Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231382e3132372e302f32342d3332203d3e20313336373837.roa
File:                     3138352e3231382e3132372e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          QYHHmdVo5A6NPfF2Fqula+6KeZZRImjy396HCQa7y4w=
Subject key identifier:   15:BC:71:FF:FD:CC:F8:D0:7E:C8:28:E5:49:06:38:D3:21:FF:28:9F
Certificate issuer:       /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial:       69F1C7CA1B6924AF39D3AB3AE97888DE48E44F38
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231382e3132372e302f32342d3332203d3e20313336373837.roa
Signing time:             Mon 27 Mar 2023 08:27:15 +0000
ROA not before:           Mon 27 Mar 2023 08:22:15 +0000
ROA not after:            Mon 25 Mar 2024 08:27:15 +0000
asID:                     136787
IP address blocks:        185.218.127.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f1:c7:ca:1b:69:24:af:39:d3:ab:3a:e9:78:88:de:48:e4:4f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
        Validity
            Not Before: Mar 27 08:22:15 2023 GMT
            Not After : Mar 25 08:27:15 2024 GMT
        Subject: CN=15BC71FFFDCCF8D07EC828E5490638D321FF289F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b4:67:cf:53:f5:62:bb:98:9d:08:93:86:06:
                    6e:1f:aa:b4:51:98:2f:10:93:8d:c3:27:f3:4f:22:
                    6c:4d:78:29:8f:69:b5:f4:41:73:a0:7a:70:e7:4b:
                    70:cb:e3:9b:96:44:56:5c:d5:e8:65:86:ba:2c:e6:
                    94:f6:62:8d:0f:6c:65:12:16:8a:27:c1:7a:0b:9e:
                    d3:1c:b6:4f:40:12:8a:26:7e:d7:90:69:81:53:a3:
                    77:85:df:60:f3:a2:df:05:c6:0a:7a:83:11:f3:b3:
                    e2:73:da:0c:11:a3:79:dd:e9:f4:6a:36:75:e8:c7:
                    c5:e4:1d:95:d4:95:38:ef:44:32:54:b4:bc:19:05:
                    13:bd:b3:f4:e2:c2:6a:ba:1f:75:b7:cd:7d:ba:f1:
                    c4:60:85:d4:40:cb:a4:db:ca:50:51:37:55:9e:03:
                    61:65:dd:88:ea:db:19:60:60:22:19:2d:04:12:fc:
                    4c:dc:ac:fd:70:2d:28:84:c4:0d:c9:c8:28:7c:30:
                    7b:85:e7:1f:92:06:7e:53:72:81:b7:03:77:29:ed:
                    68:cc:d5:b6:55:9a:f2:7e:a4:6f:d6:a2:ca:04:7a:
                    8e:41:f9:f3:36:b5:04:42:20:29:9e:e0:37:df:66:
                    a6:7a:e9:fd:de:82:74:24:eb:bf:e4:60:0d:1f:4c:
                    12:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BC:71:FF:FD:CC:F8:D0:7E:C8:28:E5:49:06:38:D3:21:FF:28:9F
            X509v3 Authority Key Identifier:
                keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231382e3132372e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:c9:50:5d:ed:43:be:a8:8d:02:17:1d:df:a2:57:f7:61:4d:
         73:b6:39:13:a0:29:89:c0:c1:30:f4:45:ac:59:75:67:c3:c7:
         24:48:cb:99:57:06:b0:c2:6c:b8:cc:42:68:4a:fc:ca:d8:25:
         27:d2:21:34:59:d8:9c:40:18:99:34:37:7a:70:dd:9b:50:6f:
         91:0d:71:fc:e0:19:2f:fc:66:ea:ba:31:f5:01:4a:fd:c2:9b:
         b6:a8:1b:9b:16:54:72:7e:2a:69:c3:a7:6b:d2:47:51:22:42:
         2a:f3:e0:e3:40:97:8b:44:c1:c9:90:56:a4:3e:19:38:8a:83:
         c8:db:cb:11:c9:a6:95:57:fb:37:80:24:35:3d:4c:7a:47:60:
         96:34:b8:3e:9b:9f:d4:71:6a:8f:cd:f3:1b:41:81:41:a9:2c:
         99:37:45:24:6e:df:09:11:3e:90:4d:0b:e9:67:ba:2f:fb:66:
         68:37:2d:62:97:b3:fe:65:35:ba:c1:f9:55:49:2e:ef:c7:82:
         6d:93:c9:14:79:1a:b0:4a:58:3d:6e:12:87:12:86:56:96:1d:
         89:37:ff:8e:7d:93:ed:f3:19:14:12:c8:4d:32:7f:95:75:84:
         bc:b9:19:c1:23:4b:c5:7e:e9:03:63:d7:7f:a9:8e:7f:33:1a:
         9b:e8:51:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----