Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e38352e3234392e302f32342d3332203d3e203531313637.roa
File:                     34352e38352e3234392e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          vs7auM+EEHYVBqUo0eo7/C1yEpbZX3eTCHGfnvYwbcc=
Subject key identifier:   C5:DC:C0:F4:41:71:E6:A8:DB:67:CF:4F:B0:18:97:9B:9D:0D:BD:EF
Certificate issuer:       /CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Certificate serial:       0C2DB81CC00F8E737D077CB80752FD2C5C7D3FF7
Authority key identifier: DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e38352e3234392e302f32342d3332203d3e203531313637.roa
Signing time:             Mon 27 Mar 2023 08:27:44 +0000
ROA not before:           Mon 27 Mar 2023 08:22:44 +0000
ROA not after:            Mon 25 Mar 2024 08:27:44 +0000
asID:                     51167
IP address blocks:        45.85.249.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:2d:b8:1c:c0:0f:8e:73:7d:07:7c:b8:07:52:fd:2c:5c:7d:3f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
        Validity
            Not Before: Mar 27 08:22:44 2023 GMT
            Not After : Mar 25 08:27:44 2024 GMT
        Subject: CN=C5DCC0F44171E6A8DB67CF4FB018979B9D0DBDEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:02:04:ec:25:8b:ee:6e:1c:b5:c3:0c:29:e5:
                    06:cc:39:51:46:db:08:f8:4f:1e:35:85:8d:25:d1:
                    2a:0e:01:36:0f:db:47:b2:f1:37:2d:de:d6:f4:b8:
                    24:5f:99:51:54:a0:6b:79:b8:8c:de:85:27:38:99:
                    9f:49:a9:8a:54:02:23:12:bd:6b:04:c3:bf:96:ac:
                    c0:a2:ee:05:09:fb:56:08:24:3b:7c:14:ed:6f:77:
                    3a:87:e9:19:76:22:00:44:2b:9b:84:b6:8c:45:74:
                    8e:f8:4b:d1:09:4e:d8:42:c8:78:2e:aa:7a:ec:c9:
                    2d:fa:be:00:d3:73:57:79:dd:a0:d3:cb:96:1d:b9:
                    8d:f9:c1:cc:c4:a3:0f:f1:74:10:b5:10:f3:ff:35:
                    0d:6d:79:a5:d8:e1:4b:67:d5:da:84:3b:51:6c:55:
                    dc:4c:6c:a0:2c:84:54:b3:83:3c:0c:33:0d:cf:47:
                    10:8c:c2:e9:6e:e7:6d:7c:0a:fb:73:f5:bb:04:bb:
                    28:b6:24:4c:1b:f3:7f:d5:7e:57:58:e5:b5:f9:9d:
                    ff:2d:df:43:53:57:ee:b0:d7:d4:ea:cf:24:b8:9f:
                    db:d1:11:fd:56:68:9e:ce:01:cd:d9:3c:04:3a:46:
                    ce:5b:d1:e2:3e:9f:2d:f7:bc:fe:5d:7d:57:56:d4:
                    7e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DC:C0:F4:41:71:E6:A8:DB:67:CF:4F:B0:18:97:9B:9D:0D:BD:EF
            X509v3 Authority Key Identifier:
                keyid:DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/DD2A9A475E7B97E1BEFCFCE473C72A08EB471C1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e38352e3234392e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:bf:da:92:6a:a8:1c:9b:0f:5e:4b:55:1f:ab:4d:a0:36:62:
         d9:0b:ec:97:fe:18:1b:62:25:c6:99:98:02:f7:e6:90:33:b9:
         e5:a7:e2:4c:1f:3d:26:b9:1e:a5:13:7e:5b:14:0b:70:3d:89:
         a3:a8:fa:3b:b3:f6:ea:19:d2:24:1a:c8:1f:0d:eb:e3:80:1c:
         b0:81:b9:e9:39:01:2b:72:b9:3b:9a:5c:0c:8c:fe:de:fd:dd:
         55:ca:57:05:51:ef:1d:5b:f2:b5:12:c9:26:2c:4a:cd:d0:10:
         26:61:03:fb:94:c9:84:c8:0b:f5:4b:77:98:d6:68:48:b7:88:
         56:5e:ac:6e:08:ad:1c:25:e9:31:52:bb:01:9f:7d:a0:29:f6:
         ed:8c:df:c6:1c:65:aa:2a:a2:6e:04:b5:38:45:80:41:d0:06:
         05:6c:25:3d:de:7a:2e:81:e5:5c:68:34:a1:61:52:b5:f8:c2:
         0f:b9:0e:27:1b:c2:73:59:43:b4:56:a2:bf:b9:69:f2:89:ec:
         e7:d3:f4:ab:b0:dc:d7:4c:e3:9e:5b:e7:6f:27:e7:bc:bd:a1:
         14:7b:11:0b:e0:ab:a3:9a:fd:df:88:d1:89:e7:0e:1d:09:46:
         95:2f:0f:f0:08:36:cf:ad:d6:f8:f9:99:ad:64:2c:b1:fa:f4:
         e1:5b:0f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----