Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231382e3132342e302f32332d3332203d3e203531313637.roa
File:                     3138352e3231382e3132342e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier:          wHJ8sXLK9JPHx4NEVMMeeCT6MXw8YvW1sgP6//AHNps=
Subject key identifier:   BA:68:7C:32:41:61:F9:48:B2:46:B6:A1:E9:2F:58:84:E7:5A:07:F4
Certificate issuer:       /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial:       3C08914CDB51F8BFC8259E6E54252899BC93C981
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231382e3132342e302f32332d3332203d3e203531313637.roa
Signing time:             Mon 27 Mar 2023 08:27:12 +0000
ROA not before:           Mon 27 Mar 2023 08:22:12 +0000
ROA not after:            Mon 25 Mar 2024 08:27:12 +0000
asID:                     51167
IP address blocks:        185.218.124.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:08:91:4c:db:51:f8:bf:c8:25:9e:6e:54:25:28:99:bc:93:c9:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
        Validity
            Not Before: Mar 27 08:22:12 2023 GMT
            Not After : Mar 25 08:27:12 2024 GMT
        Subject: CN=BA687C324161F948B246B6A1E92F5884E75A07F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d7:83:64:af:79:6d:e4:ac:f2:df:6f:0e:42:
                    6d:4f:d9:7d:86:b1:a9:b9:65:63:ea:a2:c3:19:ba:
                    94:4b:c9:e5:4d:2d:4b:c9:fe:54:ce:06:64:a3:16:
                    2f:02:b8:8a:f5:35:8c:59:7a:12:52:a4:9f:93:4c:
                    12:f4:2c:31:11:bd:c0:ae:9a:8a:91:03:6e:7a:1c:
                    c4:7b:52:08:14:e7:87:5b:ea:30:9e:18:a3:df:24:
                    8f:ba:1a:54:52:0b:9f:db:87:60:87:47:a1:b9:1f:
                    8d:e1:d5:ee:c2:0a:b4:bc:fa:95:c7:a1:2d:90:43:
                    b4:79:d5:cc:91:ef:55:52:7e:72:cc:0d:ff:f4:d7:
                    3c:5f:7c:4e:7a:22:f3:21:53:6c:73:3c:4e:42:87:
                    1e:96:71:8f:a8:b4:e9:a7:cd:22:77:76:4e:d1:7a:
                    f9:5f:83:46:70:e3:8b:74:2d:e5:d8:9f:75:5d:c8:
                    aa:b2:44:f4:04:fa:a7:1f:34:c4:4e:ba:03:27:74:
                    b5:84:a5:7c:3d:2b:60:0d:df:84:89:a4:2c:33:f2:
                    55:39:31:c6:05:b2:6a:55:b8:39:99:55:b3:63:13:
                    d7:82:e5:af:5c:ec:2f:b8:58:49:55:a4:d2:7d:55:
                    84:36:a4:3a:e0:fd:48:66:93:24:3a:df:82:24:8b:
                    57:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:68:7C:32:41:61:F9:48:B2:46:B6:A1:E9:2F:58:84:E7:5A:07:F4
            X509v3 Authority Key Identifier:
                keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231382e3132342e302f32332d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:6f:2a:75:43:b8:31:6b:60:47:e5:d3:22:21:d6:19:99:33:
         6d:02:74:d6:ed:58:03:19:14:0a:23:a0:54:31:24:99:3a:34:
         28:8b:8b:4c:0b:0d:2b:c3:53:ae:92:76:06:3a:6e:91:6e:d0:
         d7:1d:1c:90:5f:d6:2b:73:e1:ea:ab:74:60:7a:09:89:a9:1e:
         47:82:69:b7:62:a1:2f:71:fb:75:b9:5c:83:d3:ff:50:85:52:
         33:b6:8c:97:3f:70:f4:7c:30:79:3c:37:b6:ba:9d:72:44:34:
         bd:d5:3e:ae:40:58:30:2b:3c:f4:8c:d4:1d:c9:0b:1d:8c:58:
         b2:de:00:80:e2:0d:19:5f:4e:a0:20:72:45:22:0e:09:08:41:
         e2:e0:0b:6d:4c:8e:68:35:61:ec:83:fa:e1:ca:58:74:6e:44:
         38:c5:43:82:24:f2:5e:48:f5:79:42:74:5a:9b:d2:cd:c3:18:
         c5:da:1a:75:d3:64:e5:c9:7f:fb:63:74:54:cf:1d:77:8f:27:
         76:97:c2:ba:6d:79:f4:9a:03:be:f9:8f:ee:0f:43:3c:1f:8e:
         7d:62:4d:34:14:b4:36:35:1a:42:5b:15:c2:09:c4:72:cf:c8:
         9c:ee:65:57:47:49:e5:fc:b1:f5:ea:a0:2f:4b:41:71:58:a9:
         f7:8a:74:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----