Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139302e3134302e302f32342d3332203d3e203531313637.roa
File:                     3138352e3139302e3134302e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          +YMuWQX3AewOc/fJBFzk5Nx3A2yq9VdppxSwTrWqIkU=
Subject key identifier:   3A:83:1C:74:35:73:65:55:C9:00:48:D6:E0:9C:83:0F:49:84:26:91
Certificate issuer:       /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial:       5328EEA77C5C750634EED28426989EB46E7E149B
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139302e3134302e302f32342d3332203d3e203531313637.roa
Signing time:             Mon 27 Mar 2023 08:27:20 +0000
ROA not before:           Mon 27 Mar 2023 08:22:20 +0000
ROA not after:            Mon 25 Mar 2024 08:27:20 +0000
asID:                     51167
IP address blocks:        185.190.140.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:28:ee:a7:7c:5c:75:06:34:ee:d2:84:26:98:9e:b4:6e:7e:14:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
        Validity
            Not Before: Mar 27 08:22:20 2023 GMT
            Not After : Mar 25 08:27:20 2024 GMT
        Subject: CN=3A831C7435736555C90048D6E09C830F49842691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a8:36:b4:33:cc:af:56:17:9f:5e:a6:d2:4f:
                    ba:fd:8f:33:e8:96:a4:a8:a6:f2:0b:0f:5a:01:bd:
                    45:0b:9f:71:be:b2:86:42:0f:85:c3:74:bb:30:8e:
                    27:8a:a5:a7:15:94:b1:2f:43:dd:cb:90:93:67:04:
                    6a:b1:2f:d0:92:41:ec:fa:af:57:4e:58:28:61:26:
                    a6:d5:1e:83:f5:48:37:60:ea:84:ba:29:a0:22:a9:
                    a2:36:ca:b1:ff:4b:bb:06:31:da:85:bc:6f:7f:7b:
                    97:69:46:92:2a:65:cf:cd:3e:27:c6:2c:2a:6f:99:
                    55:b0:d5:e3:92:35:81:20:74:95:f3:75:e5:ba:36:
                    83:2a:56:a0:a5:75:d7:72:cb:f0:bf:a6:01:f9:68:
                    a5:af:ce:0b:e4:c7:78:a9:fd:e5:b8:c3:1c:de:c0:
                    dc:9f:f6:14:5f:8c:0a:a4:12:87:ff:ca:30:db:cf:
                    00:86:cc:c1:8f:1c:6c:44:12:49:c2:31:54:af:11:
                    3c:80:b2:10:8a:c2:cd:c4:50:6c:aa:29:68:d8:84:
                    f5:43:ce:b6:91:d2:18:89:fc:8d:dd:68:ba:4a:b4:
                    45:94:8b:7f:2b:86:5a:6e:c1:45:3f:83:bd:74:bc:
                    2c:c0:3e:c5:34:ef:e6:e1:56:fe:68:24:2b:69:20:
                    3d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:83:1C:74:35:73:65:55:C9:00:48:D6:E0:9C:83:0F:49:84:26:91
            X509v3 Authority Key Identifier:
                keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139302e3134302e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.190.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:97:bb:4c:74:71:26:db:59:a5:f0:76:0b:3c:c5:65:59:b5:
         2c:d1:e5:0b:bc:05:b9:75:68:03:99:8c:0f:3b:ae:01:fd:53:
         ab:cf:0e:78:ba:c1:a5:7b:2b:d7:b1:51:60:38:5d:2e:d7:60:
         0d:ba:79:a4:27:3c:2d:f9:be:6c:c2:c1:76:3d:17:2c:1f:c5:
         66:33:f9:8d:91:61:9a:62:62:90:cd:de:60:d3:a6:82:12:e6:
         d7:73:d9:65:84:b5:5d:71:0f:52:b6:14:4d:b7:b8:e3:5a:55:
         9f:d2:00:72:a9:8c:c3:93:06:a0:b9:9a:df:36:92:1a:ed:cf:
         7b:f3:57:60:24:22:68:5c:f1:20:df:64:07:de:b3:07:29:8c:
         5a:90:19:cb:35:09:b9:19:f5:5d:95:fc:a3:09:2a:66:da:f9:
         02:8c:82:3c:d1:4b:4c:1a:f6:c8:1d:bf:2c:44:bc:8d:39:e0:
         3c:6d:5a:5e:ee:30:25:a8:8a:ad:98:77:dc:a8:d1:21:86:a5:
         d6:6c:35:f6:40:9e:e7:75:8c:21:43:f2:0d:ad:9b:a2:8d:65:
         38:cc:68:2d:c8:38:14:e9:1a:b8:18:46:a9:44:14:d5:04:64:
         72:83:26:66:61:2a:ca:c4:b7:9a:a7:88:2d:6e:52:60:98:1e:
         b6:8c:52:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----