Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/39312e3233302e3131302e302f32342d3332203d3e203531313637.roa
File:                     39312e3233302e3131302e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          XVjR4G0Dkx0MUPDOx3F+8YejaDzIQjzhZSPgabMsulU=
Subject key identifier:   8E:6B:82:C5:FC:A3:AC:73:DA:41:9C:19:CE:01:E7:CA:79:1E:80:EC
Certificate issuer:       /CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Certificate serial:       73756B3C84BD622E8ED41675A91858CFD2FCB2E6
Authority key identifier: DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/39312e3233302e3131302e302f32342d3332203d3e203531313637.roa
Signing time:             Mon 27 Mar 2023 08:27:47 +0000
ROA not before:           Mon 27 Mar 2023 08:22:47 +0000
ROA not after:            Mon 25 Mar 2024 08:27:47 +0000
asID:                     51167
IP address blocks:        91.230.110.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:75:6b:3c:84:bd:62:2e:8e:d4:16:75:a9:18:58:cf:d2:fc:b2:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
        Validity
            Not Before: Mar 27 08:22:47 2023 GMT
            Not After : Mar 25 08:27:47 2024 GMT
        Subject: CN=8E6B82C5FCA3AC73DA419C19CE01E7CA791E80EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0a:1b:4c:b6:09:d7:ce:28:c9:c5:6b:c3:bb:
                    7b:8d:99:ed:8a:96:dc:86:1c:a4:96:ab:11:a4:6f:
                    a4:68:53:7b:54:bf:b8:63:94:5e:af:bd:0a:e0:ca:
                    06:b8:0e:ec:39:82:87:f6:da:44:3a:ad:2a:20:d5:
                    e4:4a:b7:5f:49:c2:78:b8:25:bd:7b:96:db:c5:0a:
                    61:5f:04:39:4a:51:53:ab:3d:1b:ca:c6:02:dc:83:
                    27:90:02:c2:75:b7:bd:1b:08:ef:82:d1:75:04:09:
                    6f:fe:35:a1:60:2d:36:6b:1a:ad:81:aa:7a:9f:56:
                    79:29:e3:42:5f:af:8f:ba:e1:db:f4:02:78:8c:a0:
                    35:85:27:89:80:df:a7:0c:3d:43:13:2a:9f:09:77:
                    f0:c5:00:f8:b3:68:f0:c0:1d:38:64:b0:24:c4:38:
                    98:39:08:f1:73:a1:d8:81:6d:8d:ba:e4:17:ee:0b:
                    50:83:16:76:53:f1:49:60:ca:c2:fe:85:e3:49:01:
                    90:7a:7d:e1:f5:42:85:1d:fd:dc:a2:a8:09:e1:b3:
                    ad:05:a7:18:f6:b3:be:1f:f9:7c:77:86:bd:59:e4:
                    7e:6f:94:26:49:af:5a:e7:ae:08:f7:0f:25:bd:7e:
                    0a:5a:a7:65:43:17:5f:15:80:d1:f8:f2:82:8c:2f:
                    c8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:6B:82:C5:FC:A3:AC:73:DA:41:9C:19:CE:01:E7:CA:79:1E:80:EC
            X509v3 Authority Key Identifier:
                keyid:DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/DD2A9A475E7B97E1BEFCFCE473C72A08EB471C1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/39312e3233302e3131302e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.230.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:9b:1b:39:37:45:63:5e:6d:86:36:bb:ca:50:3b:56:5c:60:
         d1:3a:98:de:31:c1:3d:24:4e:b2:3c:d6:d7:77:62:d0:00:53:
         30:82:9b:38:a2:0a:04:2a:ed:2c:7c:7b:85:f3:c3:69:a1:fe:
         19:2b:d1:8e:a4:83:56:d6:03:6f:14:66:57:a8:4c:40:78:c1:
         b7:0a:f5:fc:27:87:a8:d0:71:99:4f:2e:0f:56:f3:25:1a:79:
         4c:b2:3e:5f:60:9a:9e:97:bd:cf:74:7f:96:61:01:76:ff:b4:
         8b:45:ad:44:d4:4a:5f:c3:36:d2:4b:e2:3c:e5:a5:84:31:72:
         5c:17:28:f0:dd:d9:fd:dd:c0:01:11:31:a0:23:4d:f1:ac:55:
         ab:3a:ce:42:67:64:79:a1:d1:83:c3:e7:06:e7:f6:aa:15:aa:
         69:1c:b0:c9:2c:9c:bf:5e:7f:ad:1c:71:a2:14:c6:ba:7c:88:
         99:10:b0:c6:b3:46:ac:e3:82:73:41:55:fe:ed:a5:e4:18:0e:
         e0:05:05:a9:68:2f:7c:83:a1:c0:10:22:9c:8f:4b:a2:69:43:
         6a:df:f4:b1:42:b7:e0:ac:7b:c2:42:dc:95:bf:a7:4d:24:c1:
         0d:17:25:8a:38:77:2a:08:6f:97:d3:86:8f:ae:9b:f9:dd:38:
         a6:ac:6d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----