Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3134342e34382e38322e302f32342d3234203d3e20323033303631.roa
File:                     3134342e34382e38322e302f32342d3234203d3e20323033303631.roa (raw, json)
Hash identifier:          aRn8huNF1Tq5+DcAdC8y2KoE2+q0Ifw55zWNvBXmrUw=
Subject key identifier:   46:48:C3:74:EC:51:11:7F:D6:F5:EB:0E:83:A6:08:F7:93:5A:BB:3B
Certificate issuer:       /CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Certificate serial:       427CAEEA3752F780851A92A83181C9FA31B1A9CB
Authority key identifier: 9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3134342e34382e38322e302f32342d3234203d3e20323033303631.roa
Signing time:             Sun 01 Jan 2023 23:59:08 +0000
ROA not before:           Sun 01 Jan 2023 23:54:08 +0000
ROA not after:            Sun 31 Dec 2023 23:59:08 +0000
asID:                     203061
IP address blocks:        144.48.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:7c:ae:ea:37:52:f7:80:85:1a:92:a8:31:81:c9:fa:31:b1:a9:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
        Validity
            Not Before: Jan  1 23:54:08 2023 GMT
            Not After : Dec 31 23:59:08 2023 GMT
        Subject: CN=4648C374EC51117FD6F5EB0E83A608F7935ABB3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:eb:46:e4:61:f9:80:e9:d2:50:19:c9:2c:7b:
                    3b:09:9a:6b:0a:f2:a8:12:5f:f5:c6:53:9e:f6:c0:
                    f3:b0:46:1e:87:26:fe:60:d7:ba:17:07:8d:fa:bb:
                    d2:bc:3b:0b:7b:05:45:ae:90:02:54:df:fb:b8:be:
                    d5:6f:9a:97:70:f1:60:b3:13:bc:62:42:51:3e:8c:
                    74:50:02:4b:ea:11:2e:91:9c:b7:bf:6b:d3:3d:25:
                    41:a2:16:4f:ca:a9:10:f7:d7:30:d2:6c:a0:56:63:
                    7b:ba:57:bc:53:f2:52:be:1c:47:2e:8f:9b:24:6d:
                    b0:fd:1d:e4:e4:3b:30:80:fb:b1:94:80:a9:88:47:
                    e2:da:5e:4c:2f:f1:dd:db:0c:21:42:be:5b:9b:74:
                    ef:a0:7d:be:2a:ff:76:41:76:62:5f:ba:50:c2:94:
                    61:9e:f3:52:6f:e1:ef:5b:de:16:4f:72:34:36:95:
                    c4:e5:c2:78:98:f7:61:da:fc:61:6c:92:19:a3:e5:
                    d4:ce:74:5a:c5:7e:8e:57:41:06:da:99:aa:2b:cf:
                    a7:7b:8c:01:d4:bf:3e:80:30:56:7e:d0:b3:9c:2e:
                    52:3f:10:ad:80:7b:b9:d4:1d:4d:bd:d0:a0:37:32:
                    fd:f4:e0:a7:c6:bb:72:98:16:25:51:e8:f5:92:76:
                    93:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:48:C3:74:EC:51:11:7F:D6:F5:EB:0E:83:A6:08:F7:93:5A:BB:3B
            X509v3 Authority Key Identifier:
                keyid:9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/9B543395929217E3EC708AF54E58E2F938CB1CC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3134342e34382e38322e302f32342d3234203d3e20323033303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.48.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:0e:20:18:eb:12:a0:13:22:99:d9:88:ef:c5:7a:be:6c:12:
         7b:1c:e7:c9:7c:03:08:a9:ae:b0:cf:a7:3b:bb:32:de:f8:1a:
         da:f3:3c:f0:52:89:1f:69:34:93:92:1c:d8:5a:28:50:dc:8f:
         47:6d:4d:a4:73:b3:94:96:b1:b6:2f:7d:7e:ca:ba:71:54:61:
         0e:3e:8d:b3:53:d5:4a:94:22:29:ee:de:eb:2a:4c:52:0a:04:
         7b:74:cf:9c:18:66:6e:6f:2d:ad:36:16:df:90:1f:64:5e:3f:
         b1:37:ee:8d:7e:62:a0:5b:a6:8e:69:cb:9e:95:c2:b4:3e:a3:
         5a:10:24:9d:53:21:35:20:2f:ce:d4:eb:8c:6f:36:1c:f4:92:
         22:d8:b0:1d:bc:9f:94:cf:f4:0b:6b:7b:b3:92:de:da:22:8f:
         f9:e3:2b:1e:8a:ee:9f:26:41:64:f9:7d:b3:4d:2c:19:0c:af:
         a2:de:7e:4a:2d:aa:77:e6:11:50:b4:e2:6a:50:c8:64:0b:14:
         1b:b7:26:3f:bc:06:32:ac:9f:4e:15:ea:2d:0e:68:30:93:9d:
         83:7d:4c:a7:3c:90:60:c3:85:64:24:3b:6a:a7:0a:6c:f6:87:
         96:9a:75:52:73:f3:85:5c:e9:1b:3c:5f:c3:f5:b4:6f:55:fd:
         66:30:c2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----