Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231342e3133342e302f32332d3332203d3e203531313637.roa
File:                     3138352e3231342e3133342e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier:          AgCrjCqj9oAZcZMwMaVcZLjhhVYT38C2a+TaA/g6NNo=
Subject key identifier:   93:28:5B:D8:9A:8C:50:DB:94:EC:AD:C5:F8:3C:F0:19:49:FF:50:D4
Certificate issuer:       /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial:       30BC7C63929906D149723AD52AD6DC65A57BF932
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231342e3133342e302f32332d3332203d3e203531313637.roa
Signing time:             Mon 27 Mar 2023 08:27:12 +0000
ROA not before:           Mon 27 Mar 2023 08:22:12 +0000
ROA not after:            Mon 25 Mar 2024 08:27:12 +0000
asID:                     51167
IP address blocks:        185.214.134.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:bc:7c:63:92:99:06:d1:49:72:3a:d5:2a:d6:dc:65:a5:7b:f9:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
        Validity
            Not Before: Mar 27 08:22:12 2023 GMT
            Not After : Mar 25 08:27:12 2024 GMT
        Subject: CN=93285BD89A8C50DB94ECADC5F83CF01949FF50D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:73:92:0d:de:44:46:84:ec:15:bc:17:36:4e:
                    4e:f7:b6:a7:57:cb:d1:07:28:dd:b3:27:35:28:c5:
                    78:9f:05:fe:3e:d2:06:18:1f:0c:b1:74:83:e6:73:
                    25:18:f1:84:db:a2:95:de:0c:7c:eb:42:7c:9b:10:
                    3b:30:0d:a9:84:55:4e:e9:6b:1e:fc:56:ff:13:0f:
                    81:1c:7d:65:ce:d8:3a:53:07:e8:35:cc:7b:7c:cf:
                    00:62:81:87:f5:99:ca:8a:17:3f:fc:f9:9b:df:16:
                    9a:4f:22:a2:98:e2:f0:6e:47:e8:70:15:af:d0:5f:
                    91:93:64:26:07:87:34:d1:2c:5a:e7:09:d0:5d:2a:
                    cf:f8:ad:62:e0:56:17:17:bd:2a:e4:26:46:61:30:
                    81:32:51:cd:9d:56:ec:dd:3f:a6:57:10:09:10:84:
                    3e:71:5d:8c:24:d7:1e:e7:82:d3:5e:4c:fe:71:98:
                    75:ef:33:fc:38:cc:cc:2a:0b:ce:a3:7c:28:94:29:
                    14:9a:0b:22:2e:f3:cf:83:c3:d7:3e:8c:7f:c6:89:
                    60:59:1d:f3:83:97:57:fd:49:71:24:d7:64:48:f4:
                    71:48:ee:44:3c:95:15:07:c8:ac:d3:b3:5d:1b:5c:
                    87:f6:69:7b:db:6a:f4:8d:12:b8:90:23:08:ed:01:
                    bd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:28:5B:D8:9A:8C:50:DB:94:EC:AD:C5:F8:3C:F0:19:49:FF:50:D4
            X509v3 Authority Key Identifier:
                keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231342e3133342e302f32332d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.214.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:1b:26:31:0b:d3:94:da:20:01:72:3e:1f:33:67:73:36:a9:
         6a:61:be:5b:2a:0f:74:9a:3d:4d:4e:39:29:bf:9c:2d:b3:a3:
         dc:2a:27:fb:c9:f7:12:30:1e:b9:a1:4b:7f:46:ed:21:13:e2:
         71:99:7b:e3:dc:5c:96:3e:8d:a6:dc:74:d7:13:cd:00:3f:67:
         85:b2:14:62:6a:ba:b3:a8:b7:a0:a6:d1:48:ad:bb:23:83:3a:
         01:80:38:8f:e3:c2:db:2d:1f:59:85:78:12:a2:9b:67:89:12:
         3e:cd:90:29:53:13:80:18:bf:03:2c:6d:e8:27:78:df:39:47:
         3f:6c:eb:e3:73:75:27:3b:26:fb:a6:ef:16:a5:f9:ce:d2:9c:
         10:45:8a:02:d7:49:ff:0a:d4:77:91:a4:4f:7d:11:b4:e5:03:
         19:ba:20:95:a8:86:4b:82:03:b4:8b:33:5c:ed:3d:c0:fe:24:
         2f:1b:ba:80:95:35:a9:fc:3c:be:99:94:6d:d5:69:70:7c:f9:
         f3:d8:18:98:f4:dc:46:f1:6b:fc:a7:35:11:ac:83:65:69:4f:
         82:9b:67:fa:c3:df:04:9a:23:96:8e:c4:7d:91:db:8a:67:00:
         92:2c:82:fc:b1:2d:6e:64:12:29:6e:65:14:62:6b:fb:96:15:
         a8:b9:9e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----