Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230392e3232332e302f32342d3332203d3e203531313637.roa
File:                     3138352e3230392e3232332e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          Dia4HW8BouLy98pPcNw7Mrbdwq6osX7BlaI7zvjGCRg=
Subject key identifier:   92:62:56:3F:C9:54:5A:3C:14:85:E7:FF:E2:B1:EA:B5:22:79:B8:D7
Certificate issuer:       /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial:       0B8E526AFE89ACDE3D6ABEC0539B0F75E39C588C
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230392e3232332e302f32342d3332203d3e203531313637.roa
Signing time:             Mon 27 Mar 2023 08:27:20 +0000
ROA not before:           Mon 27 Mar 2023 08:22:20 +0000
ROA not after:            Mon 25 Mar 2024 08:27:20 +0000
asID:                     51167
IP address blocks:        185.209.223.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:8e:52:6a:fe:89:ac:de:3d:6a:be:c0:53:9b:0f:75:e3:9c:58:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
        Validity
            Not Before: Mar 27 08:22:20 2023 GMT
            Not After : Mar 25 08:27:20 2024 GMT
        Subject: CN=9262563FC9545A3C1485E7FFE2B1EAB52279B8D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7d:c1:63:de:35:75:76:36:c7:53:d9:3f:34:
                    57:17:9f:2c:0a:c7:91:e1:a9:f0:62:83:f4:b1:ef:
                    e8:48:39:30:71:05:8d:94:85:c6:6e:a1:48:ad:46:
                    26:f4:0d:ea:de:3b:8f:71:f8:61:25:16:b9:ec:ac:
                    b2:0e:a7:f4:8b:66:bb:36:54:0a:1f:9f:25:9b:3f:
                    44:60:3b:89:8d:65:5d:b9:ff:18:6b:6e:5e:cd:78:
                    f2:88:2b:72:ad:57:a9:eb:47:59:c2:86:6b:b7:58:
                    96:17:24:ed:54:d9:a4:ff:b7:df:7c:98:58:91:3c:
                    f4:26:e4:95:c5:f2:de:1e:45:00:ca:14:8a:d6:89:
                    0d:7a:b2:7e:5e:78:ad:ff:0b:23:99:c1:c0:c2:34:
                    e7:fe:5b:1b:45:f7:ce:88:62:fd:8d:7a:69:57:f9:
                    a8:55:cb:16:66:ed:83:58:f0:fd:fa:be:b0:07:3a:
                    92:9a:2b:4e:65:00:d9:c8:56:24:c8:36:40:d5:34:
                    14:ef:a7:76:14:ba:ba:f9:d5:78:c5:76:89:7d:b0:
                    c1:c8:8d:2f:2e:de:aa:d8:ca:c1:ad:75:d3:8b:9e:
                    09:94:e0:4f:f7:59:f4:32:89:73:cf:c2:25:2e:ab:
                    6b:42:b4:db:db:e4:2a:b9:7f:0e:20:98:e5:aa:53:
                    c0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:62:56:3F:C9:54:5A:3C:14:85:E7:FF:E2:B1:EA:B5:22:79:B8:D7
            X509v3 Authority Key Identifier:
                keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230392e3232332e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.209.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:88:8d:90:f9:32:53:9f:a5:e2:e6:b8:fb:c8:30:9a:75:34:
         3e:db:90:27:34:9a:4b:70:a8:05:99:5b:1e:cb:e3:79:42:de:
         0e:45:cf:bf:46:da:56:ac:bf:3e:61:b4:54:29:27:71:aa:cc:
         9a:28:e7:20:52:f1:8c:bf:8e:75:c6:fd:3c:70:12:ff:b3:5f:
         6a:89:e7:40:ba:34:f2:36:8d:63:63:82:89:fd:e7:2d:40:38:
         72:0d:cf:4f:a0:0b:04:36:e2:48:4b:0b:cc:d4:e3:cd:25:2e:
         42:33:bd:a6:a2:e6:19:ff:e5:1f:eb:6a:2e:87:85:33:a6:c7:
         20:1f:91:d5:f2:9b:f5:b5:1c:ca:2c:b8:96:bc:b8:93:e2:68:
         20:ab:ed:0a:e7:6b:cd:15:3f:22:18:7c:31:b9:a0:7a:cb:e9:
         f4:e9:40:b6:56:57:92:b3:67:55:2f:0f:bc:fc:17:b3:0d:6a:
         29:f2:59:2f:2e:f1:73:66:d2:c4:32:16:65:48:fe:aa:06:23:
         b3:8a:31:f6:0d:12:a3:f3:82:ae:3a:9e:32:0c:d3:86:11:c9:
         39:b5:f1:55:9a:b4:c1:99:aa:1e:76:72:a1:f9:44:65:00:36:
         26:68:68:c8:e0:ff:5d:a3:f2:9c:65:3b:6c:4a:fa:3a:37:9a:
         9f:ce:83:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----