Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231312e362e302f32342d3332203d3e203531313637.roa
File:                     3138352e3231312e362e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          3VMuX0e5g+nWwN6YcJT/K3LlYshD84C3JkSAX+2eL54=
Subject key identifier:   CB:8D:5C:2D:D5:13:C0:66:9B:44:CD:FE:AB:39:EE:D5:E6:7C:82:95
Certificate issuer:       /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial:       68E80C4704EA986145B4B2F45025E76D88984312
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231312e362e302f32342d3332203d3e203531313637.roa
Signing time:             Mon 27 Mar 2023 08:27:22 +0000
ROA not before:           Mon 27 Mar 2023 08:22:22 +0000
ROA not after:            Mon 25 Mar 2024 08:27:22 +0000
asID:                     51167
IP address blocks:        185.211.6.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:e8:0c:47:04:ea:98:61:45:b4:b2:f4:50:25:e7:6d:88:98:43:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
        Validity
            Not Before: Mar 27 08:22:22 2023 GMT
            Not After : Mar 25 08:27:22 2024 GMT
        Subject: CN=CB8D5C2DD513C0669B44CDFEAB39EED5E67C8295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:89:5f:7b:2f:89:97:1c:6e:1e:ed:19:ea:44:
                    b1:c3:64:0c:62:7a:f8:2a:b8:56:a8:3a:cb:b9:56:
                    45:90:b9:93:89:22:9f:a7:cd:d9:10:6e:74:7a:b8:
                    cc:d8:fe:20:f3:ac:40:63:8a:d4:58:d8:91:03:60:
                    76:9e:30:f1:de:15:81:d0:8f:ce:d5:ee:ed:5f:4a:
                    9b:fb:bc:95:93:74:39:24:80:48:11:a3:fa:f4:2e:
                    22:a4:9e:64:77:d4:e5:64:0f:28:2b:0f:87:67:22:
                    c9:40:30:e7:09:17:71:ee:06:57:a7:67:06:df:c0:
                    3a:96:23:df:b5:91:45:9b:66:56:33:3d:f9:23:f8:
                    b5:81:48:bd:cc:40:4f:95:b6:41:b2:6c:94:8c:fe:
                    59:1a:40:cc:0f:03:db:b4:d5:a9:4c:9d:ba:39:ce:
                    98:ab:6a:fc:a8:73:35:2b:7c:87:2b:a2:da:02:4f:
                    52:d6:fb:c2:d7:01:a4:c0:5a:c4:9e:a1:56:39:95:
                    ba:4b:f9:5e:b4:10:e3:d4:ae:05:8d:51:bf:07:40:
                    df:7b:5a:d9:73:18:08:bc:49:0b:bd:2f:49:6d:ae:
                    07:ec:90:32:42:43:e9:1f:82:6a:52:7b:83:02:b4:
                    a3:32:ae:35:42:ba:de:a8:1f:a2:9f:da:b6:a9:6f:
                    95:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8D:5C:2D:D5:13:C0:66:9B:44:CD:FE:AB:39:EE:D5:E6:7C:82:95
            X509v3 Authority Key Identifier:
                keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231312e362e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.211.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:49:b0:82:61:97:92:7d:76:9d:a2:16:e5:02:9c:af:3a:4a:
         31:f7:c0:8d:b5:ad:f4:b1:2e:64:71:97:c5:0e:f1:30:d3:75:
         a0:20:44:fb:bf:ec:0f:fd:90:13:f2:38:14:a9:b5:11:ed:34:
         9b:e0:15:07:58:43:41:d6:f8:97:c4:5f:ca:f1:95:9f:32:f5:
         14:c8:24:c7:d0:fa:7f:99:3d:90:ef:47:f0:fd:c2:93:08:91:
         8a:68:05:d7:9c:07:30:73:44:8c:5e:19:3b:56:2c:6b:cb:f4:
         53:4b:4f:2e:18:ee:ff:8c:ff:2a:0a:7d:fb:89:6f:f7:cd:57:
         8a:28:b0:99:b6:98:0d:2f:22:89:2d:1c:fb:6b:fe:3c:34:6b:
         b9:57:d6:ba:c6:a8:c1:44:2d:0b:c3:76:4b:22:1a:fa:a6:6f:
         d9:04:65:dc:36:e4:a6:a4:f3:9c:a9:a9:b6:36:89:8a:a2:60:
         da:26:e5:09:4a:af:20:58:e2:9b:0a:d8:e6:ce:eb:39:b6:8f:
         d0:96:b3:05:94:ad:2f:c9:bc:c4:7f:00:17:13:8e:3b:c5:60:
         a5:68:44:63:32:67:c5:0c:fb:51:cc:35:28:b6:4f:52:04:ce:
         98:e7:8d:e8:e0:a4:6f:d1:75:a8:75:7c:95:33:ad:af:8e:c6:
         e7:61:1a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----