Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/326130613a363034353a666630333a3a2f34382d3438203d3e20323030313630.roa
File:                     326130613a363034353a666630333a3a2f34382d3438203d3e20323030313630.roa (raw, json)
Hash identifier:          3zmA0Vf69OFznu4ngd5c+Ekq4rg9t9npNlgE0YHLIOk=
Subject key identifier:   49:93:EC:89:8D:70:4B:E3:A7:FA:4B:30:EB:AB:28:97:12:69:55:4E
Certificate issuer:       /CN=1A7D3DE7823D7B9E7219C8659E76999F120E0DD3
Certificate serial:       3D8B5C8FC28DA1FD6BC8D4AC965769FD6FE722C4
Authority key identifier: 1A:7D:3D:E7:82:3D:7B:9E:72:19:C8:65:9E:76:99:9F:12:0E:0D:D3
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/1A7D3DE7823D7B9E7219C8659E76999F120E0DD3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/326130613a363034353a666630333a3a2f34382d3438203d3e20323030313630.roa
Signing time:             Tue 23 Jul 2024 19:49:41 +0000
ROA not before:           Tue 23 Jul 2024 19:44:41 +0000
ROA not after:            Tue 22 Jul 2025 19:49:41 +0000
asID:                     200160
IP address blocks:        2a0a:6045:ff03::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:8b:5c:8f:c2:8d:a1:fd:6b:c8:d4:ac:96:57:69:fd:6f:e7:22:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A7D3DE7823D7B9E7219C8659E76999F120E0DD3
        Validity
            Not Before: Jul 23 19:44:41 2024 GMT
            Not After : Jul 22 19:49:41 2025 GMT
        Subject: CN=4993EC898D704BE3A7FA4B30EBAB28971269554E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8d:09:3f:81:1e:1c:cd:f4:44:b9:7f:13:37:
                    c9:01:a4:f4:8c:a5:a2:bb:a1:05:10:81:64:0c:09:
                    d2:ae:7f:6e:a7:6a:90:e4:41:c0:d8:a8:7c:17:77:
                    38:e0:90:d5:fb:3d:52:59:93:85:a2:39:5f:ed:76:
                    8e:7d:0d:6f:ad:9e:19:df:eb:c7:a3:98:cb:5c:a2:
                    a5:18:e0:c4:d3:bc:8e:62:0a:4f:5c:1f:72:df:98:
                    2a:6e:5c:9e:a1:f6:aa:fb:53:0b:a3:db:bd:20:d0:
                    1d:5f:d8:a0:d0:99:cb:88:be:7d:df:bd:70:ba:2c:
                    ec:7c:dd:35:5b:03:0b:1c:8b:33:e3:af:31:8d:3d:
                    98:0c:8a:ad:05:cf:6b:74:4f:c8:ef:08:77:9d:ec:
                    4a:b7:a7:75:a7:ab:d6:6f:c3:3d:07:21:30:8e:69:
                    a6:5a:44:8c:9a:17:69:ad:12:ef:02:15:c5:c5:82:
                    e8:32:7e:9c:f8:03:ea:cd:36:f3:2f:dc:1e:e9:1b:
                    03:cc:9a:5e:7e:51:09:3c:69:94:86:e3:39:a9:1a:
                    3e:07:16:a4:8d:72:ba:11:59:de:84:60:5a:ab:61:
                    8a:ad:66:00:ad:82:7d:da:38:72:29:a9:7e:e4:11:
                    bd:28:e9:28:db:65:83:ba:6b:19:36:c7:e4:41:92:
                    71:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:93:EC:89:8D:70:4B:E3:A7:FA:4B:30:EB:AB:28:97:12:69:55:4E
            X509v3 Authority Key Identifier:
                keyid:1A:7D:3D:E7:82:3D:7B:9E:72:19:C8:65:9E:76:99:9F:12:0E:0D:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/1A7D3DE7823D7B9E7219C8659E76999F120E0DD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/1A7D3DE7823D7B9E7219C8659E76999F120E0DD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/326130613a363034353a666630333a3a2f34382d3438203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:ff03::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:3a:cc:dd:9e:fc:0a:b5:a3:d5:d7:11:e4:76:82:aa:9e:43:
         73:26:79:34:be:41:fb:1b:74:86:27:fd:79:1b:50:93:d2:09:
         10:b6:5d:20:eb:07:60:69:fb:e1:a6:23:17:cf:c2:09:d9:d8:
         12:33:a6:4a:a4:ae:da:25:4d:db:d9:53:02:c5:76:74:9e:4d:
         49:94:0f:2c:f3:5f:86:42:fa:84:33:eb:2d:3f:ed:86:60:a8:
         1e:10:e4:36:ec:cf:82:54:9f:86:41:a0:eb:68:f5:ca:bb:f5:
         0c:1d:14:d6:7d:b5:ec:58:7a:b6:e1:49:69:0f:5e:99:1f:c3:
         3f:0f:51:68:c9:e1:3f:93:bd:b7:95:f3:db:d3:5c:ae:da:d2:
         9b:0e:6f:7a:f0:b3:76:37:48:e2:74:96:8d:9f:88:4e:bd:a5:
         6c:bf:8e:ef:70:51:c2:56:8b:01:73:5f:75:38:d0:85:9c:d4:
         e1:5b:4e:6d:ba:46:06:98:99:11:ed:f3:d4:d7:aa:ed:cd:65:
         ab:8f:17:1e:59:a2:b3:62:0b:23:ce:91:02:2f:51:a2:71:d8:
         a2:8f:71:e0:86:7b:ba:3b:a8:78:32:1a:a1:c8:26:a7:a5:11:
         c0:6a:e2:00:43:c6:e4:d4:cc:07:98:e3:4c:d8:a9:d7:f7:b7:
         b9:86:da:7c
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUPYtcj8KNof1ryNSslldp/W/nIsQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE3RDNERTc4MjNEN0I5RTcyMTlDODY1OUU3Njk5OUYx
MjBFMEREMzAeFw0yNDA3MjMxOTQ0NDFaFw0yNTA3MjIxOTQ5NDFaMDMxMTAvBgNV
BAMTKDQ5OTNFQzg5OEQ3MDRCRTNBN0ZBNEIzMEVCQUIyODk3MTI2OTU1NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTjQk/gR4czfREuX8TN8kBpPSM
paK7oQUQgWQMCdKuf26napDkQcDYqHwXdzjgkNX7PVJZk4WiOV/tdo59DW+tnhnf
68ejmMtcoqUY4MTTvI5iCk9cH3LfmCpuXJ6h9qr7Uwuj270g0B1f2KDQmcuIvn3f
vXC6LOx83TVbAwscizPjrzGNPZgMiq0Fz2t0T8jvCHed7Eq3p3Wnq9Zvwz0HITCO
aaZaRIyaF2mtEu8CFcXFgugyfpz4A+rNNvMv3B7pGwPMml5+UQk8aZSG4zmpGj4H
FqSNcroRWd6EYFqrYYqtZgCtgn3aOHIpqX7kEb0o6SjbZYO6axk2x+RBknGPAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUSZPsiY1wS+On+ksw66solxJpVU4wHwYDVR0j
BBgwFoAUGn0954I9e55yGchlnnaZnxIODdMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWUwZDFlNDAtYzRmYy00OTc0LWIxNWYtMzJlNjZkYzY2
NmM5LzMvMUE3RDNERTc4MjNEN0I5RTcyMTlDODY1OUU3Njk5OUYxMjBFMEREMy5j
cmwwdgYIKwYBBQUHAQEEajBoMGYGCCsGAQUFBzAChlpyc3luYzovL3Jwa2kua29t
b3JlYmkubmV0d29yay9yZXBvL2tvbW9yZWJpLzEvMUE3RDNERTc4MjNEN0I5RTcy
MTlDODY1OUU3Njk5OUYxMjBFMEREMy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGk
BggrBgEFBQcwC4aBl3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvMWUwZDFlNDAtYzRmYy00OTc0LWIxNWYtMzJlNjZkYzY2NmM5LzMv
MzI2MTMwNjEzYTM2MzAzNDM1M2E2NjY2MzAzMzNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzAzMDMxMzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoKYEX/AzANBgkqhkiG9w0BAQsF
AAOCAQEAQjrM3Z78CrWj1dcR5HaCqp5DcyZ5NL5B+xt0hif9eRtQk9IJELZdIOsH
YGn74aYjF8/CCdnYEjOmSqSu2iVN29lTAsV2dJ5NSZQPLPNfhkL6hDPrLT/thmCo
HhDkNuzPglSfhkGg62j1yrv1DB0U1n217Fh6tuFJaQ9emR/DPw9RaMnhP5O9t5Xz
29NcrtrSmw5vevCzdjdI4nSWjZ+ITr2lbL+O73BRwlaLAXNfdTjQhZzU4VtObbpG
BpiZEe3z1Neq7c1lq48XHlmis2ILI86RAi9RonHYoo9x4IZ7ujuoeDIaocgmp6UR
wGriAEPG5NTMB5jjTNip1/e3uYbafA==
-----END CERTIFICATE-----