Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231372e3132362e302f32332d3332203d3e203531313637.roa
File:                     3138352e3231372e3132362e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier:          wn9yrmvgZU+GfcNo1YgYKI88+GgGswjYOGLaWMCl/i0=
Subject key identifier:   1D:8E:97:D4:4C:15:4C:7D:93:A6:B4:CE:B2:88:11:7F:42:23:C2:33
Certificate issuer:       /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial:       246E0DCD23EBB1562B6BB3397168C317C9E89658
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231372e3132362e302f32332d3332203d3e203531313637.roa
Signing time:             Mon 27 Mar 2023 08:27:13 +0000
ROA not before:           Mon 27 Mar 2023 08:22:13 +0000
ROA not after:            Mon 25 Mar 2024 08:27:13 +0000
asID:                     51167
IP address blocks:        185.217.126.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:6e:0d:cd:23:eb:b1:56:2b:6b:b3:39:71:68:c3:17:c9:e8:96:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
        Validity
            Not Before: Mar 27 08:22:13 2023 GMT
            Not After : Mar 25 08:27:13 2024 GMT
        Subject: CN=1D8E97D44C154C7D93A6B4CEB288117F4223C233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bf:1f:2f:32:3e:a9:49:e9:bf:a6:24:6a:c2:
                    85:48:46:7b:e7:a1:14:f8:05:ed:6a:e0:90:16:ed:
                    52:34:77:49:9a:29:98:e6:b3:44:b7:97:f1:04:10:
                    d9:81:94:15:cd:0a:36:3d:b6:2b:47:e5:17:01:48:
                    20:fe:42:e4:5f:4c:98:28:f9:b3:e9:a7:bd:c9:72:
                    65:c7:15:b7:41:f1:7e:17:a0:f2:88:ac:f9:9d:78:
                    ca:b5:ad:c8:03:dd:8a:a5:b3:9a:08:e8:ca:64:22:
                    97:38:e2:51:5d:49:34:26:bf:aa:9e:75:ab:83:79:
                    79:38:fd:ce:59:18:e9:10:d6:d2:cd:d2:fe:62:ee:
                    e2:df:f9:26:d7:6a:02:d2:ee:07:a5:81:ca:5e:67:
                    ef:19:2a:ed:47:0e:e1:73:25:67:dd:2b:95:10:c9:
                    b1:1f:0b:5e:09:d9:9b:f7:bc:ca:b4:54:17:02:86:
                    1b:71:de:6e:54:fb:9d:8d:cf:f4:60:67:e7:d4:94:
                    00:5e:1a:f6:cd:0e:0a:9b:97:52:9f:38:b3:9b:7c:
                    4d:8c:11:82:34:cf:2a:57:42:7d:cf:ba:42:d0:f3:
                    50:56:3a:a3:09:8b:cb:29:b5:64:d6:91:a9:cc:15:
                    4c:ab:60:52:d3:5b:ee:18:1d:5e:62:56:5c:f1:7e:
                    46:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:8E:97:D4:4C:15:4C:7D:93:A6:B4:CE:B2:88:11:7F:42:23:C2:33
            X509v3 Authority Key Identifier:
                keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231372e3132362e302f32332d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.217.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:48:a6:d5:6c:ee:14:26:b8:3d:31:8e:3a:54:d1:4e:69:06:
         9a:94:a7:2c:64:43:25:f1:44:31:05:6a:49:02:9a:d5:cb:38:
         c5:de:ac:d6:27:a2:54:c0:6c:b3:03:98:2f:e6:ac:dd:0e:ca:
         0a:e9:39:69:71:20:3c:06:92:fb:fc:13:c2:99:a3:d8:78:c4:
         56:89:69:81:c4:e3:78:15:46:f2:0a:8b:06:f6:30:9a:69:c5:
         c9:1a:1e:20:90:65:9e:75:64:79:ba:da:cc:ff:50:ab:56:d6:
         8f:2c:a9:83:eb:37:ea:9b:aa:51:6c:bb:77:c5:1f:cb:2e:15:
         b0:63:bc:81:47:0d:6d:23:7c:31:84:4e:c7:dc:1d:35:68:a4:
         18:5b:a7:6e:8a:d9:ff:44:25:41:45:1e:f1:63:dd:44:3c:b6:
         aa:6f:11:ee:fc:d6:3b:24:ad:e7:54:04:2b:04:06:5d:5d:00:
         99:bb:9b:a2:db:14:ff:36:a3:7b:79:1e:e7:92:e2:a4:6d:a0:
         f5:7b:63:79:1e:84:7d:b4:fe:9d:a6:2d:27:ed:9e:f0:b4:e1:
         ce:86:34:59:f2:32:cf:eb:9c:99:b7:7b:27:11:df:75:d3:d6:
         9d:77:c2:1a:58:4f:9b:d4:aa:c5:c7:57:3d:13:57:e2:8f:62:
         b0:fe:fd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----