Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/32372e302e3233322e302f32342d3234203d3e20313333373532.roa
File:                     32372e302e3233322e302f32342d3234203d3e20313333373532.roa (raw, json)
Hash identifier:          UY7IOIGBTDmgudaS/mBYDgx02kArMijhLOXnx24nEUU=
Subject key identifier:   F7:85:87:A8:40:34:26:1F:60:A8:53:A4:78:D6:44:DE:EE:F5:A1:E3
Certificate issuer:       /CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Certificate serial:       6E69A20A4C6F56E833CB8210BBC8508D64497425
Authority key identifier: 9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/32372e302e3233322e302f32342d3234203d3e20313333373532.roa
Signing time:             Sun 01 Jan 2023 23:59:08 +0000
ROA not before:           Sun 01 Jan 2023 23:54:08 +0000
ROA not after:            Sun 31 Dec 2023 23:59:08 +0000
asID:                     133752
IP address blocks:        27.0.232.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:69:a2:0a:4c:6f:56:e8:33:cb:82:10:bb:c8:50:8d:64:49:74:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
        Validity
            Not Before: Jan  1 23:54:08 2023 GMT
            Not After : Dec 31 23:59:08 2023 GMT
        Subject: CN=F78587A84034261F60A853A478D644DEEEF5A1E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ac:9f:e4:d0:99:61:c1:22:cd:f4:dd:33:44:
                    f2:1d:f6:e2:1c:a9:f9:66:f8:94:f6:36:8f:9e:33:
                    6a:f3:44:20:50:8a:c8:51:03:5c:17:e2:cf:d6:e1:
                    44:28:0b:2f:82:99:c7:83:1c:1f:96:07:01:9d:ae:
                    87:67:46:2f:50:e6:16:54:8f:52:c6:18:3d:4e:c6:
                    1f:7d:3c:ce:36:2f:79:84:0a:4c:84:0f:ff:4c:e7:
                    f1:61:4f:1a:c6:13:73:37:7f:b7:24:e6:1a:4b:1e:
                    97:2c:e0:5f:b5:47:a1:a8:dd:9d:6e:61:b8:ce:86:
                    93:4c:e7:e8:d8:06:48:df:14:7a:40:02:9f:99:4e:
                    d5:f7:b3:13:36:13:4c:9c:b1:37:d4:4c:24:61:f8:
                    6a:ca:f2:9a:13:b8:94:8e:00:9a:61:f7:16:b4:04:
                    d4:fa:bd:6e:d2:a2:63:57:72:d0:8f:50:93:61:b8:
                    15:cf:38:32:2f:1f:f3:76:3e:f7:9e:cf:2c:4e:8a:
                    f5:50:74:9d:f6:52:8b:b7:5c:81:22:cd:bd:8d:c7:
                    93:c2:1a:54:8f:8f:83:e5:dd:c6:4e:bf:7f:7e:0a:
                    6e:99:b3:c2:96:99:7a:19:5e:2a:64:0d:86:49:cb:
                    02:f7:f6:b1:e9:22:5b:89:10:d5:39:37:a0:c1:ae:
                    5a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:85:87:A8:40:34:26:1F:60:A8:53:A4:78:D6:44:DE:EE:F5:A1:E3
            X509v3 Authority Key Identifier:
                keyid:9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/9B543395929217E3EC708AF54E58E2F938CB1CC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/32372e302e3233322e302f32342d3234203d3e20313333373532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.0.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:19:e3:82:df:e1:3b:35:8b:d3:3d:11:59:3b:df:43:c6:fd:
         9b:64:9a:f9:37:d7:f6:a0:ce:41:fa:99:f1:35:05:f3:06:72:
         e4:04:03:62:80:9a:8d:71:dc:db:35:b0:ec:9a:cb:bc:09:81:
         1e:60:8c:f0:da:06:85:bf:6f:b7:ef:27:4f:1c:ed:bd:72:15:
         be:39:9a:49:27:fa:ec:a4:ed:87:04:c6:ef:78:7f:cc:2b:f2:
         f8:05:d0:dd:03:17:93:5e:d2:fd:c3:1a:ce:04:0e:a5:3a:1a:
         ab:2e:71:90:ce:3d:b7:d2:ec:04:00:99:6c:74:9f:12:9c:a6:
         f5:4f:be:17:ec:ba:22:3c:4b:d3:1f:e0:7b:39:35:10:7b:3b:
         74:e2:7d:d0:93:ef:0d:cb:a8:bc:3d:df:7e:28:73:46:ee:b3:
         7c:e5:ef:9a:32:a3:61:49:ee:63:bd:8f:4c:ef:12:7c:77:69:
         8f:1f:cb:fb:da:71:37:21:2a:85:95:28:07:7f:91:15:a7:3b:
         52:2c:3f:55:fe:6c:05:d8:88:06:60:dc:c2:a5:b2:c8:f4:4d:
         32:19:72:81:b8:92:e7:27:47:67:fa:98:0f:ee:40:3d:df:7c:
         80:29:8f:b1:ab:0c:58:1f:1d:eb:90:29:67:bd:dc:26:f5:c8:
         96:48:c4:66
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgIUbmmiCkxvVugzy4IQu8hQjWRJdCUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTE1OTAwMDAwMTEwLwYDVQQFEyg5QjU0MzM5NTky
OTIxN0UzRUM3MDhBRjU0RTU4RTJGOTM4Q0IxQ0MxMB4XDTIzMDEwMTIzNTQwOFoX
DTIzMTIzMTIzNTkwOFowMzExMC8GA1UEAxMoRjc4NTg3QTg0MDM0MjYxRjYwQTg1
M0E0NzhENjQ0REVFRUY1QTFFMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANusn+TQmWHBIs303TNE8h324hyp+Wb4lPY2j54zavNEIFCKyFEDXBfiz9bh
RCgLL4KZx4McH5YHAZ2uh2dGL1DmFlSPUsYYPU7GH308zjYveYQKTIQP/0zn8WFP
GsYTczd/tyTmGkselyzgX7VHoajdnW5huM6Gk0zn6NgGSN8UekACn5lO1fezEzYT
TJyxN9RMJGH4asrymhO4lI4AmmH3FrQE1Pq9btKiY1dy0I9Qk2G4Fc84Mi8f83Y+
957PLE6K9VB0nfZSi7dcgSLNvY3Hk8IaVI+Pg+Xdxk6/f34KbpmzwpaZehleKmQN
hknLAvf2sekiW4kQ1Tk3oMGuWgECAwEAAaOCAlUwggJRMB0GA1UdDgQWBBT3hYeo
QDQmH2CoU6R41kTe7vWh4zAfBgNVHSMEGDAWgBSbVDOVkpIX4+xwivVOWOL5OMsc
wTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mOGU3ZDg2Ny1j
MzVlLTRlNjktYTgxNS1iYTFlOWIzMzZkNjIvMy85QjU0MzM5NTkyOTIxN0UzRUM3
MDhBRjU0RTU4RTJGOTM4Q0IxQ0MxLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB
BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1
ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9tMVF6bFpLU0YtUHNjSXIxVGxqaS1U
akxITUUuY2VyMIGrBggrBgEFBQcBCwSBnjCBmzCBmAYIKwYBBQUHMAuGgYtyc3lu
YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3
LWMzNWUtNGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8zLzMyMzcyZTMwMmUzMjMzMzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzMzNzM1MzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAb
AOgwDQYJKoZIhvcNAQELBQADggEBACgZ44Lf4Ts1i9M9EVk730PG/Ztkmvk31/ag
zkH6mfE1BfMGcuQEA2KAmo1x3Ns1sOyay7wJgR5gjPDaBoW/b7fvJ08c7b1yFb45
mkkn+uyk7YcExu94f8wr8vgF0N0DF5Ne0v3DGs4EDqU6GqsucZDOPbfS7AQAmWx0
nxKcpvVPvhfsuiI8S9Mf4Hs5NRB7O3TifdCT7w3LqLw9334oc0bus3zl75oyo2FJ
7mO9j0zvEnx3aY8fy/vacTchKoWVKAd/kRWnO1IsP1X+bAXYiAZg3MKlssj0TTIZ
coG4kucnR2f6mA/uQD3ffIApj7GrDFgfHeuQKWe93Cb1yJZIxGY=
-----END CERTIFICATE-----