Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e36382e3130382e302f32342d3234203d3e203534363831.roa
File:                     3130332e36382e3130382e302f32342d3234203d3e203534363831.roa (raw, json)
Hash identifier:          WMD3i5k0xTcocvpyPiocm6Q8fl4r/pgVvb+V2ggfJ/0=
Subject key identifier:   69:D7:59:D5:C2:74:F0:AD:73:82:5D:FC:A9:99:DB:3A:59:89:89:18
Certificate issuer:       /CN=A91115900000/serialNumber=37E3E8697155F12E29E5EE194751D384FAA37F92
Certificate serial:       0C6D0045158C2BAB13C91A21A6510A62B7ED86DF
Authority key identifier: 37:E3:E8:69:71:55:F1:2E:29:E5:EE:19:47:51:D3:84:FA:A3:7F:92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-PoaXFV8S4p5e4ZR1HThPqjf5I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e36382e3130382e302f32342d3234203d3e203534363831.roa
Signing time:             Wed 21 Dec 2022 16:01:17 +0000
ROA not before:           Wed 21 Dec 2022 15:56:17 +0000
ROA not after:            Wed 20 Dec 2023 16:01:17 +0000
asID:                     54681
IP address blocks:        103.68.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6d:00:45:15:8c:2b:ab:13:c9:1a:21:a6:51:0a:62:b7:ed:86:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=37E3E8697155F12E29E5EE194751D384FAA37F92
        Validity
            Not Before: Dec 21 15:56:17 2022 GMT
            Not After : Dec 20 16:01:17 2023 GMT
        Subject: CN=69D759D5C274F0AD73825DFCA999DB3A59898918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:00:73:91:ac:6c:8c:c5:54:4a:8c:05:db:d4:
                    e2:a4:e9:31:78:38:a4:57:6c:6b:40:46:a2:32:7d:
                    12:8e:7b:44:7b:a7:03:de:5d:8a:0c:c1:30:b8:82:
                    f0:eb:80:b7:55:54:e3:02:83:d7:51:fe:a2:22:01:
                    11:df:e5:ee:5e:b9:73:22:47:aa:70:7c:18:7c:71:
                    30:b9:51:37:92:02:f6:1b:51:13:68:8c:c4:58:9f:
                    97:19:b7:26:24:99:a4:32:dd:99:6c:30:64:1b:75:
                    27:93:42:0b:0a:7e:aa:30:31:11:15:23:a5:ae:91:
                    e1:4f:d0:97:e9:51:b0:3d:70:98:3d:f5:86:f5:cc:
                    de:61:c7:da:32:d2:97:9e:11:0c:97:d2:f2:18:0f:
                    64:ea:62:aa:d9:05:f0:90:58:f6:79:76:3d:4b:e2:
                    86:02:47:79:58:22:ab:8e:33:c5:9f:bd:12:ac:aa:
                    62:ba:2b:eb:6b:10:68:04:cc:77:14:5d:78:46:d0:
                    ba:12:75:2d:2b:e6:60:8c:68:8a:64:97:09:6e:bd:
                    d9:4a:f1:ed:9c:dd:bf:f1:1f:7e:e9:e9:31:7c:51:
                    a8:d7:99:75:99:7b:24:13:a4:8d:45:2b:83:1f:71:
                    8b:c7:da:be:c6:1d:9d:2e:b1:75:39:45:12:9f:26:
                    f3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D7:59:D5:C2:74:F0:AD:73:82:5D:FC:A9:99:DB:3A:59:89:89:18
            X509v3 Authority Key Identifier:
                keyid:37:E3:E8:69:71:55:F1:2E:29:E5:EE:19:47:51:D3:84:FA:A3:7F:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/37E3E8697155F12E29E5EE194751D384FAA37F92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-PoaXFV8S4p5e4ZR1HThPqjf5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3130332e36382e3130382e302f32342d3234203d3e203534363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:4b:9b:e3:3a:1d:9c:09:f9:f5:f9:62:db:fa:e2:04:cc:1c:
         85:f6:10:ef:95:89:cb:ee:3d:ff:79:f8:29:99:38:3f:f2:b6:
         2d:77:dc:64:42:19:3a:fa:4d:3e:f1:9c:b3:b5:b1:5b:ba:9a:
         62:e2:f4:c3:8e:3f:5a:97:c5:9f:9d:3e:79:6b:92:3f:0e:0b:
         46:bc:a1:68:b5:23:5e:30:5b:45:bc:4d:00:82:50:ab:87:9c:
         dc:8b:72:e5:91:fd:bf:82:8b:40:54:b5:17:11:fb:63:18:6d:
         8c:3f:c3:9e:8b:cf:32:5e:47:e4:91:01:13:09:2e:5e:25:e3:
         bf:b3:1b:82:a4:74:43:d4:55:53:b1:c6:77:4b:fb:72:d1:95:
         2a:6b:85:4c:88:4c:b6:3d:e5:0c:32:1a:5f:66:cf:a8:10:2a:
         23:2e:5d:bb:02:04:aa:f4:16:5d:ee:91:14:08:d7:8c:53:cf:
         d8:16:35:31:ba:f7:a3:bc:4e:da:f1:b2:75:57:4e:44:77:a1:
         05:a2:26:1c:73:2e:8f:29:49:95:82:bb:c0:0a:66:3e:2c:2f:
         ae:9d:f4:eb:c9:d9:52:0e:9b:00:1f:4e:75:9e:2c:f2:0f:6b:
         75:ec:c6:cf:82:26:c5:21:dd:73:36:0a:f6:14:82:9d:17:d0:
         eb:bb:10:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----