Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e36382e3131302e302f32342d3234203d3e20313333343438.roa
File:                     3130332e36382e3131302e302f32342d3234203d3e20313333343438.roa (raw, json)
Hash identifier:          wzs5gn/bIQzJiwPSyObZv263IRIbciFTP0SFkS2BDdY=
Subject key identifier:   C7:60:82:B7:50:04:FE:F6:13:D3:08:A4:83:FB:D8:7D:EB:60:D2:E5
Certificate issuer:       /CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Certificate serial:       08A94C4D3F1A77CF60E8FFCCA7DB297D2C7201FD
Authority key identifier: 9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e36382e3131302e302f32342d3234203d3e20313333343438.roa
Signing time:             Sun 01 Jan 2023 23:59:08 +0000
ROA not before:           Sun 01 Jan 2023 23:54:08 +0000
ROA not after:            Sun 31 Dec 2023 23:59:08 +0000
asID:                     133448
IP address blocks:        103.68.110.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a9:4c:4d:3f:1a:77:cf:60:e8:ff:cc:a7:db:29:7d:2c:72:01:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
        Validity
            Not Before: Jan  1 23:54:08 2023 GMT
            Not After : Dec 31 23:59:08 2023 GMT
        Subject: CN=C76082B75004FEF613D308A483FBD87DEB60D2E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:85:57:83:a7:1f:81:bf:1b:ab:31:53:e7:60:
                    a4:a5:5b:56:8f:08:d3:b7:74:59:66:1a:91:d9:55:
                    88:c0:93:0b:a2:53:a0:99:29:f3:0c:4b:d6:75:a7:
                    bd:bd:38:74:f2:e2:0d:16:0d:92:43:d0:c4:97:a6:
                    58:88:b7:80:c4:a7:cb:56:ca:67:5d:6f:80:4b:4b:
                    ef:c9:54:c6:c2:ce:e8:14:42:e4:54:2e:a7:de:a0:
                    8f:cf:89:27:f2:0e:80:a4:c6:9e:85:b6:be:2e:8a:
                    c2:66:14:fa:d0:60:6c:9a:76:e9:09:76:df:2f:9f:
                    a9:f1:72:a9:c2:17:45:5f:78:73:31:04:db:34:17:
                    d3:c7:43:9b:70:cb:43:e9:3f:e3:34:eb:84:e2:30:
                    bd:0b:80:8a:42:67:03:01:a2:7d:3b:75:a7:d9:a1:
                    44:26:ae:33:1e:e2:af:19:87:dd:bb:8c:18:6a:69:
                    68:c5:36:6c:76:2f:9f:6b:52:2a:fb:83:56:e9:41:
                    59:6b:c6:07:dd:c3:9e:43:bc:ea:f8:16:be:39:ef:
                    a2:b1:f0:c0:1d:82:02:5f:e5:d4:17:08:90:32:9f:
                    98:76:37:09:4f:9f:a4:a4:0a:58:50:71:f4:8b:49:
                    ac:5d:73:8c:77:9a:9c:74:fd:2a:31:7e:a5:ff:39:
                    ae:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:60:82:B7:50:04:FE:F6:13:D3:08:A4:83:FB:D8:7D:EB:60:D2:E5
            X509v3 Authority Key Identifier:
                keyid:9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/9B543395929217E3EC708AF54E58E2F938CB1CC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e36382e3131302e302f32342d3234203d3e20313333343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:e7:1a:0b:68:9a:57:74:07:64:bc:d3:7e:78:f2:67:1a:0c:
         4e:3c:e1:ad:93:84:57:d7:e3:ee:08:8d:9d:97:40:64:4a:48:
         60:3c:98:ab:02:5f:ac:71:b9:5a:c0:7c:fb:41:03:60:57:0f:
         e4:a3:60:f5:62:1a:43:15:22:76:5e:7f:e2:60:e9:52:94:b2:
         03:96:b9:23:65:fc:2d:e2:d3:87:78:45:1e:2c:a6:b1:14:1b:
         bc:74:21:7d:22:46:e3:cb:fa:9f:54:79:7d:ec:80:59:49:e4:
         94:82:c2:55:87:e8:92:80:85:21:da:9e:be:a4:45:9e:2f:84:
         08:a2:b6:8d:49:51:45:cf:f7:34:0b:69:f4:50:0a:ab:5a:de:
         29:c8:de:4f:0c:34:d2:79:9d:0b:8c:e7:0e:b9:0e:9a:4e:2b:
         6d:df:84:b4:04:3a:4a:95:d6:80:d2:e5:85:98:ca:58:59:94:
         b5:5f:48:e3:94:e7:80:ba:fc:5d:c4:5b:b0:01:1d:a6:f1:49:
         fa:a1:9d:f6:7e:09:39:a6:89:34:66:e0:af:ed:94:bd:5a:ff:
         69:f1:8a:b6:40:ff:7f:19:4e:16:13:9e:80:f5:bd:09:18:9a:
         27:3d:00:e4:09:f1:b4:6d:be:7c:22:7a:18:a4:9b:a9:41:8f:
         71:a4:fe:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----