Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/6/326131343a373538343a333030303a3a2f34382d3438203d3e20313532333638.roa
File:                     326131343a373538343a333030303a3a2f34382d3438203d3e20313532333638.roa (raw, json)
Hash identifier:          DKfjY7PTs09Q38kVcv+thyElcK+hChUd14UWtj+BkE4=
Subject key identifier:   26:45:7E:74:B2:B5:02:5B:34:5D:05:3D:F0:41:0B:C0:A8:D4:06:92
Certificate issuer:       /CN=545C6A5736C41820C43C221A4B622EF9C3675652
Certificate serial:       521105A42E71D26567FA6897C512C1CB89918BF1
Authority key identifier: 54:5C:6A:57:36:C4:18:20:C4:3C:22:1A:4B:62:2E:F9:C3:67:56:52
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/545C6A5736C41820C43C221A4B622EF9C3675652.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/6/326131343a373538343a333030303a3a2f34382d3438203d3e20313532333638.roa
Signing time:             Thu 27 Feb 2025 04:51:50 +0000
ROA not before:           Thu 27 Feb 2025 04:46:50 +0000
ROA not after:            Thu 26 Feb 2026 04:51:50 +0000
asID:                     152368
IP address blocks:        2a14:7584:3000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:11:05:a4:2e:71:d2:65:67:fa:68:97:c5:12:c1:cb:89:91:8b:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=545C6A5736C41820C43C221A4B622EF9C3675652
        Validity
            Not Before: Feb 27 04:46:50 2025 GMT
            Not After : Feb 26 04:51:50 2026 GMT
        Subject: CN=26457E74B2B5025B345D053DF0410BC0A8D40692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ed:2e:da:a8:52:31:51:73:f9:92:c2:d9:29:
                    35:ae:1e:a1:85:21:b5:b2:58:d0:33:de:ef:81:ef:
                    cc:31:c8:e2:7b:e1:ea:c3:de:dc:3f:5f:95:73:11:
                    f2:42:64:b1:2b:9e:43:ed:ea:09:f6:6d:71:3a:4f:
                    13:91:19:66:c3:91:42:8a:f9:88:5d:5b:69:56:d3:
                    17:ed:6e:71:ee:a5:fd:0d:39:0b:7e:4a:db:46:0b:
                    ec:a9:e2:ec:a5:cc:b2:d8:3a:08:3e:14:21:8a:50:
                    6c:8c:1d:49:1b:98:a9:25:e6:83:5d:08:bd:2e:d7:
                    f9:d9:e6:36:b1:78:3e:37:48:15:9a:60:bc:ee:30:
                    58:64:1a:71:a5:c7:aa:c5:97:2f:42:be:1d:56:f9:
                    8f:9d:d3:38:97:59:ae:b2:32:f5:3b:30:42:76:8a:
                    9a:a9:6a:28:91:a7:e3:a7:3a:81:15:a1:3b:68:a7:
                    c7:16:37:ed:51:e6:e7:34:4e:7c:87:99:1a:e6:52:
                    89:ee:70:5e:e4:41:3a:c3:a9:ad:cf:f8:30:15:63:
                    6a:91:14:e3:50:bb:e7:7b:1e:ab:a4:8e:b6:bf:b7:
                    04:1e:af:06:86:43:4f:88:03:ca:15:af:81:85:e0:
                    6f:2d:c6:44:ef:5c:d1:8d:02:11:a2:ce:e6:c6:bf:
                    92:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:45:7E:74:B2:B5:02:5B:34:5D:05:3D:F0:41:0B:C0:A8:D4:06:92
            X509v3 Authority Key Identifier:
                keyid:54:5C:6A:57:36:C4:18:20:C4:3C:22:1A:4B:62:2E:F9:C3:67:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/6/545C6A5736C41820C43C221A4B622EF9C3675652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/545C6A5736C41820C43C221A4B622EF9C3675652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/6/326131343a373538343a333030303a3a2f34382d3438203d3e20313532333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:b1:84:07:76:2a:42:1e:b1:46:4f:0d:50:f6:1e:90:62:64:
         2e:e6:29:48:de:0a:98:3c:bb:b3:c4:76:51:88:40:64:2a:e2:
         8f:d9:22:f6:46:5a:d2:83:f6:31:38:f1:7f:aa:c5:e6:af:66:
         08:1d:9d:63:fa:86:08:8b:6a:1c:6d:99:8b:b7:84:c0:7c:71:
         ea:f1:c6:b8:86:18:a5:cc:8d:31:a1:f8:40:0f:60:c7:f1:21:
         25:59:77:41:27:c4:a7:5d:98:39:10:b9:e7:84:4a:db:51:96:
         13:ba:b7:69:d9:07:70:98:bd:a9:d5:51:6d:46:93:b5:55:68:
         78:38:d6:87:10:b5:2e:7c:a1:88:4f:99:80:43:5e:32:1d:69:
         2c:4b:cf:74:4f:21:bf:20:c0:0f:ed:da:c9:04:9f:b5:25:ab:
         25:62:b9:ee:a9:4a:47:b5:df:4b:46:75:39:65:a9:14:4c:f6:
         7b:50:23:c5:0e:19:d7:f4:11:20:1c:8e:58:cc:aa:c1:4e:20:
         47:84:ce:42:b5:a5:39:a2:ca:d4:1c:12:07:de:30:69:e5:fc:
         7e:14:98:ed:37:7f:b3:2c:e8:8c:1d:c1:dd:c1:53:96:be:04:
         41:6d:d9:b8:9a:69:dd:d4:b4:ee:5e:27:6b:16:ab:35:ea:e0:
         01:f2:f2:c3
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUUhEFpC5x0mVn+miXxRLBy4mRi/EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQ1QzZBNTczNkM0MTgyMEM0M0MyMjFBNEI2MjJFRjlD
MzY3NTY1MjAeFw0yNTAyMjcwNDQ2NTBaFw0yNjAyMjYwNDUxNTBaMDMxMTAvBgNV
BAMTKDI2NDU3RTc0QjJCNTAyNUIzNDVEMDUzREYwNDEwQkMwQThENDA2OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq7S7aqFIxUXP5ksLZKTWuHqGF
IbWyWNAz3u+B78wxyOJ74erD3tw/X5VzEfJCZLErnkPt6gn2bXE6TxORGWbDkUKK
+YhdW2lW0xftbnHupf0NOQt+SttGC+yp4uylzLLYOgg+FCGKUGyMHUkbmKkl5oNd
CL0u1/nZ5jaxeD43SBWaYLzuMFhkGnGlx6rFly9Cvh1W+Y+d0ziXWa6yMvU7MEJ2
ipqpaiiRp+OnOoEVoTtop8cWN+1R5uc0TnyHmRrmUonucF7kQTrDqa3P+DAVY2qR
FONQu+d7Hqukjra/twQerwaGQ0+IA8oVr4GF4G8txkTvXNGNAhGizubGv5JLAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUJkV+dLK1Als0XQU98EELwKjUBpIwHwYDVR0j
BBgwFoAUVFxqVzbEGCDEPCIaS2Iu+cNnVlIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk
OGM0LzYvNTQ1QzZBNTczNkM0MTgyMEM0M0MyMjFBNEI2MjJFRjlDMzY3NTY1Mi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81NDVDNkE1NzM2QzQxODIwQzQzQzIyMUE0
QjYyMkVGOUMzNjc1NjUyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8xYmQzMDZiNC1lNWMzLTQ4ZjktYjJlZS0zNmE5YmRkZWQ4YzQvNi8zMjYxMzEz
NDNhMzczNTM4MzQzYTMzMzAzMDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEz
NTMyMzMzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hDAAMA0GCSqGSIb3DQEBCwUAA4IBAQAx
sYQHdipCHrFGTw1Q9h6QYmQu5ilI3gqYPLuzxHZRiEBkKuKP2SL2RlrSg/YxOPF/
qsXmr2YIHZ1j+oYIi2ocbZmLt4TAfHHq8ca4hhilzI0xofhAD2DH8SElWXdBJ8Sn
XZg5ELnnhErbUZYTurdp2QdwmL2p1VFtRpO1VWh4ONaHELUufKGIT5mAQ14yHWks
S890TyG/IMAP7drJBJ+1JaslYrnuqUpHtd9LRnU5ZakUTPZ7UCPFDhnX9BEgHI5Y
zKrBTiBHhM5CtaU5osrUHBIH3jBp5fx+FJjtN3+zLOiMHcHdwVOWvgRBbdm4mmnd
1LTuXidrFqs16uAB8vLD
-----END CERTIFICATE-----