Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/326130613a363034353a666630383a3a2f34382d3438203d3e20323030313630.roa
File:                     326130613a363034353a666630383a3a2f34382d3438203d3e20323030313630.roa (raw, json)
Hash identifier:          9Jq+aukYTlrPGl9d9khDViWbeyMp2vhgGqLWz4niN2s=
Subject key identifier:   47:29:B6:98:5F:4A:33:28:8D:07:54:69:0B:5D:BC:72:D7:3F:EE:0A
Certificate issuer:       /CN=1A7D3DE7823D7B9E7219C8659E76999F120E0DD3
Certificate serial:       4C10AA934C51B976A15316007F890E0639C00BBA
Authority key identifier: 1A:7D:3D:E7:82:3D:7B:9E:72:19:C8:65:9E:76:99:9F:12:0E:0D:D3
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/1A7D3DE7823D7B9E7219C8659E76999F120E0DD3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/326130613a363034353a666630383a3a2f34382d3438203d3e20323030313630.roa
Signing time:             Tue 23 Jul 2024 19:49:35 +0000
ROA not before:           Tue 23 Jul 2024 19:44:35 +0000
ROA not after:            Tue 22 Jul 2025 19:49:35 +0000
asID:                     200160
IP address blocks:        2a0a:6045:ff08::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:10:aa:93:4c:51:b9:76:a1:53:16:00:7f:89:0e:06:39:c0:0b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A7D3DE7823D7B9E7219C8659E76999F120E0DD3
        Validity
            Not Before: Jul 23 19:44:35 2024 GMT
            Not After : Jul 22 19:49:35 2025 GMT
        Subject: CN=4729B6985F4A33288D0754690B5DBC72D73FEE0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:18:4b:3d:ef:df:ff:46:72:f9:fd:3d:fe:b1:
                    68:96:55:b3:01:30:29:09:b1:2f:e8:0b:d5:6f:1f:
                    a1:70:b6:6e:a3:b7:d7:e0:ae:17:68:d7:19:1a:2c:
                    62:f2:f2:d1:f7:5c:cc:fa:a9:32:d2:b2:76:5c:5f:
                    8c:4b:d2:97:74:c3:9a:18:c3:9f:a7:d9:30:96:59:
                    08:b5:33:c9:3d:65:ac:d4:02:15:b9:e1:7b:33:06:
                    c2:70:46:3a:b1:10:0a:24:76:22:17:dd:e3:a6:3b:
                    e9:a0:10:07:bd:aa:fd:5d:ec:55:c7:9c:8d:4d:fc:
                    8d:2f:01:7c:dc:94:6d:de:ed:e6:11:21:19:9c:b3:
                    7c:33:7a:70:31:aa:f4:fc:40:dd:71:9b:53:5d:9e:
                    0d:85:cd:14:dd:56:90:12:aa:08:08:8d:f7:b9:a9:
                    8f:e8:07:61:9c:85:6f:30:6c:d2:38:21:09:3f:ae:
                    13:21:66:22:87:73:52:15:55:75:e9:97:d3:02:a1:
                    ee:d5:5c:17:ec:df:37:b7:fd:66:36:0a:0d:e6:47:
                    9e:62:c9:79:86:9a:8b:ea:31:87:aa:ed:3d:3e:d9:
                    ea:80:02:38:21:e0:2b:dd:d9:4e:3a:7c:d6:f8:41:
                    ee:44:cb:15:7d:08:9f:93:b3:2a:44:9d:d8:7b:b6:
                    37:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:29:B6:98:5F:4A:33:28:8D:07:54:69:0B:5D:BC:72:D7:3F:EE:0A
            X509v3 Authority Key Identifier:
                keyid:1A:7D:3D:E7:82:3D:7B:9E:72:19:C8:65:9E:76:99:9F:12:0E:0D:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/1A7D3DE7823D7B9E7219C8659E76999F120E0DD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/1A7D3DE7823D7B9E7219C8659E76999F120E0DD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/326130613a363034353a666630383a3a2f34382d3438203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:ff08::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:39:4b:e0:a1:75:84:77:f0:8a:1d:e5:e3:c7:f7:d5:94:11:
         31:43:67:10:6e:d4:50:5c:be:d7:01:b7:21:d0:f4:de:da:b5:
         f5:95:2e:46:28:6c:0e:c6:25:16:52:ee:54:65:f4:86:e7:b8:
         ac:1f:2b:ff:9b:cb:88:c3:9b:e3:9f:e3:50:ee:28:db:a1:f0:
         31:54:1a:ed:95:5c:1b:07:c7:b8:8b:93:e6:e9:cd:81:fa:55:
         ef:e9:f8:fa:71:6a:7b:0c:9b:9b:57:ce:cf:ea:ab:4e:e5:af:
         4f:3c:45:cf:64:d1:1f:06:61:1a:85:7f:20:69:a9:a5:71:3d:
         df:df:71:6b:66:b0:bc:e2:5d:2b:57:12:97:34:67:c3:ca:11:
         f8:49:ac:c5:6e:c8:06:18:b0:cc:08:9b:f2:82:a3:89:2b:2b:
         17:16:3b:28:46:69:7a:76:de:de:e5:5d:fb:e4:dc:19:05:56:
         e1:39:a6:8f:7f:d8:ca:01:08:c0:c3:09:6e:bf:4a:ee:00:2e:
         36:32:28:4a:8f:c1:0b:22:88:e7:ef:6c:27:77:b7:92:25:29:
         a0:70:86:d9:dc:59:75:d9:f1:36:9e:cc:83:44:e5:2e:1b:53:
         d5:55:e9:d3:53:5f:41:e2:64:34:60:2a:d4:44:8f:96:54:65:
         07:e5:3f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----