Route Origin Authorization

$ rpki-client -vvf rsync.rpki.nlnetlabs.nl/repo/ca/0/3138352e34392e3134302e302f32322d3232203d3e2038353837.roa
File:                     3138352e34392e3134302e302f32322d3232203d3e2038353837.roa (raw, json)
Hash identifier:          bcyJP1NwwBGfysQDp5Gh6SH4aO16gUvNgvzs6+7WKyw=
Subject key identifier:   67:23:07:9F:02:4B:95:B4:46:80:3C:92:DC:0D:13:94:83:2C:8A:3A
Certificate issuer:       /CN=d724c2d90d5bcc9fda54755efc8c903acb01d02e
Certificate serial:       39C328EFF28F9B61B90CB14C686BDFC828AE8256
Authority key identifier: D7:24:C2:D9:0D:5B:CC:9F:DA:54:75:5E:FC:8C:90:3A:CB:01:D0:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1yTC2Q1bzJ_aVHVe_IyQOssB0C4.cer
Subject info access:      rsync://rsync.rpki.nlnetlabs.nl/repo/ca/0/3138352e34392e3134302e302f32322d3232203d3e2038353837.roa
Signing time:             Thu 19 Nov 2020 10:19:28 +0000
ROA not before:           Thu 19 Nov 2020 10:14:28 +0000
ROA not after:            Thu 18 Nov 2021 10:19:28 +0000
asID:                     8587
IP address blocks:        185.49.140.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c3:28:ef:f2:8f:9b:61:b9:0c:b1:4c:68:6b:df:c8:28:ae:82:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d724c2d90d5bcc9fda54755efc8c903acb01d02e
        Validity
            Not Before: Nov 19 10:14:28 2020 GMT
            Not After : Nov 18 10:19:28 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:96:f0:9c:34:c0:76:08:2d:0e:80:b0:8c:4c:
                    f7:c4:d6:c0:d8:c2:c8:6a:2e:7a:91:88:c3:c8:eb:
                    36:bc:b2:28:f5:89:af:d8:56:1e:0a:a2:cb:ac:4d:
                    10:4e:25:15:b6:29:28:a0:8d:ec:82:52:b9:75:39:
                    83:47:d4:e2:36:c1:53:7f:df:58:ec:54:60:3c:31:
                    fe:01:bb:9a:49:97:ce:a2:d1:c3:8c:bf:3a:6f:e7:
                    e0:90:a9:0a:89:b1:11:a4:23:49:0d:53:37:de:30:
                    9c:fe:fa:89:9c:7f:17:30:78:81:9c:90:29:db:63:
                    ca:b1:6e:6f:42:13:8a:01:7b:b6:dc:fc:37:ae:e0:
                    46:c8:58:fd:13:9c:7f:a6:28:ff:1d:db:cf:b4:06:
                    49:85:5a:6d:5d:8a:8d:2c:c5:20:a2:92:c4:7d:1f:
                    ae:b4:cc:ee:58:5c:15:bd:a5:8d:7c:fb:9a:f8:3e:
                    e1:c6:95:6a:39:03:1d:5a:9a:4e:90:ad:7e:68:aa:
                    a0:40:95:63:dd:5d:97:a5:35:7a:8a:aa:fd:59:bb:
                    7d:01:22:87:ef:86:12:a2:17:08:12:c3:7f:02:69:
                    f6:c3:cf:16:0a:d4:65:85:c1:e1:02:4d:a0:b2:cf:
                    44:c6:d6:ca:c9:0f:12:a4:2b:25:58:27:d6:4f:50:
                    be:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:23:07:9F:02:4B:95:B4:46:80:3C:92:DC:0D:13:94:83:2C:8A:3A
            X509v3 Authority Key Identifier:
                keyid:D7:24:C2:D9:0D:5B:CC:9F:DA:54:75:5E:FC:8C:90:3A:CB:01:D0:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.nlnetlabs.nl/repo/ca/0/D724C2D90D5BCC9FDA54755EFC8C903ACB01D02E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yTC2Q1bzJ_aVHVe_IyQOssB0C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rpki.nlnetlabs.nl/repo/ca/0/3138352e34392e3134302e302f32322d3232203d3e2038353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.49.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:29:3b:10:eb:ea:05:02:19:8a:b8:2d:b0:2b:e3:92:dd:4d:
         e2:8e:0f:b6:83:52:6d:78:50:d9:1b:6f:ef:88:23:53:23:b7:
         10:43:b8:a9:1f:e5:8a:4b:83:90:05:4c:df:ab:f6:62:18:e3:
         bb:f0:09:83:40:a5:fd:db:10:6d:6d:87:7f:1a:95:2b:23:bd:
         ac:f6:7d:cb:2d:87:c4:98:7b:62:72:1f:9c:3c:fd:6e:2b:0e:
         f9:ef:1a:e2:79:fe:ab:b4:db:a7:b1:ed:78:7b:c3:a9:c5:bf:
         e2:2b:ee:69:cf:ea:b7:b1:06:bc:03:44:bd:71:fb:04:8e:78:
         41:8e:b1:77:14:77:62:c5:f4:97:23:50:dc:99:e2:a2:70:e1:
         f3:a1:ad:64:6e:98:e5:5a:ba:fd:18:bb:a5:c5:06:02:2a:7a:
         ac:91:77:3f:5b:5a:f8:83:75:ab:d7:7e:ea:66:89:2b:5a:89:
         c0:85:87:cf:99:c9:63:e8:e0:7c:de:91:78:13:09:ba:47:54:
         6f:10:10:d6:ec:92:c7:c4:71:39:8a:35:2d:2f:f6:a1:76:de:
         38:7f:06:ce:8f:e3:a7:75:93:e4:01:df:54:84:a5:d7:e2:36:
         45:01:59:ce:34:1a:b2:4c:c0:fb:86:f5:c2:b6:d3:11:39:60:
         cf:21:fe:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----