Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139392e3130302e302f32342d3332203d3e20313336373837.roa
File:                     3138352e3139392e3130302e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          uGXnUdN6xbJfTYS/0qSuAaVo3gNSR/uCW7PWGklL16k=
Subject key identifier:   12:16:B4:47:0A:48:42:B7:04:4E:BA:97:51:FF:F9:43:D0:04:B2:91
Certificate issuer:       /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial:       35C8F6EDB78815949BC7C075C31BE4C7AB0C7DE2
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139392e3130302e302f32342d3332203d3e20313336373837.roa
Signing time:             Mon 27 Mar 2023 08:27:18 +0000
ROA not before:           Mon 27 Mar 2023 08:22:18 +0000
ROA not after:            Mon 25 Mar 2024 08:27:18 +0000
asID:                     136787
IP address blocks:        185.199.100.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c8:f6:ed:b7:88:15:94:9b:c7:c0:75:c3:1b:e4:c7:ab:0c:7d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
        Validity
            Not Before: Mar 27 08:22:18 2023 GMT
            Not After : Mar 25 08:27:18 2024 GMT
        Subject: CN=1216B4470A4842B7044EBA9751FFF943D004B291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c6:f0:07:ce:64:6d:d5:77:9f:b6:fa:d9:47:
                    a9:9f:f7:1d:21:2d:c2:1d:5c:b0:6d:ac:07:90:41:
                    4f:d5:28:13:77:94:3c:95:55:d6:93:85:ee:c4:3f:
                    da:6a:69:91:3e:ce:8b:52:b3:cc:22:09:39:b3:d4:
                    c4:bd:ea:7d:5b:e1:a3:35:c4:98:c6:9a:3e:c4:22:
                    0e:93:8b:44:ec:1d:fb:45:cd:d4:a0:ee:50:e5:04:
                    fa:1e:90:9e:b8:f1:9f:93:7d:ff:c4:69:53:89:31:
                    f6:43:13:01:91:ab:64:81:26:f4:7b:cc:e8:5a:1d:
                    b7:70:5d:c2:21:91:7f:8b:b9:f6:f5:f3:4c:6f:e5:
                    d4:02:75:88:33:11:07:f9:3b:47:a8:71:6e:92:54:
                    f7:df:20:95:60:a4:f8:f8:b8:8c:2a:a7:5a:eb:9d:
                    ae:b9:c4:71:fe:64:b6:d8:7f:6b:27:ee:3a:3d:1b:
                    26:65:43:0e:fa:54:59:8e:e5:b3:ee:46:38:06:86:
                    a3:6c:08:d3:8e:0b:e7:84:83:88:08:e4:02:89:18:
                    13:f6:04:7e:11:16:cb:e2:35:b5:a4:57:4a:31:bb:
                    f6:20:29:1f:c8:f6:cf:76:b4:5b:20:d1:20:00:f6:
                    b4:7e:1f:ec:22:f4:d6:0d:9b:fc:b4:b5:08:1e:6d:
                    0e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:16:B4:47:0A:48:42:B7:04:4E:BA:97:51:FF:F9:43:D0:04:B2:91
            X509v3 Authority Key Identifier:
                keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139392e3130302e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.199.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:08:88:b5:aa:ce:73:67:9a:36:75:93:48:1a:62:4a:28:8b:
         29:94:fb:7a:f0:e4:ce:b2:eb:98:87:39:14:5a:f6:47:d9:69:
         ba:4a:c3:46:74:07:30:08:6a:b9:f9:e2:22:5f:0f:8a:4a:70:
         f8:91:34:f5:79:26:1a:9d:4d:d8:9d:24:7a:5f:81:bd:a3:46:
         6d:99:42:eb:20:95:b9:08:ae:8c:df:d9:cb:f8:ca:9e:c3:96:
         0b:97:01:36:e3:27:d1:a7:ee:d5:5b:b0:e2:fd:65:83:ee:3e:
         d9:1c:e0:49:9f:98:a0:29:9a:50:53:a7:b4:74:a1:40:c4:e5:
         de:70:28:de:ff:34:f4:ef:27:34:69:91:18:42:f1:60:e8:8e:
         98:35:b1:13:0c:55:f7:71:28:62:5a:2d:e8:de:30:76:81:d8:
         dc:51:19:7a:48:12:0e:4a:ac:47:df:63:91:f8:52:85:f6:28:
         9e:ed:2e:c7:30:21:e1:93:92:0b:fd:aa:c7:0d:4e:8c:e5:e6:
         2a:1a:c3:ff:2b:e0:b6:ed:39:61:d1:5c:30:41:b7:dd:df:f4:
         bd:f1:5b:74:43:3a:49:18:f0:48:cd:da:25:13:75:c3:c4:3e:
         4b:63:6f:fd:cc:7d:41:49:2b:6b:8b:f1:e5:f2:29:23:56:84:
         2c:11:91:32
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUNcj27beIFZSbx8B1wxvkx6sMfeIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmI4YTJjODhjNTI1NTRkNDlmNmI3OTAxMzdjM2JhYjY4
N2IyZjk1NjAeFw0yMzAzMjcwODIyMThaFw0yNDAzMjUwODI3MThaMDMxMTAvBgNV
BAMTKDEyMTZCNDQ3MEE0ODQyQjcwNDRFQkE5NzUxRkZGOTQzRDAwNEIyOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcxvAHzmRt1XeftvrZR6mf9x0h
LcIdXLBtrAeQQU/VKBN3lDyVVdaThe7EP9pqaZE+zotSs8wiCTmz1MS96n1b4aM1
xJjGmj7EIg6Ti0TsHftFzdSg7lDlBPoekJ648Z+Tff/EaVOJMfZDEwGRq2SBJvR7
zOhaHbdwXcIhkX+Lufb180xv5dQCdYgzEQf5O0eocW6SVPffIJVgpPj4uIwqp1rr
na65xHH+ZLbYf2sn7jo9GyZlQw76VFmO5bPuRjgGhqNsCNOOC+eEg4gI5AKJGBP2
BH4RFsviNbWkV0oxu/YgKR/I9s92tFsg0SAA9rR+H+wi9NYNm/y0tQgebQ6HAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUEha0RwpIQrcETrqXUf/5Q9AEspEwHwYDVR0j
BBgwFoAUu4osiMUlVNSfa3kBN8O6toey+VYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzYvQkI4QTJDODhDNTI1NTRENDlGNkI3OTAxMzdDM0JBQjY4N0IyRjk1Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3U0b3NpTVVsVk5TZmEza0JOOE82dG9l
eS1WWS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzYvMzEzODM1MmUzMTM5MzkyZTMx
MzAzMDJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALnHZDANBgkqhkiG9w0BAQsFAAOCAQEAJgiItarOc2eaNnWTSBpiSiiLKZT7
evDkzrLrmIc5FFr2R9lpukrDRnQHMAhqufniIl8Pikpw+JE09XkmGp1N2J0kel+B
vaNGbZlC6yCVuQiujN/Zy/jKnsOWC5cBNuMn0afu1Vuw4v1lg+4+2RzgSZ+YoCma
UFOntHShQMTl3nAo3v809O8nNGmRGELxYOiOmDWxEwxV93EoYlot6N4wdoHY3FEZ
ekgSDkqsR99jkfhShfYonu0uxzAh4ZOSC/2qxw1OjOXmKhrD/yvgtu05YdFcMEG3
3d/0vfFbdEM6SRjwSM3aJRN1w8Q+S2Nv/cx9QUkra4vx5fIpI1aELBGRMg==
-----END CERTIFICATE-----