Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/32372e302e3233332e302f32342d3234203d3e20323036383034.roa
File:                     32372e302e3233332e302f32342d3234203d3e20323036383034.roa (raw, json)
Hash identifier:          ZH3ZOHuqOPjer+W+LAUtpL9MJ4BIKBJ4VwW3KRZLk9M=
Subject key identifier:   73:B6:A5:8A:08:24:3A:3A:84:A0:37:0E:D5:8F:A5:77:BB:1A:CF:57
Certificate issuer:       /CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Certificate serial:       19307E4B3E928320D2A2657E7C0F4F3156A980DA
Authority key identifier: 9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/32372e302e3233332e302f32342d3234203d3e20323036383034.roa
Signing time:             Sun 01 Jan 2023 23:59:08 +0000
ROA not before:           Sun 01 Jan 2023 23:54:08 +0000
ROA not after:            Sun 31 Dec 2023 23:59:08 +0000
asID:                     206804
IP address blocks:        27.0.233.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:30:7e:4b:3e:92:83:20:d2:a2:65:7e:7c:0f:4f:31:56:a9:80:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
        Validity
            Not Before: Jan  1 23:54:08 2023 GMT
            Not After : Dec 31 23:59:08 2023 GMT
        Subject: CN=73B6A58A08243A3A84A0370ED58FA577BB1ACF57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0e:e9:ee:39:9a:4e:92:b3:12:1a:24:4a:7c:
                    9e:4b:84:bc:da:33:00:28:63:49:a1:c7:b4:7e:65:
                    e8:3e:c0:ba:d8:7d:79:ac:d8:11:94:58:e5:b4:c2:
                    f1:78:d5:fa:c5:e7:03:07:80:17:02:64:a5:0b:68:
                    e2:6f:67:41:0b:f9:d0:39:33:4b:8c:5c:63:e0:b8:
                    62:95:d6:b3:35:cc:b7:c6:a8:5f:be:ce:06:37:47:
                    7e:45:b0:cd:45:61:bf:8f:23:30:e3:41:29:cf:0e:
                    e2:83:4d:44:e3:0d:26:d7:e1:ee:38:6c:3b:49:a5:
                    ed:69:42:5a:cf:fa:f7:78:0a:2e:82:4c:c0:f2:a0:
                    0c:ab:fc:e4:01:63:9c:8d:29:5c:75:07:5e:76:76:
                    ac:f5:0b:1f:7b:21:ea:d0:64:12:03:e8:44:7e:4e:
                    85:55:45:15:3f:96:58:78:cc:11:58:87:39:f1:bc:
                    23:42:17:c6:be:6b:b6:be:5e:6b:7b:33:15:e8:90:
                    b6:0a:cb:e0:b8:79:a9:1c:0f:85:ba:47:42:dd:2e:
                    82:5a:ed:a7:f6:1e:ee:e2:12:47:13:8c:57:89:34:
                    87:f5:e9:fa:23:d5:bb:ca:88:6a:72:1e:cc:fa:6c:
                    ef:c6:00:ad:99:89:d0:45:63:c9:2b:d7:10:cd:fb:
                    36:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B6:A5:8A:08:24:3A:3A:84:A0:37:0E:D5:8F:A5:77:BB:1A:CF:57
            X509v3 Authority Key Identifier:
                keyid:9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/9B543395929217E3EC708AF54E58E2F938CB1CC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/32372e302e3233332e302f32342d3234203d3e20323036383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.0.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:7b:3b:aa:f2:ff:6e:57:7d:93:b1:20:d3:ba:69:df:93:68:
         63:ae:34:0f:49:4e:39:7d:fe:bc:68:20:f1:04:13:1d:d6:94:
         0a:5b:e2:f6:2d:17:01:9f:4d:44:15:0c:70:86:79:3f:a6:c5:
         78:99:2e:f0:3b:b5:ff:d6:46:a6:a9:0a:c3:a0:9f:dc:ef:0f:
         17:80:9c:fe:90:26:b6:db:42:d1:73:38:bb:28:d3:0d:a3:56:
         4c:a3:68:16:08:28:f6:91:b3:1c:a7:41:25:4f:6b:c9:05:5f:
         7b:32:30:c9:5f:11:82:ff:e9:d5:d0:a4:3b:2d:35:af:fb:de:
         87:fc:c2:09:65:df:56:db:5b:12:3e:9a:c0:08:7c:04:08:1c:
         43:80:97:15:05:6b:69:86:c8:7f:ce:6c:87:4a:e0:5d:c1:4a:
         e6:52:e5:95:ee:b9:b4:79:d5:95:5a:58:32:a8:b1:60:04:61:
         7f:ff:87:c1:cd:ba:bf:2d:36:d6:51:9d:56:db:ea:53:b2:15:
         5c:2e:0d:4d:68:2e:fc:48:5b:53:9a:b3:aa:4a:10:db:2d:58:
         e2:00:97:f4:af:b7:f9:49:16:11:bd:b4:0a:1a:f4:32:12:d6:
         e7:ac:b0:d0:3a:ce:0f:44:d8:9a:5a:a6:0d:74:b2:50:b5:bb:
         38:1f:2b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----