Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/39312e3233302e3131312e302f32342d3332203d3e203531313637.roa
File:                     39312e3233302e3131312e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          AGvga78GcZLr9cNeU65OpTWnAyQNxbcX0pZ8SPeyCYs=
Subject key identifier:   A3:41:70:89:F8:85:11:0E:A8:06:16:BB:D9:93:91:F4:B3:50:20:46
Certificate issuer:       /CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Certificate serial:       483EC816159381132E0196392D8013EC601E6F89
Authority key identifier: DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/39312e3233302e3131312e302f32342d3332203d3e203531313637.roa
Signing time:             Mon 27 Mar 2023 08:27:46 +0000
ROA not before:           Mon 27 Mar 2023 08:22:46 +0000
ROA not after:            Mon 25 Mar 2024 08:27:46 +0000
asID:                     51167
IP address blocks:        91.230.111.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:3e:c8:16:15:93:81:13:2e:01:96:39:2d:80:13:ec:60:1e:6f:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
        Validity
            Not Before: Mar 27 08:22:46 2023 GMT
            Not After : Mar 25 08:27:46 2024 GMT
        Subject: CN=A3417089F885110EA80616BBD99391F4B3502046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e6:e1:1f:9b:48:e6:b7:28:a7:98:9a:43:03:
                    bb:98:45:70:e3:21:0b:fc:ee:b9:51:f9:0e:9d:ed:
                    f0:92:7d:20:e3:d3:09:51:50:a2:5d:14:53:f7:b7:
                    c6:ee:33:78:8b:d1:c8:4f:cc:c1:4c:2a:e2:75:4f:
                    07:dc:dd:9f:6d:75:4d:3c:69:d9:3f:df:00:61:bd:
                    94:71:9b:ac:5e:bf:78:8f:e1:e7:1c:b5:79:08:97:
                    3c:94:26:ff:09:bc:ca:52:e6:c4:22:3c:6e:89:16:
                    73:06:4b:c5:fe:6e:bc:a9:c7:4c:e1:f1:1f:af:63:
                    ea:02:67:0f:76:47:8f:26:e4:9c:8b:fb:ae:fe:f8:
                    3d:89:02:08:7e:83:9b:dc:28:0e:3c:f1:2b:d7:4b:
                    7b:24:0a:3f:95:d6:52:82:1e:5a:70:3f:11:d6:67:
                    b4:f9:17:26:cc:68:19:7f:97:07:84:f7:e8:90:63:
                    82:5b:03:27:0b:1a:36:19:06:62:84:36:92:74:a7:
                    b1:ce:61:7f:35:1f:b9:87:90:33:be:ba:cd:51:29:
                    26:34:c1:7f:64:a9:3a:42:6b:c4:4b:d5:08:a9:20:
                    9e:92:e7:38:fd:87:bb:8a:34:f1:92:55:97:c6:70:
                    8d:1d:38:27:d5:54:7c:53:90:16:0e:ff:d9:f9:50:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:41:70:89:F8:85:11:0E:A8:06:16:BB:D9:93:91:F4:B3:50:20:46
            X509v3 Authority Key Identifier:
                keyid:DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/DD2A9A475E7B97E1BEFCFCE473C72A08EB471C1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/39312e3233302e3131312e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.230.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:26:f2:ab:78:e0:19:d7:10:ab:6a:b0:d5:5c:17:98:79:89:
         75:61:7a:60:bc:f9:05:3d:c7:87:f5:80:32:1c:c1:b3:bd:08:
         d8:f0:28:bd:0b:f9:7e:a3:f4:63:fd:5e:a8:c0:1f:a0:14:e4:
         fa:6d:67:54:46:84:b0:35:ef:14:15:a4:df:6e:d0:7c:bc:17:
         14:fd:2c:21:eb:ae:ca:00:5b:84:5a:6c:7e:94:29:e3:cd:fc:
         dd:18:0d:2b:cd:fd:53:9b:b1:3a:43:5e:ca:79:a3:ea:9c:7b:
         60:39:a1:8a:7f:34:13:fc:5a:d9:96:c5:94:49:53:88:42:1a:
         de:83:91:02:3d:be:a7:41:d6:b8:fb:c0:97:c0:12:f0:0e:8f:
         e8:33:49:eb:bf:1e:e7:9e:1d:61:6c:3a:fd:5b:14:5c:56:10:
         9f:5a:d7:56:fa:0f:f9:06:39:10:8f:57:0e:6c:e7:e2:42:99:
         15:3f:8e:2e:eb:43:38:24:ad:2d:58:3c:4f:9d:f3:d0:fd:62:
         27:54:8b:c8:1e:d7:1b:bf:93:d3:08:1a:0d:4f:bd:84:79:ea:
         6e:f2:26:ee:f7:c5:97:29:95:ea:1f:0d:b3:ed:a0:62:ee:c1:
         04:cd:19:c6:11:31:a1:81:bb:2d:cc:91:06:e6:8f:93:e4:d7:
         82:e6:67:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----