Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/326130613a363034353a636666663a3a2f34382d3438203d3e20323039303235.roa
File:                     326130613a363034353a636666663a3a2f34382d3438203d3e20323039303235.roa (raw, json)
Hash identifier:          MaKdi/lfc510tmizAVvYejZ1/mnRQiSCwnh0J9qC1Zc=
Subject key identifier:   51:56:63:4D:3E:4E:78:F8:E6:5D:CF:EF:CD:F7:6F:AE:FC:4F:9B:E8
Certificate issuer:       /CN=1A7D3DE7823D7B9E7219C8659E76999F120E0DD3
Certificate serial:       18B5C2CAFFC4FED112DAAF28C56020A0025D16F2
Authority key identifier: 1A:7D:3D:E7:82:3D:7B:9E:72:19:C8:65:9E:76:99:9F:12:0E:0D:D3
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/1A7D3DE7823D7B9E7219C8659E76999F120E0DD3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/326130613a363034353a636666663a3a2f34382d3438203d3e20323039303235.roa
Signing time:             Tue 23 Jul 2024 19:49:37 +0000
ROA not before:           Tue 23 Jul 2024 19:44:37 +0000
ROA not after:            Tue 22 Jul 2025 19:49:37 +0000
asID:                     209025
IP address blocks:        2a0a:6045:cfff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b5:c2:ca:ff:c4:fe:d1:12:da:af:28:c5:60:20:a0:02:5d:16:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A7D3DE7823D7B9E7219C8659E76999F120E0DD3
        Validity
            Not Before: Jul 23 19:44:37 2024 GMT
            Not After : Jul 22 19:49:37 2025 GMT
        Subject: CN=5156634D3E4E78F8E65DCFEFCDF76FAEFC4F9BE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7d:b8:b2:79:f2:73:d4:15:34:3e:d3:51:df:
                    dc:f9:81:c2:9a:7c:1c:cd:8b:b3:2e:f6:a8:cd:c4:
                    03:5b:77:41:2d:24:66:6e:f8:f1:9e:35:a4:a2:79:
                    74:1d:74:16:98:ef:06:74:6b:21:ed:bc:df:53:ed:
                    bb:00:11:c7:5d:b5:b3:e7:14:03:83:40:a3:97:d8:
                    d6:4d:45:6f:13:ae:e5:34:3d:58:2a:c6:5e:0a:2a:
                    2a:7f:25:5a:18:a3:c1:70:77:05:ef:f0:3f:e4:db:
                    ec:d8:0e:7e:d6:fd:e6:e5:bc:e8:f6:a7:a7:c2:48:
                    75:58:80:b1:4a:fc:dd:79:54:87:d6:c6:71:f2:ce:
                    e3:46:ff:41:2e:39:fb:ea:24:5a:b3:e3:e8:96:f6:
                    46:5c:6e:77:94:f9:15:10:f9:06:5e:91:5b:b6:4b:
                    c6:03:91:0a:54:26:c1:99:52:5a:51:e7:2a:16:7b:
                    a5:a6:9a:b9:3c:18:ef:9d:93:5c:e4:b2:23:8d:d6:
                    4e:79:a9:0c:61:04:52:18:63:1e:dc:b8:bf:3e:b3:
                    e1:ae:b6:4d:d9:ef:3e:34:16:f2:81:d2:9a:02:10:
                    3e:97:c6:a3:57:7d:b0:c3:05:08:6c:a0:ec:4d:a1:
                    cf:0d:a2:58:db:c1:9d:1e:69:3f:5c:6b:2a:fb:28:
                    e8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:56:63:4D:3E:4E:78:F8:E6:5D:CF:EF:CD:F7:6F:AE:FC:4F:9B:E8
            X509v3 Authority Key Identifier:
                keyid:1A:7D:3D:E7:82:3D:7B:9E:72:19:C8:65:9E:76:99:9F:12:0E:0D:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/1A7D3DE7823D7B9E7219C8659E76999F120E0DD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/1A7D3DE7823D7B9E7219C8659E76999F120E0DD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/326130613a363034353a636666663a3a2f34382d3438203d3e20323039303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:cfff::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:e4:1a:f2:f6:89:5c:de:f6:50:ba:9d:9a:a7:30:27:56:ea:
         64:34:b1:92:64:5f:2d:76:8d:21:a8:d4:3c:1c:3a:50:b8:a8:
         01:61:7a:15:b8:1c:1c:d1:fe:eb:79:c7:f5:62:19:c5:59:c9:
         67:b9:e4:d8:f7:07:7d:c9:0c:dc:fa:49:72:27:7e:03:59:74:
         d5:b6:87:22:62:50:87:05:1a:50:2a:8d:b1:fd:5b:86:2b:ec:
         dd:51:98:36:32:f3:c6:9b:44:1a:93:cd:21:e0:f4:95:c6:c5:
         ad:06:d2:19:0d:44:37:b7:8a:98:15:ef:5e:12:5c:f5:23:96:
         51:77:a3:d9:15:6e:f8:36:83:dd:96:ae:43:ea:f0:f2:3d:e7:
         58:57:5d:2f:23:e8:8b:79:24:f9:1d:df:1d:76:49:d8:13:3b:
         d2:34:9a:c4:c8:b5:9f:0a:37:2e:93:d7:ca:1a:42:02:bb:e2:
         ad:da:65:be:f2:52:5c:bf:29:c6:e9:9c:e0:42:70:84:75:c2:
         23:8c:d5:08:ca:0f:11:e7:89:00:3b:da:73:b6:0a:62:51:81:
         24:ea:69:26:2f:8c:26:da:ff:eb:f0:6a:cc:18:9c:b8:1c:6f:
         36:a8:a6:fe:4c:cf:12:bf:40:90:34:41:a3:76:57:a2:fb:d9:
         ba:a3:73:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----