Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3134342e34382e38312e302f32342d3234203d3e20323133313232.roa
File:                     3134342e34382e38312e302f32342d3234203d3e20323133313232.roa (raw, json)
Hash identifier:          NoSqQYeZk0DpcRviAdtibOyXbTstqeNlF0X1LRcXmBM=
Subject key identifier:   52:6B:E1:44:64:41:BB:4F:26:1E:C7:FA:E8:9A:7E:96:74:C0:C0:94
Certificate issuer:       /CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Certificate serial:       1F2EC871DF39DC7B22E2543689E0BFDA529F1488
Authority key identifier: 9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3134342e34382e38312e302f32342d3234203d3e20323133313232.roa
Signing time:             Sun 01 Jan 2023 23:59:08 +0000
ROA not before:           Sun 01 Jan 2023 23:54:08 +0000
ROA not after:            Sun 31 Dec 2023 23:59:08 +0000
asID:                     213122
IP address blocks:        144.48.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:2e:c8:71:df:39:dc:7b:22:e2:54:36:89:e0:bf:da:52:9f:14:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
        Validity
            Not Before: Jan  1 23:54:08 2023 GMT
            Not After : Dec 31 23:59:08 2023 GMT
        Subject: CN=526BE1446441BB4F261EC7FAE89A7E9674C0C094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ec:2e:f9:63:3d:9e:a2:02:c9:c8:f3:36:e1:
                    67:a6:3b:b6:d9:96:d2:86:9c:98:ec:19:bc:a4:7d:
                    3a:e1:6b:4d:82:ac:4b:ee:f3:dc:f9:7d:41:b8:9f:
                    45:d0:a1:6f:82:a1:db:62:8b:92:1e:8b:32:80:ed:
                    78:c9:47:46:57:37:02:29:55:0f:a9:ea:eb:33:c4:
                    b1:ef:4a:92:e3:6d:3f:80:27:69:57:73:f8:62:fc:
                    75:6a:fc:03:85:1f:86:53:45:17:bc:b0:46:9d:e6:
                    1a:93:15:53:85:3e:30:87:5c:2e:9f:d8:67:13:11:
                    02:4a:b9:55:4f:62:ff:fc:df:8c:82:2b:96:16:72:
                    dc:a5:b8:99:d4:ea:ef:9a:f2:7b:af:e0:25:ef:11:
                    6f:b4:17:58:56:2e:89:4e:9b:52:25:ea:0d:eb:4b:
                    2c:fe:f8:8e:d6:f9:15:8f:50:8d:af:1e:d8:a1:ef:
                    e3:d5:a0:ed:4d:b0:23:63:f9:a7:40:0c:0b:e7:40:
                    b8:31:83:36:90:ec:07:e3:9c:83:91:8d:4f:c6:18:
                    8a:47:4d:c0:25:25:ff:84:ef:ed:63:9d:07:7a:7d:
                    a6:b9:27:af:3a:b1:72:f6:c0:86:b3:d4:97:55:3b:
                    e6:35:d5:a5:d5:ef:41:a5:35:26:ce:86:12:4d:f0:
                    16:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6B:E1:44:64:41:BB:4F:26:1E:C7:FA:E8:9A:7E:96:74:C0:C0:94
            X509v3 Authority Key Identifier:
                keyid:9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/9B543395929217E3EC708AF54E58E2F938CB1CC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3134342e34382e38312e302f32342d3234203d3e20323133313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.48.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:9b:25:c6:57:dd:36:27:12:78:f2:fd:44:67:5d:83:77:fa:
         28:fc:93:cd:11:1f:3d:b1:f1:d3:19:8c:87:aa:1c:4f:77:bd:
         d2:c5:af:9f:8b:57:0f:c9:23:3f:0a:4d:07:db:3e:7e:54:02:
         ba:e5:e3:16:d0:ed:98:99:16:b0:b3:85:50:c6:47:10:e8:6a:
         65:4e:85:2f:d1:8b:48:5f:8c:7c:b5:0b:66:c7:87:85:6e:2b:
         ef:9b:c4:d0:17:22:eb:02:ee:a5:de:b1:cf:ed:ac:88:d5:3b:
         33:eb:64:f0:e5:a9:4b:59:15:a9:eb:5c:59:35:07:f0:3c:8d:
         11:65:d6:74:db:43:fa:1c:3e:db:e9:43:06:a9:9a:8c:27:1a:
         95:aa:77:f8:95:80:28:2c:42:99:4d:d4:1a:66:fd:b4:fa:7b:
         b2:82:85:54:af:98:17:2c:0d:0a:2e:c2:69:d7:d1:d1:c7:02:
         eb:b6:a2:80:03:c9:59:17:4d:18:93:38:4c:39:77:b3:1a:99:
         93:15:a2:97:7d:6c:6c:a2:f9:2e:2e:7e:73:1a:4b:c4:de:87:
         cc:c7:df:1b:ab:fb:a4:a0:73:ce:e5:a8:2d:2d:99:87:93:74:
         4f:96:cf:84:19:39:23:00:3c:49:2c:55:3c:86:3b:c1:db:d6:
         f9:25:56:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----