Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231392e3134322e302f32342d3332203d3e203531313637.roa
File:                     3138352e3231392e3134322e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          S0Z1Q/lXDfyDex03QGtyI+rqyXfSGjzegs3Ys3yBKOA=
Subject key identifier:   8C:DC:23:A2:62:CB:92:BC:3D:76:DC:37:39:0F:AE:2F:67:B5:92:49
Certificate issuer:       /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial:       78EB3B9E4974D6F44D208435752CF56FEF709995
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231392e3134322e302f32342d3332203d3e203531313637.roa
Signing time:             Mon 27 Mar 2023 08:27:18 +0000
ROA not before:           Mon 27 Mar 2023 08:22:18 +0000
ROA not after:            Mon 25 Mar 2024 08:27:18 +0000
asID:                     51167
IP address blocks:        185.219.142.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:eb:3b:9e:49:74:d6:f4:4d:20:84:35:75:2c:f5:6f:ef:70:99:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
        Validity
            Not Before: Mar 27 08:22:18 2023 GMT
            Not After : Mar 25 08:27:18 2024 GMT
        Subject: CN=8CDC23A262CB92BC3D76DC37390FAE2F67B59249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:47:07:0d:cf:09:30:78:dc:e2:95:d1:c6:98:
                    da:4b:c3:c4:d5:1a:03:40:34:3e:c6:f1:20:3d:c6:
                    8f:fb:c0:19:5f:df:30:45:02:b5:1e:83:6f:29:a5:
                    9e:98:95:22:ea:7c:a7:f0:cd:d1:f7:72:6b:ec:4a:
                    6f:14:6e:76:f2:35:5f:6b:22:5b:41:68:0b:ff:2d:
                    5f:8a:00:92:6e:13:46:0a:f6:50:30:ce:60:2f:8b:
                    d2:31:93:b3:fa:d5:43:e3:10:81:48:9d:21:b6:50:
                    5c:21:e1:87:2c:fc:fb:4a:1a:fd:c9:e4:88:fa:a6:
                    8d:c4:d2:c5:fa:88:74:f9:9d:11:8a:ec:cd:43:3f:
                    b7:22:21:4f:45:da:bb:bb:14:01:ef:40:5c:ed:b2:
                    53:8c:5f:32:a2:bf:61:19:3e:64:28:16:5a:82:b6:
                    f5:68:08:7f:7c:84:36:af:23:ae:84:10:cb:d7:77:
                    5a:14:52:2c:97:f5:68:9c:5c:b8:a6:f3:2e:0f:16:
                    df:f6:16:ef:ec:91:b0:03:2e:d6:09:51:ce:0d:90:
                    60:9c:ca:5e:9b:5d:79:24:8f:0c:98:a2:a8:98:c2:
                    e0:ec:25:0d:fa:56:ca:ca:cc:9b:36:1d:99:d7:20:
                    1d:f1:da:e9:75:17:79:05:c7:24:ac:e0:35:d5:54:
                    b4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:DC:23:A2:62:CB:92:BC:3D:76:DC:37:39:0F:AE:2F:67:B5:92:49
            X509v3 Authority Key Identifier:
                keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231392e3134322e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.219.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:1d:15:f4:5e:1d:c1:c4:57:74:c2:9d:8d:a1:a1:2c:ff:66:
         5c:e4:b9:06:b8:bb:32:6f:7d:c2:21:23:f6:12:a9:b9:8b:c7:
         38:63:22:3d:25:d9:29:47:29:99:2c:b9:76:97:dc:6f:28:0b:
         e7:99:03:71:9d:a8:cc:17:22:8b:e4:55:cf:96:ab:2b:8e:69:
         29:26:1b:84:ae:d2:60:4a:52:9f:6a:93:37:6d:29:c6:a5:b8:
         ec:28:ac:02:e3:60:a2:27:66:76:cc:55:4f:0b:96:77:3c:00:
         96:17:24:8d:fb:33:38:b3:e7:c0:67:c8:2a:9a:d2:86:bc:9c:
         2b:94:bd:9d:e1:f5:e9:28:b9:05:11:26:5f:3c:f2:dd:1a:ec:
         11:fa:48:5d:b0:04:1f:bb:d6:dc:1a:49:9d:dd:9c:c1:40:e1:
         94:d8:33:e4:f6:f0:95:45:d1:7d:5f:bd:e7:9e:ff:76:4d:3f:
         2b:7c:a8:e0:04:0a:c8:8a:a5:b6:36:1e:9c:e8:73:ef:31:69:
         ff:63:26:d2:71:e7:c4:eb:98:54:53:d9:b4:e6:0a:e3:e3:a8:
         2b:1f:d1:74:9c:eb:38:fb:c4:67:49:3f:16:28:89:a9:42:0a:
         22:4a:00:87:6c:22:e5:26:fa:2b:8e:47:7b:1e:e8:1c:c2:ae:
         1d:7e:5c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----