Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/326130613a363034353a666630303a3a2f34302d3438203d3e20323030313630.roa
File:                     326130613a363034353a666630303a3a2f34302d3438203d3e20323030313630.roa (raw, json)
Hash identifier:          nl30oysHLAIrKd2hYUZPUPtLZp4k2R2FFg1baOFb3l4=
Subject key identifier:   BB:07:28:0A:10:66:7E:8D:3E:27:60:A5:83:0A:56:E4:BD:2F:6E:9B
Certificate issuer:       /CN=1A7D3DE7823D7B9E7219C8659E76999F120E0DD3
Certificate serial:       0712166773465253A38521A4761BE60D7F9D4B4F
Authority key identifier: 1A:7D:3D:E7:82:3D:7B:9E:72:19:C8:65:9E:76:99:9F:12:0E:0D:D3
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/1A7D3DE7823D7B9E7219C8659E76999F120E0DD3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/326130613a363034353a666630303a3a2f34302d3438203d3e20323030313630.roa
Signing time:             Tue 23 Jul 2024 19:49:34 +0000
ROA not before:           Tue 23 Jul 2024 19:44:34 +0000
ROA not after:            Tue 22 Jul 2025 19:49:34 +0000
asID:                     200160
IP address blocks:        2a0a:6045:ff00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:12:16:67:73:46:52:53:a3:85:21:a4:76:1b:e6:0d:7f:9d:4b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A7D3DE7823D7B9E7219C8659E76999F120E0DD3
        Validity
            Not Before: Jul 23 19:44:34 2024 GMT
            Not After : Jul 22 19:49:34 2025 GMT
        Subject: CN=BB07280A10667E8D3E2760A5830A56E4BD2F6E9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:40:3c:25:6a:a2:03:87:32:f6:96:21:d5:4f:
                    06:50:c5:7f:dd:f8:68:c0:5a:ef:60:44:79:8b:ad:
                    c9:e4:e8:f7:2a:36:6a:28:03:a9:f0:a0:45:47:11:
                    de:2e:a2:30:3e:74:70:76:7f:99:d8:ee:8c:b8:87:
                    78:69:05:26:74:1d:5d:16:81:16:c4:24:8e:31:86:
                    31:e0:9b:89:94:35:bf:c2:da:4d:89:f8:a2:81:74:
                    dc:89:ee:12:8a:b3:d7:4e:64:45:2f:7a:f3:19:e0:
                    8f:ff:3a:dc:b6:31:85:03:c3:16:91:e3:3c:b2:2c:
                    ad:f2:98:c6:23:ec:92:4c:83:0e:75:35:af:7e:02:
                    39:8e:6b:6c:b1:b8:b3:10:29:0f:f6:a4:c4:c8:6e:
                    c9:df:c3:89:a2:71:96:4d:e3:a0:2b:bf:38:48:34:
                    df:da:9a:08:a0:d9:d6:7f:88:98:ed:74:53:89:84:
                    1d:cd:dd:94:a9:54:0b:0e:0f:c4:d1:3a:f3:bc:38:
                    50:de:34:a8:6b:90:06:2a:ef:26:e2:6c:f9:e9:d8:
                    07:c6:11:1b:ff:d2:89:e5:5d:e4:de:40:8b:de:7b:
                    b5:78:4f:69:55:8d:fb:fc:15:07:f6:1e:c7:3a:fe:
                    c3:35:73:c4:0c:24:22:40:55:3b:f8:9b:5c:4a:9c:
                    9f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:07:28:0A:10:66:7E:8D:3E:27:60:A5:83:0A:56:E4:BD:2F:6E:9B
            X509v3 Authority Key Identifier:
                keyid:1A:7D:3D:E7:82:3D:7B:9E:72:19:C8:65:9E:76:99:9F:12:0E:0D:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/1A7D3DE7823D7B9E7219C8659E76999F120E0DD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/1A7D3DE7823D7B9E7219C8659E76999F120E0DD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/326130613a363034353a666630303a3a2f34302d3438203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         64:ec:13:d3:5f:cb:e6:0f:66:82:eb:b4:b9:c1:fc:4a:50:7e:
         be:60:b0:a7:16:37:42:93:4b:d3:ab:bc:56:36:4a:7b:37:bb:
         4b:eb:dc:36:14:e8:de:34:6b:a1:12:8e:72:1b:0e:aa:63:00:
         28:df:47:14:b4:cb:62:0d:ad:f5:f1:ce:93:ce:2f:8e:41:c0:
         9f:99:54:ac:75:10:4d:b2:a8:ff:4b:a5:a9:60:36:17:57:e3:
         8e:73:f9:d5:1c:19:18:11:5c:1a:c8:c7:90:73:44:ee:ed:b0:
         a8:3a:9d:81:c2:a6:fb:77:f9:08:6c:73:6b:a2:db:8c:11:d8:
         25:cd:87:cc:29:40:bd:bc:6d:68:21:c2:cd:10:77:32:2d:95:
         40:4e:23:78:71:75:44:5a:a1:9c:f0:cd:00:84:00:b1:2d:fd:
         7c:cd:d6:68:10:ea:41:32:fc:b2:0f:61:77:44:d2:8b:a0:55:
         c7:b3:76:ae:9f:bd:f8:91:ed:e3:d2:5b:ac:7c:e1:2d:23:6f:
         ff:10:35:76:15:d4:b0:a3:ae:37:e8:fc:08:96:07:26:e1:c3:
         f2:25:a4:19:3d:01:e5:09:b1:77:c6:a0:c7:dd:89:ab:ea:44:
         29:02:84:ba:63:22:47:fa:ff:75:09:58:da:54:ae:c1:66:4a:
         8f:6a:cc:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----