dec 2023 23:59:09 +0000
asID:                     61138
IP address blocks:        103.68.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:4c:c5:b2:c8:a5:d7:d4:a4:88:2a:a7:2f:aa:54:12:3f:51:d7:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
        Validity
            Not Before: Jan  1 23:54:09 2023 GMT
            Not After : Dec 31 23:59:09 2023 GMT
        Subject: CN=08F528B3FFD220FEB998D8995F7D37A0BDC10ADD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:59:ac:1d:33:7b:35:04:0e:e4:2f:8d:0c:f4:
                    4a:89:9c:4c:5e:5e:a1:7a:08:f4:0c:5f:75:db:14:
                    68:63:a8:6e:b3:c9:7e:2c:20:c6:da:f8:7c:44:1a:
                    55:9e:e6:6d:b5:4d:e1:48:61:11:56:e1:16:48:ff:
                    15:72:24:e8:51:2e:06:42:54:fd:ca:d0:7d:92:e4:
                    c7:67:35:db:b8:a9:76:37:b7:03:e5:ae:19:df:6d:
                    ce:19:c7:85:c6:73:c7:77:49:94:17:10:61:4f:15:
                    e2:04:23:cf:90:04:4c:5d:90:de:15:2e:a9:05:56:
                    98:ab:1c:cb:2a:93:9f:bb:b0:2f:f3:bd:c5:be:56:
                    27:26:e4:1d:e4:5b:eb:3a:b0:fb:4d:6b:de:f3:46:
                    0b:4a:6c:fb:40:2f:65:20:78:b5:c9:11:de:d6:de:
                    ae:3d:17:d0:a3:6f:55:b3:32:fd:75:88:fb:e3:ea:
                    39:26:68:c6:09:93:44:a0:66:ed:a0:04:81:18:8c:
                    95:3a:05:da:3c:ff:05:bf:54:3b:31:84:91:4c:75:
                    49:59:a2:95:64:e1:6c:c4:ca:40:8b:18:a5:c6:e3:
                    a4:be:28:dc:cb:3f:70:ff:98:41:7f:eb:3d:6d:f1:
                    2d:36:d1:2d:cc:d3:d7:fa:ac:9d:1b:88:e3:0e:22:
                    a7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F5:28:B3:FF:D2:20:FE:B9:98:D8:99:5F:7D:37:A0:BD:C1:0A:DD
            X509v3 Authority Key Identifier:
                keyid:9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/9B543395929217E3EC708AF54E58E2F938CB1CC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e36382e3130382e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:43:b2:68:88:29:58:ff:4a:ee:85:f3:7a:06:33:87:38:2d:
         33:de:57:ea:81:ed:2f:d5:24:8d:32:86:f9:b7:82:ce:b6:8b:
         a5:0c:d5:de:dd:9d:fe:14:22:01:75:8e:ce:a2:62:cd:a6:e1:
         99:c3:50:e4:6d:d6:39:2b:b7:2d:6e:4d:f1:ab:51:7f:31:a4:
         28:67:36:74:60:78:3a:22:a3:1f:d3:35:61:6b:89:ef:9a:7a:
         6d:68:28:97:0f:a2:75:8c:32:67:28:c9:12:da:ea:c7:53:e4:
         8f:17:b0:4e:d5:ba:70:d2:b8:bd:db:9e:20:eb:b8:c1:75:44:
         94:ac:46:a3:60:93:45:20:52:75:ff:86:8b:e5:bb:db:2f:9b:
         6b:61:34:60:57:b0:b7:16:d8:25:4b:3b:46:55:a5:3f:28:7d:
         3d:05:47:af:a2:22:64:7b:a2:ae:7d:d3:d3:e8:36:94:c2:89:
         75:62:18:09:03:68:3e:fd:9e:3b:74:a3:eb:aa:2b:65:6c:b1:
         82:99:8d:3d:44:53:ef:d0:69:7f:01:2f:2d:2a:1a:d4:e9:cb:
         33:44:9b:7e:e3:9e:8a:3c:74:8a:fd:dd:2a:5a:7e:93:77:d6:
         82:b8:94:38:6a:2c:4f:a4:29:07:f2:27:64:c2:a7:64:1f:4a:
         a0:4d:e5:85
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgIUIUzFssil19SkiCqnL6pUEj9R1yIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTE1OTAwMDAwMTEwLwYDVQQFEyg5QjU0MzM5NTky
OTIxN0UzRUM3MDhBRjU0RTU4RTJGOTM4Q0IxQ0MxMB4XDTIzMDEwMTIzNTQwOVoX
DTIzMTIzMTIzNTkwOVowMzExMC8GA1UEAxMoMDhGNTI4QjNGRkQyMjBGRUI5OThE
ODk5NUY3RDM3QTBCREMxMEFERDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJdZrB0zezUEDuQvjQz0SomcTF5eoXoI9AxfddsUaGOobrPJfiwgxtr4fEQa
VZ7mbbVN4UhhEVbhFkj/FXIk6FEuBkJU/crQfZLkx2c127ipdje3A+WuGd9tzhnH
hcZzx3dJlBcQYU8V4gQjz5AETF2Q3hUuqQVWmKscyyqTn7uwL/O9xb5WJybkHeRb
6zqw+01r3vNGC0ps+0AvZSB4tckR3tberj0X0KNvVbMy/XWI++PqOSZoxgmTRKBm
7aAEgRiMlToF2jz/Bb9UOzGEkUx1SVmilWThbMTKQIsYpcbjpL4o3Ms/cP+YQX/r
PW3xLTbRLczT1/qsnRuI4w4ip1cCAwEAAaOCAlcwggJTMB0GA1UdDgQWBBQI9Siz
/9Ig/rmY2JlffTegvcEK3TAfBgNVHSMEGDAWgBSbVDOVkpIX4+xwivVOWOL5OMsc
wTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mOGU3ZDg2Ny1j
MzVlLTRlNjktYTgxNS1iYTFlOWIzMzZkNjIvMy85QjU0MzM5NTkyOTIxN0UzRUM3
MDhBRjU0RTU4RTJGOTM4Q0IxQ0MxLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB
BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1
ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9tMVF6bFpLU0YtUHNjSXIxVGxqaS1U
akxITUUuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUHMAuGgY1yc3lu
YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3
LWMzNWUtNGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8zLzMxMzAzMzJlMzYzODJlMzEz
MDM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTMxMzMzOC5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AGdEbDANBgkqhkiG9w0BAQsFAAOCAQEAI0OyaIgpWP9K7oXzegYzhzgtM95X6oHt
L9UkjTKG+beCzraLpQzV3t2d/hQiAXWOzqJizabhmcNQ5G3WOSu3LW5N8atRfzGk
KGc2dGB4OiKjH9M1YWuJ75p6bWgolw+idYwyZyjJEtrqx1PkjxewTtW6cNK4vdue
IOu4wXVElKxGo2CTRSBSdf+Gi+W72y+ba2E0YFewtxbYJUs7RlWlPyh9PQVHr6Ii
ZHuirn3T0+g2lMKJdWIYCQNoPv2eO3Sj66orZWyxgpmNPURT79BpfwEvLSoa1OnL
M0SbfuOeijx0iv3dKlp+k3fWgriUOGosT6QpB/InZMKnZB9KoE3lhQ==
-----END CERTIFICATE-----