Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3139342e33322e3233352e302f32342d3332203d3e20313336373837.roa
File:                     3139342e33322e3233352e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          piwMqGy6SbRI8ADs+Y79wYsTv0LLUFXn1XNZEv5v8C8=
Subject key identifier:   31:66:62:04:E4:8C:33:53:0A:9F:AF:32:24:F8:24:7C:8C:24:18:39
Certificate issuer:       /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial:       2AA30199BADA844631ADBC0CCDE8935C29264653
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3139342e33322e3233352e302f32342d3332203d3e20313336373837.roa
Signing time:             Mon 27 Mar 2023 08:27:25 +0000
ROA not before:           Mon 27 Mar 2023 08:22:25 +0000
ROA not after:            Mon 25 Mar 2024 08:27:25 +0000
asID:                     136787
IP address blocks:        194.32.235.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a3:01:99:ba:da:84:46:31:ad:bc:0c:cd:e8:93:5c:29:26:46:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
        Validity
            Not Before: Mar 27 08:22:25 2023 GMT
            Not After : Mar 25 08:27:25 2024 GMT
        Subject: CN=31666204E48C33530A9FAF3224F8247C8C241839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d6:f2:6c:e6:83:9a:45:2a:74:0d:31:d7:b8:
                    73:1b:c2:2a:bf:a2:b6:e0:28:e6:01:d0:b3:55:c5:
                    22:7b:e1:e8:da:b0:87:ab:b6:6c:4d:cf:3f:f8:92:
                    c8:2c:1b:c3:a0:62:5f:f5:9b:f6:e9:cc:37:97:17:
                    37:c5:19:22:91:c7:6b:a6:68:09:f6:6d:87:3b:b8:
                    60:c0:5a:fb:a9:72:bc:31:32:e5:f4:a4:27:84:a8:
                    bc:e1:13:3c:b2:01:71:f6:8c:65:25:72:3f:b0:67:
                    ae:4c:9d:aa:44:a0:f7:82:a2:42:35:b5:8c:83:ca:
                    bc:fb:bf:aa:88:4c:6a:fc:78:2a:26:e3:cf:29:71:
                    af:21:4f:45:44:75:74:43:21:f4:d5:77:7c:64:c8:
                    3d:fb:7f:b3:8d:e8:ed:7e:9f:fa:da:3c:3b:44:8b:
                    2d:4f:62:4f:27:81:16:83:be:80:7b:ec:f1:fc:aa:
                    a3:1b:a7:e5:ac:91:f6:62:46:ad:ca:b7:6c:77:40:
                    b2:f1:14:27:e9:4d:83:8a:8c:31:ab:8c:5f:c8:0a:
                    4b:36:b8:70:89:c5:07:f7:9f:5d:f0:e2:6e:22:48:
                    68:0d:c7:3a:4d:9b:af:39:73:7b:16:ed:fc:e6:df:
                    56:0e:84:7a:20:dc:f9:4a:b3:eb:a8:96:02:0a:88:
                    2c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:66:62:04:E4:8C:33:53:0A:9F:AF:32:24:F8:24:7C:8C:24:18:39
            X509v3 Authority Key Identifier:
                keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3139342e33322e3233352e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.32.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:8b:17:03:11:9c:33:ba:74:d2:82:9f:f2:36:fc:88:87:d9:
         75:f4:a7:87:5f:97:e8:33:12:e5:1c:60:64:15:23:be:0d:be:
         67:24:52:4e:27:9b:db:3e:91:16:93:a8:21:38:c6:0e:cc:bc:
         f9:9a:66:3e:c2:ad:88:0e:cc:98:90:af:e4:17:9c:24:ba:40:
         6e:76:37:d2:a7:04:d8:53:49:68:23:06:78:d9:d4:41:09:cf:
         90:c2:8d:4c:d2:c4:d0:71:6a:09:85:99:b1:62:11:4d:37:4f:
         13:8b:94:17:29:ba:37:e7:9b:09:98:5a:9f:6d:97:5d:70:de:
         7e:74:b8:be:3c:10:0b:3a:de:90:fd:df:28:72:3f:24:d3:54:
         a8:e0:da:b8:16:ce:c5:75:ab:c8:5f:a4:f9:c6:b3:78:7b:7a:
         69:c3:de:aa:55:11:06:cf:19:49:86:80:46:7e:bc:17:04:29:
         91:f6:b9:09:aa:ba:67:43:e2:89:8a:b8:f3:ce:a2:90:ac:3f:
         1a:f3:ec:ba:80:97:94:7e:02:71:a2:ca:7c:58:86:5c:b0:a9:
         16:a0:f0:c4:a7:41:da:37:5d:7a:06:6f:72:c3:1f:05:b2:e7:
         d9:f0:16:3e:01:11:b1:e3:17:16:e6:9f:8b:85:d3:f9:45:28:
         5a:2c:82:f9
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUKqMBmbrahEYxrbwMzeiTXCkmRlMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmI4YTJjODhjNTI1NTRkNDlmNmI3OTAxMzdjM2JhYjY4
N2IyZjk1NjAeFw0yMzAzMjcwODIyMjVaFw0yNDAzMjUwODI3MjVaMDMxMTAvBgNV
BAMTKDMxNjY2MjA0RTQ4QzMzNTMwQTlGQUYzMjI0RjgyNDdDOEMyNDE4MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ1vJs5oOaRSp0DTHXuHMbwiq/
orbgKOYB0LNVxSJ74ejasIertmxNzz/4ksgsG8OgYl/1m/bpzDeXFzfFGSKRx2um
aAn2bYc7uGDAWvupcrwxMuX0pCeEqLzhEzyyAXH2jGUlcj+wZ65MnapEoPeCokI1
tYyDyrz7v6qITGr8eCom488pca8hT0VEdXRDIfTVd3xkyD37f7ON6O1+n/raPDtE
iy1PYk8ngRaDvoB77PH8qqMbp+WskfZiRq3Kt2x3QLLxFCfpTYOKjDGrjF/ICks2
uHCJxQf3n13w4m4iSGgNxzpNm685c3sW7fzm31YOhHog3PlKs+uolgIKiCypAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUMWZiBOSMM1MKn68yJPgkfIwkGDkwHwYDVR0j
BBgwFoAUu4osiMUlVNSfa3kBN8O6toey+VYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzYvQkI4QTJDODhDNTI1NTRENDlGNkI3OTAxMzdDM0JBQjY4N0IyRjk1Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3U0b3NpTVVsVk5TZmEza0JOOE82dG9l
eS1WWS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzYvMzEzOTM0MmUzMzMyMmUzMjMz
MzUyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADCIOswDQYJKoZIhvcNAQELBQADggEBAH6LFwMRnDO6dNKCn/I2/IiH2XX0p4df
l+gzEuUcYGQVI74NvmckUk4nm9s+kRaTqCE4xg7MvPmaZj7CrYgOzJiQr+QXnCS6
QG52N9KnBNhTSWgjBnjZ1EEJz5DCjUzSxNBxagmFmbFiEU03TxOLlBcpujfnmwmY
Wp9tl11w3n50uL48EAs63pD93yhyPyTTVKjg2rgWzsV1q8hfpPnGs3h7emnD3qpV
EQbPGUmGgEZ+vBcEKZH2uQmqumdD4omKuPPOopCsPxrz7LqAl5R+AnGiynxYhlyw
qRag8MSnQdo3XXoGb3LDHwWy59nwFj4BEbHjFxbmn4uF0/lFKFosgvk=
-----END CERTIFICATE-----