Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231382e3132362e302f32342d3332203d3e203531313637.roa
File:                     3138352e3231382e3132362e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          eAlS9qN2lwzh3ZArYCANliGwD9HRxmdHKo8L0rW+OlU=
Subject key identifier:   D7:96:40:D1:67:98:6A:B7:F5:7F:8F:87:2C:F5:35:B5:1E:9E:11:8F
Certificate issuer:       /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial:       1628C9BEA851E94081609784D5384E49C9F26DB2
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231382e3132362e302f32342d3332203d3e203531313637.roa
Signing time:             Mon 27 Mar 2023 08:27:23 +0000
ROA not before:           Mon 27 Mar 2023 08:22:23 +0000
ROA not after:            Mon 25 Mar 2024 08:27:23 +0000
asID:                     51167
IP address blocks:        185.218.126.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:28:c9:be:a8:51:e9:40:81:60:97:84:d5:38:4e:49:c9:f2:6d:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
        Validity
            Not Before: Mar 27 08:22:23 2023 GMT
            Not After : Mar 25 08:27:23 2024 GMT
        Subject: CN=D79640D167986AB7F57F8F872CF535B51E9E118F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:52:75:a2:ed:c9:90:91:35:e0:8c:e6:2e:07:
                    cd:cb:a6:f3:b0:20:4c:b5:ef:5b:88:b5:c6:9d:9c:
                    a7:7e:de:5d:de:35:87:c1:35:99:5c:14:43:03:ca:
                    ce:e4:bd:00:8f:4a:dc:a3:ae:fb:b6:31:de:0e:f0:
                    a8:8b:de:ce:ef:d3:f2:39:95:fc:0d:3d:0d:19:9b:
                    31:26:31:23:66:41:9b:4f:d9:49:64:8c:48:92:de:
                    e7:a2:67:b4:34:3b:5b:92:bc:d6:ed:2e:51:53:3a:
                    e8:40:80:65:b6:93:a0:c2:c0:72:02:18:d6:ca:87:
                    f0:89:d4:17:2f:4b:75:c3:e0:2e:09:1b:4c:df:c9:
                    7b:c6:1c:87:be:40:7c:3c:d9:75:fb:2e:2b:05:27:
                    b2:20:b8:18:e9:5f:31:e5:5e:ba:c8:fa:26:8b:5a:
                    73:f9:eb:a9:4b:d9:e3:3c:43:06:9d:2e:80:26:99:
                    73:5b:93:2b:66:74:4b:83:c2:f1:6f:9b:80:cf:f4:
                    dc:6e:42:d6:4e:86:7e:f7:18:a8:71:49:f6:7a:98:
                    37:15:b3:43:50:99:c0:58:2c:89:d7:2c:d7:71:74:
                    ca:ea:23:6c:95:78:c2:42:57:3d:a0:57:7b:c1:1c:
                    b7:c1:67:47:29:29:f1:35:7f:b6:04:1a:e4:f7:67:
                    50:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:96:40:D1:67:98:6A:B7:F5:7F:8F:87:2C:F5:35:B5:1E:9E:11:8F
            X509v3 Authority Key Identifier:
                keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231382e3132362e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:75:d0:d8:33:73:44:34:03:d4:b4:63:08:24:fb:24:68:28:
         aa:a4:99:50:5b:b6:d7:3d:61:8b:a3:9d:18:d2:0f:f1:4e:73:
         04:1d:61:e9:d5:82:45:30:2d:df:18:c2:0a:a2:c5:b1:6f:58:
         8a:e9:b3:34:cd:55:c7:ed:d6:e5:a6:83:57:8d:75:41:83:7c:
         61:91:a1:c4:b1:ad:a3:10:a0:aa:1b:6d:23:cb:c2:9b:8f:9f:
         97:99:f7:78:94:c3:4f:e4:ff:24:c6:ad:05:47:08:b5:ef:b2:
         e6:b2:8c:24:81:62:20:11:cb:9c:20:84:d9:46:14:4e:ec:8d:
         96:94:c2:10:88:7e:fe:00:fd:2c:3a:4d:bf:7b:9d:d3:a7:d4:
         2a:2e:06:7e:4b:4f:7c:64:6d:47:fe:08:0a:b7:81:ce:35:39:
         ba:38:6e:c0:bc:b8:3d:c2:1b:12:88:a7:9a:4f:a1:fd:43:2b:
         78:1b:18:5e:10:6a:0d:1c:6a:ca:2f:78:74:f8:5a:47:c7:a6:
         8b:a7:7a:d7:7d:cc:37:0e:09:af:d9:2c:ce:17:4e:1b:23:e7:
         83:9f:28:c4:43:42:2b:a8:c6:da:cf:8e:72:26:b3:68:1a:df:
         76:82:b6:ab:61:2d:89:16:86:25:55:35:8f:2d:e1:d6:1e:40:
         f7:54:2d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----