Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/326130613a363034353a666530303a3a2f34302d3438203d3e20323030313630.roa
File:                     326130613a363034353a666530303a3a2f34302d3438203d3e20323030313630.roa (raw, json)
Hash identifier:          XL1uytS4JShooXMhUKlPVilVm42Gypu9sbuXa2NQuPE=
Subject key identifier:   F7:63:2D:45:23:C4:28:84:8C:B3:B0:DD:A9:7E:0F:11:71:E8:38:CB
Certificate issuer:       /CN=1A7D3DE7823D7B9E7219C8659E76999F120E0DD3
Certificate serial:       7F423AAC6334E171237760CF22932E74557B96DF
Authority key identifier: 1A:7D:3D:E7:82:3D:7B:9E:72:19:C8:65:9E:76:99:9F:12:0E:0D:D3
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/1A7D3DE7823D7B9E7219C8659E76999F120E0DD3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/326130613a363034353a666530303a3a2f34302d3438203d3e20323030313630.roa
Signing time:             Tue 23 Jul 2024 19:49:37 +0000
ROA not before:           Tue 23 Jul 2024 19:44:37 +0000
ROA not after:            Tue 22 Jul 2025 19:49:37 +0000
asID:                     200160
IP address blocks:        2a0a:6045:fe00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:42:3a:ac:63:34:e1:71:23:77:60:cf:22:93:2e:74:55:7b:96:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A7D3DE7823D7B9E7219C8659E76999F120E0DD3
        Validity
            Not Before: Jul 23 19:44:37 2024 GMT
            Not After : Jul 22 19:49:37 2025 GMT
        Subject: CN=F7632D4523C428848CB3B0DDA97E0F1171E838CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4d:c0:0b:ee:2e:98:9f:02:1e:17:df:58:ef:
                    7f:07:22:d4:54:b8:6f:56:68:90:f7:a7:6b:11:d0:
                    77:9a:a2:62:f4:2e:ec:a9:20:21:21:b7:4e:3d:55:
                    58:ea:23:38:f0:b6:7a:a1:2e:dc:3d:15:05:ef:b6:
                    83:b0:51:a7:75:55:0f:16:48:81:db:86:89:01:6f:
                    d7:4e:79:3d:d6:5f:31:59:f2:2d:0a:ff:69:fb:87:
                    99:ff:fb:69:46:9b:b1:4d:ee:fc:f9:aa:14:5f:c9:
                    4d:b6:fb:88:66:5d:57:43:d8:2d:29:49:37:79:7b:
                    f2:b9:ca:f4:1f:25:4d:ea:c9:e6:a6:ef:39:1f:33:
                    f3:6d:b8:c1:dc:1a:0a:0b:f4:96:20:1a:11:06:ed:
                    90:dc:81:20:e1:7a:18:43:79:60:cb:36:1b:c6:d8:
                    ee:5f:02:37:43:32:d5:41:d5:0b:5f:f9:d2:a6:67:
                    21:7d:93:44:bb:c2:ee:1e:dc:52:6e:86:7f:94:d0:
                    fc:f8:72:d9:77:e2:27:9e:8d:45:77:11:e0:46:39:
                    2e:be:0d:b2:c2:70:9d:88:22:a2:0d:c8:2a:43:3f:
                    99:e4:5e:75:5e:c0:dd:71:f5:e1:35:b5:b9:4b:ee:
                    e5:41:9b:01:e6:57:e8:7d:d9:b2:3a:cb:d1:b8:ad:
                    fd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:63:2D:45:23:C4:28:84:8C:B3:B0:DD:A9:7E:0F:11:71:E8:38:CB
            X509v3 Authority Key Identifier:
                keyid:1A:7D:3D:E7:82:3D:7B:9E:72:19:C8:65:9E:76:99:9F:12:0E:0D:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/1A7D3DE7823D7B9E7219C8659E76999F120E0DD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/1A7D3DE7823D7B9E7219C8659E76999F120E0DD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/326130613a363034353a666530303a3a2f34302d3438203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:fe00::/40

    Signature Algorithm: sha256WithRSAEncryption
         34:54:ba:9e:1d:7d:80:0c:a3:1e:5c:9e:c7:0b:b5:7a:29:d7:
         2e:eb:22:12:4a:6b:e0:36:9c:f4:b3:67:3e:eb:75:fe:a3:8c:
         23:0b:ae:c0:36:6c:d8:f2:27:7e:17:7a:a0:ac:5b:bb:d0:78:
         0f:22:de:1a:6b:4e:67:77:c9:2a:93:6c:9b:92:d3:ad:fe:a6:
         f8:e1:9a:6d:28:1a:7b:fb:60:52:6b:05:3f:40:93:13:40:db:
         ef:7d:64:39:0c:f3:f7:e7:ce:a5:99:4a:24:83:0f:12:c2:81:
         7f:c2:31:e6:55:0e:27:77:ed:7e:63:06:00:30:87:40:ae:4c:
         7e:2a:75:0d:6a:c5:c4:b5:26:12:39:e0:35:ee:cf:92:7f:c1:
         fa:f7:2c:31:2a:02:1d:6d:7a:80:18:bb:25:a9:9a:d5:c2:2e:
         c4:8b:c3:d0:4a:76:78:ea:dc:4f:9e:32:ba:72:0b:a9:c7:f7:
         d1:cb:f7:ee:a3:9c:c8:be:e8:27:32:22:08:e5:c1:fb:de:3a:
         41:7e:20:27:b4:f9:50:ce:fc:65:da:ce:1e:d0:52:19:e8:bb:
         fd:92:71:9f:0a:b1:6a:79:75:be:a4:38:7d:85:3f:46:21:9a:
         64:84:17:a5:05:20:86:dd:b1:77:9d:67:53:70:ac:82:66:8a:
         ac:29:76:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----