Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/326130613a363034353a633030303a3a2f33342d3438203d3e20323030313630.roa
File:                     326130613a363034353a633030303a3a2f33342d3438203d3e20323030313630.roa (raw, json)
Hash identifier:          YJguMoFOhYQNir9Z0EdvHRb2EMiKAckdWU1fDuQHfRM=
Subject key identifier:   41:56:89:88:D8:47:6D:70:8D:A1:AD:59:8D:5B:2B:F5:F1:BF:3F:34
Certificate issuer:       /CN=1A7D3DE7823D7B9E7219C8659E76999F120E0DD3
Certificate serial:       3493704A456F1D8AF1FA1DA041A0C77AB3C39087
Authority key identifier: 1A:7D:3D:E7:82:3D:7B:9E:72:19:C8:65:9E:76:99:9F:12:0E:0D:D3
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/1A7D3DE7823D7B9E7219C8659E76999F120E0DD3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/326130613a363034353a633030303a3a2f33342d3438203d3e20323030313630.roa
Signing time:             Tue 23 Jul 2024 19:49:40 +0000
ROA not before:           Tue 23 Jul 2024 19:44:40 +0000
ROA not after:            Tue 22 Jul 2025 19:49:40 +0000
asID:                     200160
IP address blocks:        2a0a:6045:c000::/34 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:93:70:4a:45:6f:1d:8a:f1:fa:1d:a0:41:a0:c7:7a:b3:c3:90:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A7D3DE7823D7B9E7219C8659E76999F120E0DD3
        Validity
            Not Before: Jul 23 19:44:40 2024 GMT
            Not After : Jul 22 19:49:40 2025 GMT
        Subject: CN=41568988D8476D708DA1AD598D5B2BF5F1BF3F34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:78:b5:fc:83:47:6e:07:2b:5d:bf:5a:df:6a:
                    37:ae:53:00:1e:8c:6f:ca:e2:25:f8:0c:f4:5e:fb:
                    30:49:90:ed:e6:50:1b:a7:6e:f6:f3:78:95:8d:20:
                    65:97:82:f2:58:cc:f7:54:82:9c:de:02:28:f0:6b:
                    d0:c1:e9:22:4d:cd:49:52:d7:a5:1f:c6:90:9e:6d:
                    42:c8:89:14:fd:e4:30:60:de:92:b9:7d:82:48:70:
                    a0:07:7f:ce:42:cb:18:01:68:d5:af:37:33:30:e7:
                    da:a0:a5:ba:ae:6c:41:20:6d:fb:93:5b:35:66:31:
                    10:fc:32:98:58:fe:e3:db:9b:cd:fe:69:70:8b:8c:
                    fd:2e:f2:0c:5b:e7:16:ae:e2:4f:4a:7c:38:6c:85:
                    37:ac:59:66:b3:a6:9b:b3:99:7a:f1:ce:a2:5e:bc:
                    fd:02:8b:fa:d0:c3:eb:dd:d9:68:21:27:65:72:3a:
                    ab:03:19:9e:da:dd:44:9e:46:5b:79:69:0c:75:43:
                    4d:2f:38:91:b6:10:f8:be:56:a8:52:62:da:5c:36:
                    d1:1e:44:56:fa:55:c4:e4:98:e4:7e:dc:17:b7:6c:
                    8b:73:44:c2:91:d5:13:f9:52:a1:ae:c3:77:e0:28:
                    fe:4d:cd:f3:0f:ff:7f:b9:6a:5c:57:26:83:65:68:
                    46:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:56:89:88:D8:47:6D:70:8D:A1:AD:59:8D:5B:2B:F5:F1:BF:3F:34
            X509v3 Authority Key Identifier:
                keyid:1A:7D:3D:E7:82:3D:7B:9E:72:19:C8:65:9E:76:99:9F:12:0E:0D:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/1A7D3DE7823D7B9E7219C8659E76999F120E0DD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/1A7D3DE7823D7B9E7219C8659E76999F120E0DD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/326130613a363034353a633030303a3a2f33342d3438203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         71:2d:3e:b9:c8:4b:e0:63:4d:21:03:d2:c8:1e:fc:64:e3:38:
         6d:c3:56:bb:5e:8e:1d:f5:95:e8:a6:63:82:9f:ef:dd:c6:7f:
         b0:b5:4a:5e:75:4f:60:ff:57:d7:95:5b:38:15:56:c6:2c:fa:
         cb:42:f2:a7:76:bc:c8:b2:e8:00:f9:45:5c:f9:75:8b:2f:f3:
         ea:13:8a:94:87:ef:ec:4d:04:c9:76:2b:5b:62:7b:c1:44:49:
         6d:8b:32:37:53:8e:dc:8f:2a:bc:78:1a:f8:05:ce:33:f3:7c:
         01:5f:89:50:1d:91:33:54:b8:19:b9:7a:79:16:db:0e:de:e0:
         a1:06:44:27:85:54:bb:48:b4:94:45:6f:f3:79:5c:1a:1d:f6:
         0b:d3:b5:aa:ca:e5:f8:a7:cb:5a:a5:e0:a3:74:6f:36:52:c1:
         45:47:26:fc:6b:e4:79:c0:7f:b4:e8:30:62:72:2d:34:6e:fc:
         1c:c4:af:d6:7c:ec:b0:d4:0a:08:e5:5e:31:db:e6:59:c4:7c:
         15:72:1f:71:73:38:c3:23:21:17:49:8b:3b:9f:b6:d7:14:1d:
         dc:2f:67:77:f2:30:66:ab:4b:74:8e:44:c9:49:75:5a:2c:19:
         3e:0e:e0:41:39:51:7e:41:2e:42:ef:b3:2f:89:ee:2e:92:b3:
         4d:5e:54:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----