Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/0/3134362e3234372e34382e302f32332d3233203d3e203234383531.roa
File:                     3134362e3234372e34382e302f32332d3233203d3e203234383531.roa (raw, json)
Hash identifier:          gAjbxuemYANdCRtU3Qw16C9kDrfREJiMNkEaJ0ugT/s=
Subject key identifier:   DA:53:B5:39:FA:21:9B:A9:C1:93:4C:B0:D6:C5:2B:4A:C4:BA:8D:F6
Certificate issuer:       /CN=e903858f0abab52add2a8fca3f14998a35291a7a
Certificate serial:       2603FCBA022CA79C45292E2E734A36CF5643B7FD
Authority key identifier: E9:03:85:8F:0A:BA:B5:2A:DD:2A:8F:CA:3F:14:99:8A:35:29:1A:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QOFjwq6tSrdKo_KPxSZijUpGno.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/0/3134362e3234372e34382e302f32332d3233203d3e203234383531.roa
Signing time:             Mon 23 Jan 2023 11:26:25 +0000
ROA not before:           Mon 23 Jan 2023 11:21:25 +0000
ROA not after:            Mon 22 Jan 2024 11:26:25 +0000
asID:                     24851
IP address blocks:        146.247.48.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:03:fc:ba:02:2c:a7:9c:45:29:2e:2e:73:4a:36:cf:56:43:b7:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e903858f0abab52add2a8fca3f14998a35291a7a
        Validity
            Not Before: Jan 23 11:21:25 2023 GMT
            Not After : Jan 22 11:26:25 2024 GMT
        Subject: CN=DA53B539FA219BA9C1934CB0D6C52B4AC4BA8DF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c9:fc:5f:e4:d0:c8:1b:e4:99:48:29:44:f4:
                    78:0d:db:eb:37:8a:a9:1b:f1:22:48:a9:fb:ab:59:
                    f1:6d:76:1f:84:dc:2e:9e:6a:ef:24:3e:97:f8:df:
                    f4:6d:55:c2:db:fe:7a:cc:ba:55:6e:23:3e:5f:7a:
                    cf:3e:6d:6c:84:26:55:28:b8:8d:eb:b9:29:07:96:
                    fd:29:6a:e2:28:21:92:11:bc:10:3d:61:f1:d0:d1:
                    2a:50:eb:77:a6:f9:87:45:3f:2e:91:16:25:6d:3e:
                    d4:c2:21:34:f7:4a:d7:5d:d3:e8:4d:5b:eb:ac:25:
                    12:8c:44:0b:1c:f6:9e:96:4d:cf:0d:e2:c6:05:fa:
                    52:cb:a3:f0:18:80:41:a8:a4:19:2d:d3:88:5a:eb:
                    f8:44:f4:78:1e:bc:dd:03:93:1a:65:e7:c7:ab:5c:
                    9b:2c:f5:99:2c:3d:3e:9c:65:16:37:76:26:38:29:
                    bb:0a:1f:4e:51:60:b1:d2:54:c6:55:2f:72:93:9f:
                    fe:bf:2d:3b:6a:3e:56:31:d5:22:a4:09:58:55:21:
                    cb:d5:17:60:3c:b6:10:fe:31:62:ff:77:55:f0:02:
                    2d:54:64:58:e5:6b:df:32:03:51:91:9e:72:7f:9b:
                    01:02:eb:3e:05:cf:51:1b:75:a0:7a:6e:da:4b:0a:
                    a5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:53:B5:39:FA:21:9B:A9:C1:93:4C:B0:D6:C5:2B:4A:C4:BA:8D:F6
            X509v3 Authority Key Identifier:
                keyid:E9:03:85:8F:0A:BA:B5:2A:DD:2A:8F:CA:3F:14:99:8A:35:29:1A:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/0/E903858F0ABAB52ADD2A8FCA3F14998A35291A7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOFjwq6tSrdKo_KPxSZijUpGno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/0/3134362e3234372e34382e302f32332d3233203d3e203234383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.247.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:2a:4b:8d:ce:d1:3c:89:7d:24:61:53:42:33:cc:fe:c4:ed:
         9f:65:b5:50:73:b8:26:f6:42:d5:72:01:33:b5:4c:0b:df:b6:
         da:85:b6:dc:05:ae:1b:35:bf:71:b2:57:25:c2:d2:82:d2:eb:
         7b:10:26:0f:73:58:d8:bb:0c:2c:d6:95:55:17:c7:23:86:96:
         a7:bf:c2:a4:36:2e:34:5e:b2:8e:70:1f:66:8e:22:2e:30:c9:
         37:00:6f:d9:5a:ca:d7:7c:7a:cd:bd:68:4a:12:31:39:57:b0:
         99:63:54:e9:e7:71:8e:51:f1:9f:0e:71:eb:d5:eb:f6:56:e8:
         a2:ff:33:73:82:94:ff:45:fc:f6:7b:af:a7:19:8f:06:8b:e9:
         78:ba:93:69:41:a0:85:ef:3f:aa:e2:6f:1e:6b:94:b8:f9:d1:
         43:34:94:83:0e:c4:63:5c:bb:16:a6:02:53:63:1d:e0:ef:ea:
         da:bc:c7:5a:b4:61:cd:96:52:6e:f8:91:73:34:14:d1:07:37:
         99:a9:a5:79:9f:8b:ac:3b:5f:0c:f9:fa:f3:78:d3:88:7f:cb:
         a4:8f:98:d1:be:16:09:15:47:3a:32:e2:a4:c3:3a:ce:0d:37:
         8a:2b:91:d4:20:9d:df:d3:82:94:e8:23:76:1d:0c:e3:a1:eb:
         3b:f1:a3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----