Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/326130613a363034353a666630613a3a2f34382d3438203d3e20323030313630.roa
File:                     326130613a363034353a666630613a3a2f34382d3438203d3e20323030313630.roa (raw, json)
Hash identifier:          URwMeMeRexXB9JQXQApRBp0QC+9pU9MrrgVkU77tRo4=
Subject key identifier:   BF:84:4C:AA:21:52:01:59:D5:76:B1:A3:74:A5:8C:90:C0:C4:B6:46
Certificate issuer:       /CN=1A7D3DE7823D7B9E7219C8659E76999F120E0DD3
Certificate serial:       72BA067EBF3C29A56479AFA2EAD0597D55A20F84
Authority key identifier: 1A:7D:3D:E7:82:3D:7B:9E:72:19:C8:65:9E:76:99:9F:12:0E:0D:D3
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/1A7D3DE7823D7B9E7219C8659E76999F120E0DD3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/326130613a363034353a666630613a3a2f34382d3438203d3e20323030313630.roa
Signing time:             Tue 23 Jul 2024 19:49:36 +0000
ROA not before:           Tue 23 Jul 2024 19:44:36 +0000
ROA not after:            Tue 22 Jul 2025 19:49:36 +0000
asID:                     200160
IP address blocks:        2a0a:6045:ff0a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ba:06:7e:bf:3c:29:a5:64:79:af:a2:ea:d0:59:7d:55:a2:0f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A7D3DE7823D7B9E7219C8659E76999F120E0DD3
        Validity
            Not Before: Jul 23 19:44:36 2024 GMT
            Not After : Jul 22 19:49:36 2025 GMT
        Subject: CN=BF844CAA21520159D576B1A374A58C90C0C4B646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b7:26:8e:0d:bd:2a:b4:08:ea:bb:f8:70:75:
                    01:ef:57:98:04:bd:b0:f7:5b:a8:ea:9a:c8:67:4a:
                    c7:58:c8:eb:5b:15:80:84:57:83:7e:60:f9:e9:c3:
                    85:d1:ac:27:c7:e7:36:70:d9:1b:1d:57:3d:13:de:
                    30:b7:50:71:dc:70:5b:a2:27:39:84:b6:95:d3:21:
                    37:35:27:cc:b1:0e:c8:85:e0:06:96:04:24:ce:4b:
                    0a:92:ce:51:f3:dd:5f:54:af:5d:ff:57:3d:e1:a2:
                    1f:0c:c1:c2:30:b5:52:b4:ef:36:f0:70:d9:e8:96:
                    87:83:6d:75:0e:2a:c4:ff:00:a1:df:8a:79:16:bd:
                    eb:85:ac:db:81:39:cf:22:c3:d2:fe:45:6b:1c:2e:
                    ba:ac:6d:5b:6c:83:89:cc:08:10:36:94:80:6c:06:
                    a2:7f:01:29:5c:20:df:26:05:5f:ca:cd:2b:f1:27:
                    62:2f:32:68:45:b3:41:93:02:c6:03:13:d9:3b:0d:
                    45:72:94:0f:8c:6d:34:e9:a8:3a:ac:ca:88:66:2a:
                    fd:30:2c:3f:49:c9:25:d9:c0:f5:d4:d1:f4:cf:f7:
                    67:4b:46:f4:ef:9b:6e:6b:f7:8f:cc:37:cd:93:60:
                    b8:04:b1:47:2f:11:12:8c:3b:03:88:0c:e0:f2:7c:
                    42:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:84:4C:AA:21:52:01:59:D5:76:B1:A3:74:A5:8C:90:C0:C4:B6:46
            X509v3 Authority Key Identifier:
                keyid:1A:7D:3D:E7:82:3D:7B:9E:72:19:C8:65:9E:76:99:9F:12:0E:0D:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/1A7D3DE7823D7B9E7219C8659E76999F120E0DD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/1A7D3DE7823D7B9E7219C8659E76999F120E0DD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/326130613a363034353a666630613a3a2f34382d3438203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:ff0a::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:8c:67:3e:96:53:70:1a:67:3f:63:02:e6:5e:0f:75:62:a6:
         0a:55:bd:2d:36:c9:6d:4b:53:74:1c:ec:3e:f0:c7:23:e4:44:
         ca:8a:54:dd:82:0a:47:cc:d2:86:82:c1:20:c3:f1:83:40:7d:
         b4:40:ad:95:93:92:20:5a:d0:b6:5e:7a:c5:3c:23:97:21:fd:
         8f:62:9a:c3:aa:ad:c9:62:59:db:25:9a:67:45:26:75:25:6f:
         2d:9a:6c:40:0f:2f:45:52:43:1e:c3:4c:20:1e:79:58:11:eb:
         47:f7:c0:32:3d:37:62:18:2a:6f:69:bd:08:ac:10:c4:9f:87:
         fb:7b:93:d1:25:e4:f9:e9:6c:b5:ad:da:85:3d:b6:fb:4b:bf:
         4f:f4:d0:28:e3:c1:96:1d:4f:53:98:19:9f:b1:3d:b9:1e:53:
         6f:cc:29:70:f8:15:d6:6b:83:7e:1d:27:70:62:a9:34:cc:49:
         f0:39:67:8a:52:7a:d7:85:04:b1:6e:99:33:c4:a6:2b:29:0a:
         cf:15:d1:6c:e1:5c:82:da:9d:a1:12:d0:ad:3e:0d:0d:3d:2e:
         34:14:61:5c:59:6c:d3:cb:e6:e4:3e:d2:75:de:29:02:05:22:
         23:5e:97:dd:ea:d3:0b:90:e5:82:db:fe:65:98:9c:60:eb:a9:
         5f:e6:b0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----