Route Origin Authorization

$ rpki-client -vvf rsync.rpki.nlnetlabs.nl/repo/ca/0/326130343a623930303a3a2f32392d3239203d3e2038353837.roa
File:                     326130343a623930303a3a2f32392d3239203d3e2038353837.roa (raw, json)
Hash identifier:          VCbpGS/8ANU2sX8jFkVfjtx1NAaB16wj5Oxe/kDtdW4=
Subject key identifier:   70:CC:A9:2B:93:E6:F1:56:DC:92:DC:8F:DC:07:D1:06:29:ED:5E:B2
Certificate issuer:       /CN=d724c2d90d5bcc9fda54755efc8c903acb01d02e
Certificate serial:       203089B7D62CF5DF41D3B7B5E8852B332D8C9AB2
Authority key identifier: D7:24:C2:D9:0D:5B:CC:9F:DA:54:75:5E:FC:8C:90:3A:CB:01:D0:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1yTC2Q1bzJ_aVHVe_IyQOssB0C4.cer
Subject info access:      rsync://rsync.rpki.nlnetlabs.nl/repo/ca/0/326130343a623930303a3a2f32392d3239203d3e2038353837.roa
Signing time:             Thu 19 Nov 2020 10:35:50 +0000
ROA not before:           Thu 19 Nov 2020 10:30:50 +0000
ROA not after:            Thu 18 Nov 2021 10:35:50 +0000
asID:                     8587
IP address blocks:        2a04:b900::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:30:89:b7:d6:2c:f5:df:41:d3:b7:b5:e8:85:2b:33:2d:8c:9a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d724c2d90d5bcc9fda54755efc8c903acb01d02e
        Validity
            Not Before: Nov 19 10:30:50 2020 GMT
            Not After : Nov 18 10:35:50 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:46:7f:be:00:aa:ce:84:b1:9c:7c:51:aa:8f:
                    c0:a0:18:7f:17:cf:f1:44:b3:77:27:bd:83:93:75:
                    9e:32:39:93:cc:4c:9d:9e:5a:3a:e3:bb:10:a6:9e:
                    da:84:17:3c:12:a8:73:ca:9b:d5:9a:6f:b5:a6:2c:
                    da:bd:7c:b8:91:72:9b:b4:ff:51:4f:f3:12:ef:06:
                    f9:7f:76:48:a9:c4:96:05:fa:b5:68:72:82:77:86:
                    1a:73:0e:b3:cd:40:20:a5:80:99:34:dc:7b:c2:fa:
                    16:bb:0c:f3:c4:16:5e:15:3b:90:ed:b0:69:1a:14:
                    41:8d:2c:ed:68:46:f5:9b:40:79:6e:ff:07:50:19:
                    83:d3:4b:de:31:14:9e:d3:69:f9:0e:88:74:4d:f3:
                    eb:8d:5e:bd:3f:3e:d3:2b:2c:86:d5:15:95:7f:2c:
                    21:51:50:42:b5:8f:7c:f2:b4:c5:c6:8d:bc:99:4e:
                    3d:23:19:ea:e7:5f:0a:1a:d3:fe:bf:45:d4:a5:83:
                    09:a1:e5:dd:42:6c:82:c0:eb:68:da:03:82:b9:4a:
                    2b:55:b4:57:9b:14:c3:ce:42:fa:6e:01:f8:57:aa:
                    61:f0:9d:81:c2:b4:3f:d2:1a:8a:fb:82:e3:de:3e:
                    4f:55:f1:d0:fd:d9:f6:80:c0:18:68:2c:97:86:11:
                    a4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CC:A9:2B:93:E6:F1:56:DC:92:DC:8F:DC:07:D1:06:29:ED:5E:B2
            X509v3 Authority Key Identifier:
                keyid:D7:24:C2:D9:0D:5B:CC:9F:DA:54:75:5E:FC:8C:90:3A:CB:01:D0:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.nlnetlabs.nl/repo/ca/0/D724C2D90D5BCC9FDA54755EFC8C903ACB01D02E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yTC2Q1bzJ_aVHVe_IyQOssB0C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rpki.nlnetlabs.nl/repo/ca/0/326130343a623930303a3a2f32392d3239203d3e2038353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:b900::/29

    Signature Algorithm: sha256WithRSAEncryption
         5a:70:96:c9:70:6d:f5:24:bc:5f:23:e0:cf:27:5b:18:1b:e0:
         09:27:8f:7d:0d:57:38:12:ed:1e:b1:dd:d6:3d:7c:5e:25:24:
         a0:8f:94:f0:18:d7:35:a4:aa:f4:00:d9:fc:d4:27:6f:5a:26:
         b8:48:ef:e9:5f:99:e7:89:48:89:7b:8a:94:66:94:a1:72:07:
         4a:54:c5:87:ca:bb:d4:2d:78:0b:e1:42:c4:f1:31:5d:c7:40:
         8d:98:f0:00:28:5a:2c:5a:e5:99:dd:8a:57:74:89:0f:75:b1:
         12:c9:3d:7b:95:62:25:f6:07:52:c3:78:da:45:1d:8f:31:22:
         47:f2:7f:69:05:3b:83:86:f0:97:28:b7:87:8a:cd:c0:52:9d:
         d2:22:be:de:50:7a:ad:a1:48:6f:98:1e:ea:fb:d0:9c:aa:37:
         ea:5f:88:3b:f0:0e:59:4f:7b:15:d0:9a:a6:6d:a3:80:d0:57:
         eb:b5:a8:47:28:78:77:c3:dc:cf:e2:b0:0f:21:6f:b1:72:78:
         97:f0:da:58:4e:e8:29:da:16:47:b9:81:d6:dc:22:c8:1c:60:
         7c:9e:66:cb:35:d9:a9:7f:98:50:69:44:7a:2c:c3:ab:ca:92:
         22:75:9c:c5:41:be:a4:89:b0:9d:98:09:fd:62:de:15:ac:48:
         80:d4:c5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----