Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3234312e3135312e302f32342d3332203d3e203531313637.roa
File:                     3138352e3234312e3135312e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          cdb0guDVjHFj6nl3M5oGV2vv7/cV026KCUCk6km2bXk=
Subject key identifier:   17:C4:D3:60:72:0E:72:EF:EE:1A:CB:5D:67:FB:B0:EF:32:88:4B:85
Certificate issuer:       /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial:       25ED51B64ED8E9C868D9F9E3305A7767F88D7478
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3234312e3135312e302f32342d3332203d3e203531313637.roa
Signing time:             Mon 27 Mar 2023 08:27:25 +0000
ROA not before:           Mon 27 Mar 2023 08:22:25 +0000
ROA not after:            Mon 25 Mar 2024 08:27:25 +0000
asID:                     51167
IP address blocks:        185.241.151.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ed:51:b6:4e:d8:e9:c8:68:d9:f9:e3:30:5a:77:67:f8:8d:74:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
        Validity
            Not Before: Mar 27 08:22:25 2023 GMT
            Not After : Mar 25 08:27:25 2024 GMT
        Subject: CN=17C4D360720E72EFEE1ACB5D67FBB0EF32884B85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3f:48:09:fb:c3:a4:89:c5:23:fa:8d:5e:91:
                    4a:f9:7d:7f:4b:36:71:da:a0:5d:5a:18:60:0a:ec:
                    df:36:77:b5:a0:e3:de:8d:04:7f:82:e0:a7:de:7c:
                    d8:54:7c:ee:0b:59:4b:9a:94:91:df:69:b1:70:a7:
                    ff:20:92:fd:37:ba:9f:dd:8d:7b:77:90:88:c4:95:
                    91:37:35:67:ff:b9:6d:f0:74:fd:2c:c4:e9:0d:d2:
                    c1:a6:f4:2a:f7:93:b0:c2:c2:e5:64:6f:a8:9a:e2:
                    7f:8d:a8:16:92:47:2b:ab:2b:d2:fe:86:10:54:9c:
                    d5:76:d9:b3:cb:bc:0d:f7:99:bc:78:ab:1a:f8:0a:
                    51:45:8b:38:cd:13:c6:55:7c:6c:7a:cb:ce:bd:72:
                    58:15:97:13:0e:0e:a0:1f:29:76:18:02:68:fc:df:
                    8d:8d:f1:e5:24:36:a0:77:8c:eb:85:95:9b:96:e8:
                    66:85:f5:52:13:d4:a3:da:69:17:0e:0a:6e:90:27:
                    42:45:09:ed:97:a2:79:c4:b2:60:3c:52:ef:14:07:
                    3a:26:61:73:31:00:1d:89:b8:f5:05:00:a1:71:39:
                    6b:51:15:41:df:26:b4:fa:a8:00:82:94:6d:ed:52:
                    34:42:19:5c:35:05:35:a1:95:26:96:3c:fa:a1:9d:
                    ff:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C4:D3:60:72:0E:72:EF:EE:1A:CB:5D:67:FB:B0:EF:32:88:4B:85
            X509v3 Authority Key Identifier:
                keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3234312e3135312e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.241.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:78:45:d6:04:51:b5:92:a3:77:6b:a1:7e:f0:30:66:5e:7b:
         b6:2b:5e:f4:09:44:a4:c4:f4:1f:94:ad:d5:fd:4e:ee:77:0b:
         77:1f:b4:4f:d1:64:2f:a3:b6:3f:85:dd:58:b9:d5:82:fd:d1:
         82:38:f8:60:a8:d1:e8:66:45:86:fb:72:7b:35:22:f5:5b:15:
         cc:a6:82:ae:f1:8f:3c:1e:c2:f6:f5:0d:0f:00:59:24:94:1d:
         67:0e:6f:84:a6:96:82:2e:4d:fd:2f:95:c7:23:a5:95:0e:98:
         b6:dc:9b:b3:92:f5:bb:a7:e0:b4:3a:02:49:c3:2f:2e:73:5f:
         bf:ee:e8:09:e5:7f:3d:b0:c7:fd:73:aa:54:41:f8:b8:ea:23:
         07:cf:15:0c:19:94:9c:ee:b8:ec:96:7d:cd:fe:c4:34:80:1a:
         70:72:b1:ec:49:8f:b0:00:84:ff:f3:c2:b6:0c:98:6f:2b:ba:
         75:6d:87:ab:19:a2:9d:2a:4c:77:10:59:b1:4f:7f:08:2b:20:
         8a:ea:18:25:e6:be:db:a7:03:25:7f:2c:7c:63:f7:45:cf:c7:
         0c:fc:15:23:49:da:0e:64:48:ee:97:f6:c8:5e:90:d4:08:3f:
         89:43:6e:98:f4:83:12:7a:9e:c3:33:8a:43:28:cc:89:55:f4:
         57:3e:c6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----