Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0ecedb9d-2891-4374-b608-bffeb63513c9/1/326130363a396634343a663132303a3a2f34342d3438203d3e20323033363836.roa
File:                     326130363a396634343a663132303a3a2f34342d3438203d3e20323033363836.roa (raw, json)
Hash identifier:          LmOYCVThRy2bpO0lgwmAuVY/ghS2SKggDQXVcLt0mf4=
Subject key identifier:   24:CA:AF:0B:53:86:06:E7:15:EB:45:52:67:2F:F5:26:68:26:0D:AD
Certificate issuer:       /CN=B72956867F19F825FD8FD7FBC976E87C1A97B5A5
Certificate serial:       142B3E10F80DAAE727389ADA6D164E94ECCEF20B
Authority key identifier: B7:29:56:86:7F:19:F8:25:FD:8F:D7:FB:C9:76:E8:7C:1A:97:B5:A5
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B72956867F19F825FD8FD7FBC976E87C1A97B5A5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0ecedb9d-2891-4374-b608-bffeb63513c9/1/326130363a396634343a663132303a3a2f34342d3438203d3e20323033363836.roa
Signing time:             Tue 05 Dec 2023 12:14:41 +0000
ROA not before:           Tue 05 Dec 2023 12:09:41 +0000
ROA not after:            Tue 03 Dec 2024 12:14:41 +0000
asID:                     203686
IP address blocks:        2a06:9f44:f120::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:2b:3e:10:f8:0d:aa:e7:27:38:9a:da:6d:16:4e:94:ec:ce:f2:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B72956867F19F825FD8FD7FBC976E87C1A97B5A5
        Validity
            Not Before: Dec  5 12:09:41 2023 GMT
            Not After : Dec  3 12:14:41 2024 GMT
        Subject: CN=24CAAF0B538606E715EB4552672FF52668260DAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:dc:5d:50:03:c0:b5:11:df:ce:62:12:2a:21:
                    df:d6:7c:97:98:35:bb:05:e3:79:fc:a2:2e:ab:72:
                    10:9a:77:19:b0:3d:47:02:e5:1c:b7:7d:bb:4c:7d:
                    63:08:24:43:dd:99:8d:6b:26:9c:16:af:4a:39:21:
                    8a:b9:a5:e8:a2:ad:19:10:5f:1d:ed:4e:06:4d:79:
                    42:76:db:c8:1f:93:e2:25:88:07:be:29:f6:d5:d5:
                    26:0e:f0:da:1c:24:ac:e1:9a:43:17:5f:c8:58:5f:
                    b7:d7:53:32:fd:8b:74:b1:ab:84:8f:b9:b2:54:2e:
                    89:f1:65:9a:e7:62:21:b8:ba:77:1e:00:df:38:3d:
                    c5:51:01:9d:69:8b:1b:fc:3a:47:d8:aa:33:73:f1:
                    63:f8:cf:aa:a8:90:ff:8f:54:53:68:dc:87:21:04:
                    67:a5:d1:a9:6f:ce:d0:ad:23:98:35:b5:a9:19:7d:
                    6a:55:9b:72:99:97:3b:09:40:51:95:d9:47:ef:73:
                    33:83:f6:43:75:94:32:47:78:4d:3e:68:d4:11:4b:
                    3e:46:9d:d9:d2:88:08:20:3d:20:f3:ab:a2:37:f4:
                    fa:55:fb:3b:d7:12:6c:1d:27:1a:d8:0a:d7:7e:10:
                    3a:5a:d3:0f:4d:ae:a0:bc:ac:53:da:7a:4a:de:61:
                    78:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CA:AF:0B:53:86:06:E7:15:EB:45:52:67:2F:F5:26:68:26:0D:AD
            X509v3 Authority Key Identifier:
                keyid:B7:29:56:86:7F:19:F8:25:FD:8F:D7:FB:C9:76:E8:7C:1A:97:B5:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0ecedb9d-2891-4374-b608-bffeb63513c9/1/B72956867F19F825FD8FD7FBC976E87C1A97B5A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B72956867F19F825FD8FD7FBC976E87C1A97B5A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0ecedb9d-2891-4374-b608-bffeb63513c9/1/326130363a396634343a663132303a3a2f34342d3438203d3e20323033363836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f44:f120::/44

    Signature Algorithm: sha256WithRSAEncryption
         58:b2:c6:5e:ea:5e:f1:fb:db:3c:05:8f:ad:43:ce:16:d0:86:
         b3:1c:13:9c:d0:af:38:7f:74:c4:07:19:f8:ca:7b:9c:9b:14:
         47:cd:6d:1e:64:6f:d0:a5:9c:ce:5f:74:70:65:10:b6:d0:5b:
         28:94:32:ca:94:c2:70:2a:69:29:99:5d:a0:67:6a:49:a3:ce:
         3e:24:b1:29:6d:c0:7e:6f:b6:58:5e:05:b8:09:6d:59:99:6d:
         95:71:e2:db:68:1b:1e:4d:a5:5a:e0:93:1e:9f:e1:97:83:f5:
         a2:9d:91:e3:76:cd:78:02:b3:13:dc:9e:d4:d1:c3:8a:fc:ea:
         ed:c8:b2:75:8c:9b:a5:a0:7f:fa:ea:1e:c6:c2:fb:94:2c:3a:
         c2:45:72:e7:02:4f:bc:f7:e7:fc:da:a4:24:62:93:49:da:cb:
         4e:a5:98:00:43:98:94:81:5b:54:1e:e6:d9:16:20:ba:97:c5:
         73:46:64:ce:0c:93:e5:eb:4e:f6:7c:28:c3:8d:51:a5:f6:65:
         b7:92:9d:17:d2:77:59:34:c4:50:9f:d9:71:3e:ba:ed:4c:75:
         dd:fd:6d:e0:31:4b:d2:cf:4a:b9:8a:d8:88:79:9c:4c:55:15:
         d3:8b:1c:51:1e:39:d5:a0:65:53:f1:96:f3:b6:39:40:38:06:
         5d:78:88:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----