Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/326130613a363034353a666630353a3a2f34382d3438203d3e20323030313630.roa
File:                     326130613a363034353a666630353a3a2f34382d3438203d3e20323030313630.roa (raw, json)
Hash identifier:          NRZJB15+aBC2dtN5a+wxYtdjMiAcf9mLZyRoOXP/7WE=
Subject key identifier:   8C:97:AE:66:03:D0:CA:77:82:59:9E:E5:3C:0D:3D:CF:EF:3E:26:C5
Certificate issuer:       /CN=1A7D3DE7823D7B9E7219C8659E76999F120E0DD3
Certificate serial:       79C30681E89A445FC6AB13E9FB0B61A83F5688EB
Authority key identifier: 1A:7D:3D:E7:82:3D:7B:9E:72:19:C8:65:9E:76:99:9F:12:0E:0D:D3
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/1A7D3DE7823D7B9E7219C8659E76999F120E0DD3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/326130613a363034353a666630353a3a2f34382d3438203d3e20323030313630.roa
Signing time:             Tue 23 Jul 2024 19:49:38 +0000
ROA not before:           Tue 23 Jul 2024 19:44:38 +0000
ROA not after:            Tue 22 Jul 2025 19:49:38 +0000
asID:                     200160
IP address blocks:        2a0a:6045:ff05::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c3:06:81:e8:9a:44:5f:c6:ab:13:e9:fb:0b:61:a8:3f:56:88:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A7D3DE7823D7B9E7219C8659E76999F120E0DD3
        Validity
            Not Before: Jul 23 19:44:38 2024 GMT
            Not After : Jul 22 19:49:38 2025 GMT
        Subject: CN=8C97AE6603D0CA7782599EE53C0D3DCFEF3E26C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7f:f7:99:b2:46:a0:43:d4:00:0c:13:75:1d:
                    a9:d5:14:92:1a:76:90:c4:45:54:2f:9d:fb:79:02:
                    1e:ca:39:30:18:e8:dc:a9:bb:4c:d0:9b:4b:72:8b:
                    73:a2:f1:9b:f5:b2:3d:82:e1:dc:6b:c2:7d:7a:d0:
                    49:a6:dc:88:39:b4:6b:10:73:16:41:17:30:fd:c2:
                    d2:ca:86:97:53:c0:33:e1:49:4c:36:cb:a6:bf:7a:
                    59:b4:e6:25:17:88:c3:5d:d1:fa:10:86:f3:6e:19:
                    17:36:9a:f4:03:46:73:1a:7b:7b:44:b3:24:e0:c9:
                    69:d8:2c:6a:e9:91:54:89:8c:f0:a5:74:7c:a9:af:
                    10:60:11:92:05:26:b2:11:0d:61:50:4f:1e:17:60:
                    ef:e0:e4:fe:5d:82:1a:1a:05:3d:f6:6e:e9:6d:a1:
                    7c:76:f3:ed:83:ff:97:b6:5c:d1:35:94:6c:9e:42:
                    06:cb:d4:5a:da:27:20:be:49:91:99:03:cf:ff:24:
                    c5:f4:bd:a0:3b:dd:9e:c7:e8:b6:79:39:7d:ef:ba:
                    8c:74:53:1d:a2:e5:35:80:40:a9:5f:75:77:d5:fd:
                    50:89:57:5e:d1:e6:28:e3:ea:e4:5e:31:b2:89:5b:
                    14:8d:a7:6c:47:7d:30:73:f3:d0:2c:8e:67:42:f2:
                    41:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:97:AE:66:03:D0:CA:77:82:59:9E:E5:3C:0D:3D:CF:EF:3E:26:C5
            X509v3 Authority Key Identifier:
                keyid:1A:7D:3D:E7:82:3D:7B:9E:72:19:C8:65:9E:76:99:9F:12:0E:0D:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/1A7D3DE7823D7B9E7219C8659E76999F120E0DD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/1A7D3DE7823D7B9E7219C8659E76999F120E0DD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/326130613a363034353a666630353a3a2f34382d3438203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:ff05::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:94:9d:eb:27:05:33:cf:2b:56:b7:88:04:09:06:18:e1:97:
         28:74:d4:be:f9:a5:00:8f:f7:86:60:06:24:0f:d2:89:34:c5:
         8d:14:0e:b7:d7:c2:2c:58:cc:f6:03:1b:c1:7e:20:6e:d4:cd:
         a0:29:b3:30:3f:9a:6f:d5:06:4a:c0:b8:38:45:a4:9a:06:fe:
         6d:7a:ef:84:f2:d8:28:e4:42:fa:66:31:71:11:43:22:59:9f:
         55:a1:b7:3d:e2:3a:86:b2:15:0b:9f:61:31:82:ca:dd:40:42:
         0d:a2:ed:3e:d4:ed:ba:8b:96:e7:b4:fb:2b:47:e5:ad:09:7e:
         32:17:42:d2:68:54:00:25:08:b6:f0:3b:6f:85:ba:0b:9c:1a:
         d0:62:01:4c:62:d7:5d:a4:d6:60:c2:ca:f7:09:86:01:f2:ce:
         b4:08:85:15:36:3c:cd:b0:96:4f:9e:38:74:32:4e:33:3d:b4:
         5b:0c:d1:4b:23:e2:61:db:6d:4d:54:7d:01:17:68:1f:8f:ff:
         e1:e4:7a:5b:7c:b8:09:1b:6d:02:f8:ff:e0:a1:33:0a:94:59:
         a8:bf:85:e4:f8:c9:6a:bd:b2:f2:ce:a6:8d:e7:51:3a:75:f8:
         e5:14:9b:2a:9e:d8:26:94:a4:b6:07:b5:22:59:83:5a:c8:01:
         d5:c2:82:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----