Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e39332e35322e302f32322d3234203d3e20323033303631.roa
File:                     34352e39332e35322e302f32322d3234203d3e20323033303631.roa (raw, json)
Hash identifier:          2trTIwXGgEXzVJG4bmB9XFz7Y/5Z1Sg/+zABvpSFIU0=
Subject key identifier:   61:35:7E:B2:7B:3F:D3:A5:E3:4F:DB:1C:17:5A:20:E5:89:2C:88:84
Certificate issuer:       /CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Certificate serial:       61CC7FA63AAA2BCD2A74803E4716AD7DA2D9848A
Authority key identifier: DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e39332e35322e302f32322d3234203d3e20323033303631.roa
Signing time:             Mon 27 Mar 2023 08:27:46 +0000
ROA not before:           Mon 27 Mar 2023 08:22:46 +0000
ROA not after:            Mon 25 Mar 2024 08:27:46 +0000
asID:                     203061
IP address blocks:        45.93.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:cc:7f:a6:3a:aa:2b:cd:2a:74:80:3e:47:16:ad:7d:a2:d9:84:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
        Validity
            Not Before: Mar 27 08:22:46 2023 GMT
            Not After : Mar 25 08:27:46 2024 GMT
        Subject: CN=61357EB27B3FD3A5E34FDB1C175A20E5892C8884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:88:b7:34:3f:ed:29:93:ef:21:3e:c2:cc:f9:
                    7f:a1:8e:14:9f:7c:c1:46:f5:71:b3:53:d6:a2:57:
                    68:7e:f7:df:75:35:d7:2e:fe:98:c6:d4:2a:f4:75:
                    d4:5f:ae:a0:18:bb:5c:04:ad:03:72:64:b5:8f:97:
                    61:f9:52:60:ad:67:9a:9e:25:50:fb:d5:bd:32:f5:
                    09:fb:8e:c3:b6:09:6b:5d:7a:90:8c:3b:f2:c5:f1:
                    f6:22:df:1d:98:97:5a:ac:c9:ff:c6:92:ee:75:65:
                    61:f0:f7:da:7f:8c:8a:f8:bb:b7:5f:e5:df:ec:2b:
                    f1:35:74:99:7e:98:af:94:db:9a:35:24:53:ed:b2:
                    fa:f4:32:ec:6a:55:a1:30:25:bd:3e:f7:38:23:6d:
                    7d:55:e4:5b:cf:31:db:e5:2e:f3:25:9d:3e:da:5a:
                    94:a8:04:5c:e6:09:e2:ee:49:b4:8c:71:8e:7f:9b:
                    22:eb:66:b5:f6:19:75:9b:5e:cc:40:cb:a3:fb:82:
                    fa:a9:e6:4d:ba:57:d3:33:7e:82:92:8c:6c:38:0c:
                    aa:4d:62:53:99:ec:6a:15:f5:55:50:6a:9e:08:71:
                    92:76:9f:06:3a:4f:f5:48:26:12:18:8f:de:0e:68:
                    9c:13:88:cd:b6:13:2b:b7:37:44:5e:bb:0f:0a:06:
                    d7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:35:7E:B2:7B:3F:D3:A5:E3:4F:DB:1C:17:5A:20:E5:89:2C:88:84
            X509v3 Authority Key Identifier:
                keyid:DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/DD2A9A475E7B97E1BEFCFCE473C72A08EB471C1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e39332e35322e302f32322d3234203d3e20323033303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.93.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:e8:e5:e1:45:5f:ab:e5:3e:41:47:82:63:64:c9:d5:e7:d0:
         95:76:38:a1:ca:8b:fd:e1:a3:4b:e6:83:3d:03:0a:76:d5:52:
         70:e7:eb:8d:41:eb:02:17:f9:df:cd:eb:c8:31:f0:1f:31:53:
         49:a1:c4:1e:f4:cc:cc:a1:b0:08:2b:fb:d9:3e:08:3f:3f:1b:
         35:2c:ba:75:c9:50:ed:86:e9:9c:90:85:01:dd:76:94:d3:bd:
         b2:35:c1:82:48:59:b1:7f:ac:4c:6e:d9:4e:0b:96:c8:60:eb:
         f7:13:bc:f9:93:68:4c:0d:50:11:c0:33:8d:93:9a:48:6d:72:
         a7:94:bf:05:ad:2f:bb:11:0f:5a:31:77:88:3d:62:95:df:47:
         ea:08:91:8e:f6:1d:66:13:5d:4c:41:ac:ce:a7:0f:79:42:dd:
         3e:97:27:8e:c9:bf:5b:84:e3:63:20:ec:d7:a1:21:df:d8:d6:
         4a:82:e5:b7:de:a1:69:26:fb:0a:af:51:b9:85:4f:15:2a:91:
         bc:55:e3:1d:5e:b4:b2:be:00:2a:34:03:bf:41:3d:94:29:a3:
         ed:ff:3c:29:da:19:fb:90:dc:08:15:b2:ca:c9:01:a1:25:fb:
         d6:b5:ab:48:82:7c:0b:93:e1:b4:33:f3:7f:97:5e:c8:56:69:
         13:55:05:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----