Route Origin Authorization

$ rpki-client -vvf rsync.rpki.blade.sh/repo/Blade/0/323430363a336263303a3a2f34302d3430203d3e20313430383934.roa
File:                     323430363a336263303a3a2f34302d3430203d3e20313430383934.roa (raw, json)
Hash identifier:          5zMGIgsbfrbtJ+N7lALxR+SyGQTyog1ppDtpxMWcDC8=
Subject key identifier:   5B:83:4A:98:B5:65:37:C4:94:A9:B7:94:D5:F1:13:84:A8:98:CE:D9
Certificate issuer:       /CN=A91510500000/serialNumber=407047ADB0ABA85AE234970052228E9B1F0239E2
Certificate serial:       149736F6A75FF97E7AEB2DD4B252111B4D86249F
Authority key identifier: 40:70:47:AD:B0:AB:A8:5A:E2:34:97:00:52:22:8E:9B:1F:02:39:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHBHrbCrqFriNJcAUiKOmx8COeI.cer
Subject info access:      rsync://rsync.rpki.blade.sh/repo/Blade/0/323430363a336263303a3a2f34302d3430203d3e20313430383934.roa
Signing time:             Tue 08 Mar 2022 13:24:00 +0000
ROA not before:           Tue 08 Mar 2022 13:19:00 +0000
ROA not after:            Tue 07 Mar 2023 13:24:00 +0000
asID:                     140894
IP address blocks:        2406:3bc0::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:97:36:f6:a7:5f:f9:7e:7a:eb:2d:d4:b2:52:11:1b:4d:86:24:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510500000/serialNumber=407047ADB0ABA85AE234970052228E9B1F0239E2
        Validity
            Not Before: Mar  8 13:19:00 2022 GMT
            Not After : Mar  7 13:24:00 2023 GMT
        Subject: CN=3082010A0282010100D340D32041756FFCFB46FB7EDDCC3E4712B95BCDD98BB9976ED1328E3C5F44D9B330403B5C1742C1855EE8A5DA5D599C8B74CD8ECE553AC6EE97378218E3A04F763D539C75A7B1CFE824AC2934A081371C6EF5AC2758A9C30DA664039C91CC8E739C287C66CBBC782ED89992900268BA96E40727CD5539B8DA6A1F632E97DFC31222A09530596763CA955FC2D97D4208E4AF72CF0C554AE91A3BC2F68281A023DF01A2E4C3B9460C86E59B8769BC8E8F81AADFB4AD0DD933986F7A5E7B328B67EA548B8EBF7C37E0B3D94DB74F386D43EFA857AEE576CDBED03B48B99EA85049D4EB1F90EF390795318212863D23F2EC07FCD54C3C75BBA1E3493D62CBEE2D530203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:40:d3:20:41:75:6f:fc:fb:46:fb:7e:dd:cc:
                    3e:47:12:b9:5b:cd:d9:8b:b9:97:6e:d1:32:8e:3c:
                    5f:44:d9:b3:30:40:3b:5c:17:42:c1:85:5e:e8:a5:
                    da:5d:59:9c:8b:74:cd:8e:ce:55:3a:c6:ee:97:37:
                    82:18:e3:a0:4f:76:3d:53:9c:75:a7:b1:cf:e8:24:
                    ac:29:34:a0:81:37:1c:6e:f5:ac:27:58:a9:c3:0d:
                    a6:64:03:9c:91:cc:8e:73:9c:28:7c:66:cb:bc:78:
                    2e:d8:99:92:90:02:68:ba:96:e4:07:27:cd:55:39:
                    b8:da:6a:1f:63:2e:97:df:c3:12:22:a0:95:30:59:
                    67:63:ca:95:5f:c2:d9:7d:42:08:e4:af:72:cf:0c:
                    55:4a:e9:1a:3b:c2:f6:82:81:a0:23:df:01:a2:e4:
                    c3:b9:46:0c:86:e5:9b:87:69:bc:8e:8f:81:aa:df:
                    b4:ad:0d:d9:33:98:6f:7a:5e:7b:32:8b:67:ea:54:
                    8b:8e:bf:7c:37:e0:b3:d9:4d:b7:4f:38:6d:43:ef:
                    a8:57:ae:e5:76:cd:be:d0:3b:48:b9:9e:a8:50:49:
                    d4:eb:1f:90:ef:39:07:95:31:82:12:86:3d:23:f2:
                    ec:07:fc:d5:4c:3c:75:bb:a1:e3:49:3d:62:cb:ee:
                    2d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:83:4A:98:B5:65:37:C4:94:A9:B7:94:D5:F1:13:84:A8:98:CE:D9
            X509v3 Authority Key Identifier:
                keyid:40:70:47:AD:B0:AB:A8:5A:E2:34:97:00:52:22:8E:9B:1F:02:39:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.blade.sh/repo/Blade/0/407047ADB0ABA85AE234970052228E9B1F0239E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHBHrbCrqFriNJcAUiKOmx8COeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rpki.blade.sh/repo/Blade/0/323430363a336263303a3a2f34302d3430203d3e20313430383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3bc0::/40

    Signature Algorithm: sha256WithRSAEncryption
         89:bd:b7:d5:2f:66:50:53:c7:35:e1:bb:f3:18:9e:7f:47:8c:
         33:d8:15:da:00:e1:d2:15:92:b4:84:69:97:a7:b5:c4:71:37:
         66:2b:45:11:d0:57:5b:63:e3:a0:3d:85:75:5e:70:52:4b:80:
         6f:91:7a:21:d9:1c:fc:48:64:9c:0d:42:da:38:40:10:96:7c:
         cc:34:0c:08:04:17:f2:fd:82:53:98:bf:fe:f5:62:90:3a:18:
         c8:5b:2c:32:a2:a2:1a:da:ad:9b:1a:42:8b:c8:8d:2e:58:fd:
         08:ef:24:32:26:87:ef:bd:db:fa:2b:b8:36:94:05:5d:d4:88:
         2b:1b:e9:5c:ba:c0:1e:22:dc:55:ed:7b:40:5e:a9:46:7e:c3:
         a3:59:67:44:34:08:ef:1c:9b:9d:0b:a7:c3:6e:34:c3:98:63:
         37:00:2f:f4:b0:71:e2:a6:61:0a:f6:a4:5c:9d:e0:ea:7e:9a:
         34:12:5f:e6:32:b6:38:c5:d8:b7:b6:88:3c:14:3a:d1:40:b8:
         cd:3a:53:ca:3e:52:ef:a0:e5:4a:28:01:d1:da:41:d7:1e:0f:
         bf:aa:f6:19:20:b8:04:bd:b4:23:69:58:4b:0b:f7:e8:fa:fb:
         18:99:50:85:79:21:99:a9:60:74:57:e2:04:89:5c:22:da:b6:
         63:b1:bb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----