Route Origin Authorization

$ rpki-client -vvf rsync.rpki.nlnetlabs.nl/repo/ca/0/3138352e34392e3134332e302f32342d3234203d3e203136353039.roa
File:                     3138352e34392e3134332e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          FlyRZhdYChnFSs5qsTvcfisGQIWPzKO7+6anSHvRJ4c=
Subject key identifier:   F6:EE:6D:A1:69:16:1E:6D:6F:7B:F6:64:0B:7E:53:15:6D:D0:4A:E0
Certificate issuer:       /CN=d724c2d90d5bcc9fda54755efc8c903acb01d02e
Certificate serial:       0BB5D6E84BAEA1498D97C683B3F36EF123938645
Authority key identifier: D7:24:C2:D9:0D:5B:CC:9F:DA:54:75:5E:FC:8C:90:3A:CB:01:D0:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1yTC2Q1bzJ_aVHVe_IyQOssB0C4.cer
Subject info access:      rsync://rsync.rpki.nlnetlabs.nl/repo/ca/0/3138352e34392e3134332e302f32342d3234203d3e203136353039.roa
Signing time:             Thu 26 Nov 2020 14:10:03 +0000
ROA not before:           Thu 26 Nov 2020 14:05:03 +0000
ROA not after:            Thu 25 Nov 2021 14:10:03 +0000
asID:                     16509
IP address blocks:        185.49.143.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b5:d6:e8:4b:ae:a1:49:8d:97:c6:83:b3:f3:6e:f1:23:93:86:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d724c2d90d5bcc9fda54755efc8c903acb01d02e
        Validity
            Not Before: Nov 26 14:05:03 2020 GMT
            Not After : Nov 25 14:10:03 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b7:94:ef:75:85:c5:62:86:1f:c8:67:87:e3:
                    6a:f8:59:20:29:91:64:36:1e:0c:92:7a:50:4b:73:
                    d6:d9:2a:6f:c6:a8:d7:85:2e:cf:cf:75:89:28:1f:
                    35:ad:ae:ce:e2:aa:23:13:7c:33:4a:5a:06:c9:18:
                    52:31:29:c1:95:86:95:70:cc:b1:49:59:66:17:e6:
                    fe:50:14:ac:d5:c7:b5:88:0b:66:19:6e:d0:61:be:
                    ed:fb:61:af:dd:7d:30:10:d6:b2:c2:1c:ce:3c:df:
                    3c:81:9c:30:0e:06:88:4d:ff:d0:75:c3:20:f1:26:
                    81:1c:96:e3:58:dd:b8:eb:4e:2f:c2:93:89:2d:d5:
                    30:27:be:12:c0:17:f8:69:88:e3:a4:46:75:74:9a:
                    b7:70:4b:3a:cb:3d:4f:3a:f7:de:26:d4:ba:3b:21:
                    32:43:77:00:56:f8:92:9a:ba:96:84:b7:40:16:a9:
                    c7:e1:99:54:12:8f:8f:81:39:2b:75:f4:fe:c3:bd:
                    0a:39:99:be:fb:7b:e8:be:64:ed:dd:d5:77:5f:b0:
                    71:f3:cd:71:31:04:72:8b:cf:8f:3d:c2:07:cd:87:
                    ac:8d:26:46:55:14:e2:16:3b:dc:ae:bd:24:6f:35:
                    a5:a0:d2:a3:7b:37:e1:1d:23:38:de:73:29:99:40:
                    0a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:EE:6D:A1:69:16:1E:6D:6F:7B:F6:64:0B:7E:53:15:6D:D0:4A:E0
            X509v3 Authority Key Identifier:
                keyid:D7:24:C2:D9:0D:5B:CC:9F:DA:54:75:5E:FC:8C:90:3A:CB:01:D0:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.nlnetlabs.nl/repo/ca/0/D724C2D90D5BCC9FDA54755EFC8C903ACB01D02E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yTC2Q1bzJ_aVHVe_IyQOssB0C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rpki.nlnetlabs.nl/repo/ca/0/3138352e34392e3134332e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.49.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:e7:cb:5d:9b:05:5e:4a:58:63:a5:31:8c:76:52:ca:30:90:
         a5:3b:02:7b:93:95:24:1f:4d:af:2c:03:82:51:ab:7d:97:13:
         1d:b5:3b:54:ab:63:f3:ac:80:54:ed:9d:d5:6d:7a:47:e3:36:
         64:4a:1b:05:55:ba:62:8d:0a:3d:6f:b7:d9:35:9f:f9:5f:3a:
         95:ec:76:ae:c4:4f:2f:53:1b:3e:8f:b3:e6:13:07:6f:5d:eb:
         3c:da:02:33:ae:46:c5:77:06:d7:e2:02:ec:5d:1d:89:52:84:
         75:06:38:48:77:b2:cf:22:37:7b:56:34:fb:29:53:ae:09:cd:
         ae:1c:00:09:bc:94:c8:3f:14:e9:ed:9c:d4:f8:68:c9:f4:f8:
         e4:02:c6:74:78:00:34:44:1c:2a:d3:7e:9f:45:d7:0c:98:2c:
         f2:62:11:a4:cf:b9:64:d4:59:3f:9a:a1:d2:fc:7a:6f:fa:5a:
         2f:73:9e:54:4f:5a:c0:77:78:d7:22:6a:76:e0:7c:33:07:93:
         19:c0:02:de:18:46:4f:ec:10:5e:ca:98:0c:9e:5d:da:e0:63:
         44:98:dc:51:94:d1:4f:85:c6:76:37:02:4c:f9:86:37:57:e6:
         98:83:d6:13:46:36:01:45:b5:a5:0a:31:bd:73:12:b1:99:ee:
         d7:d5:a4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----