Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139332e36362e302f32332d3332203d3e203531313637.roa
File:                     3138352e3139332e36362e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier:          eZSJuIRTanMQ2SiXQsgjV2QSuU8B2qTdyK61EDVMxfk=
Subject key identifier:   E2:9D:89:36:BB:77:2B:6B:2E:7E:94:63:51:68:C6:B3:E8:FB:12:06
Certificate issuer:       /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial:       680E44DD59FFB22AAD07FA821F0AA12E6879A66C
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139332e36362e302f32332d3332203d3e203531313637.roa
Signing time:             Mon 27 Mar 2023 08:27:22 +0000
ROA not before:           Mon 27 Mar 2023 08:22:22 +0000
ROA not after:            Mon 25 Mar 2024 08:27:22 +0000
asID:                     51167
IP address blocks:        185.193.66.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:0e:44:dd:59:ff:b2:2a:ad:07:fa:82:1f:0a:a1:2e:68:79:a6:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
        Validity
            Not Before: Mar 27 08:22:22 2023 GMT
            Not After : Mar 25 08:27:22 2024 GMT
        Subject: CN=E29D8936BB772B6B2E7E94635168C6B3E8FB1206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b8:1b:c4:df:c9:0e:a7:d2:61:fe:41:af:7a:
                    b9:c6:a1:59:fd:45:9a:58:1b:54:73:ed:44:d6:ce:
                    e8:63:61:8b:a6:d3:98:a7:e2:26:e0:1b:d9:b9:b8:
                    e2:eb:b7:e0:e7:19:68:80:ea:28:04:65:10:61:c2:
                    a9:2c:11:03:7f:30:f6:2e:0a:29:dd:e7:01:d1:d6:
                    87:e1:d9:8b:0e:fa:f9:7a:b1:4a:99:1a:80:bd:f9:
                    45:0f:1a:f0:7d:41:ea:14:d0:57:cd:39:a7:5c:b0:
                    8f:b6:0f:37:4b:9a:a7:e9:3c:cf:9f:a8:09:79:ef:
                    e8:69:d4:d2:96:7e:60:e1:c2:99:80:e0:99:3a:69:
                    58:6a:7d:d2:ba:1c:a4:3b:f0:90:4e:33:c0:24:86:
                    3c:d9:b8:a1:e4:b6:8b:d4:12:f6:bb:22:bb:d8:68:
                    db:16:02:92:17:69:98:4b:fc:07:6f:0f:c8:43:a5:
                    9f:ec:64:ff:eb:c8:5c:36:8f:5d:86:cf:e6:2c:7f:
                    48:72:d0:78:7b:4e:9c:bb:ad:81:1b:7b:4e:23:f4:
                    92:6c:cf:29:70:9e:e9:6e:2c:30:f3:42:f6:27:6e:
                    6b:fa:93:14:9e:18:81:a3:b9:b0:f1:44:36:e4:5f:
                    ed:73:a7:62:5a:b4:20:2b:96:ec:ab:49:ac:6b:14:
                    6b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9D:89:36:BB:77:2B:6B:2E:7E:94:63:51:68:C6:B3:E8:FB:12:06
            X509v3 Authority Key Identifier:
                keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139332e36362e302f32332d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.193.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:65:75:f7:6b:5b:a0:c9:31:01:ad:60:89:30:0e:a8:fd:e6:
         91:d9:64:9b:e0:cc:2f:c1:ba:72:21:7e:41:70:38:e4:45:ec:
         b2:c1:e3:a7:ea:e6:16:45:af:4a:e2:92:ca:fa:e0:56:f3:a2:
         e4:36:41:0f:b0:33:58:98:32:ca:97:17:f5:05:86:8e:15:8a:
         06:fe:cd:98:87:4c:1f:18:21:0a:8c:b2:2f:f9:41:b0:84:ff:
         64:9b:2d:6c:65:cf:3b:a2:41:60:ff:2a:fd:d5:9b:47:99:61:
         ec:ad:4c:bb:41:93:86:49:b8:9d:39:35:6c:58:14:05:7e:79:
         49:0d:87:13:b3:c0:5f:5f:1f:a6:bc:c5:0a:fe:ab:9c:c8:2f:
         53:0f:ea:71:e5:dd:51:66:a0:d4:3f:9e:47:6f:88:44:b7:bd:
         47:26:63:6d:d1:f4:7e:c3:ee:6a:46:71:67:76:87:1e:fc:ac:
         52:68:c4:ab:97:be:ba:fc:31:1f:35:3d:e4:79:68:d5:a3:c2:
         2e:a4:43:65:99:eb:00:1e:45:ac:dd:92:74:af:de:6b:40:55:
         24:ad:a7:31:b4:a8:2e:ba:11:0a:c6:29:68:fb:eb:6d:2e:f9:
         02:c1:ea:ee:7a:0e:b6:af:7c:ff:73:b1:47:fc:bd:a1:b0:31:
         06:53:27:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----