Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/326130613a363034353a666630633a3a2f34382d3438203d3e20323030313630.roa
File:                     326130613a363034353a666630633a3a2f34382d3438203d3e20323030313630.roa (raw, json)
Hash identifier:          mTjXilF36kADl4ggS6mQMzHJ0i22UcLSM4yZbBo0Klw=
Subject key identifier:   EA:74:AB:53:17:6B:A4:64:B9:B9:95:86:AF:E4:42:AB:22:24:6D:B5
Certificate issuer:       /CN=1A7D3DE7823D7B9E7219C8659E76999F120E0DD3
Certificate serial:       7820F9001F8CF6D61EBE46B2251CA93B84301C57
Authority key identifier: 1A:7D:3D:E7:82:3D:7B:9E:72:19:C8:65:9E:76:99:9F:12:0E:0D:D3
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/1A7D3DE7823D7B9E7219C8659E76999F120E0DD3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/326130613a363034353a666630633a3a2f34382d3438203d3e20323030313630.roa
Signing time:             Tue 23 Jul 2024 19:49:39 +0000
ROA not before:           Tue 23 Jul 2024 19:44:39 +0000
ROA not after:            Tue 22 Jul 2025 19:49:39 +0000
asID:                     200160
IP address blocks:        2a0a:6045:ff0c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:20:f9:00:1f:8c:f6:d6:1e:be:46:b2:25:1c:a9:3b:84:30:1c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A7D3DE7823D7B9E7219C8659E76999F120E0DD3
        Validity
            Not Before: Jul 23 19:44:39 2024 GMT
            Not After : Jul 22 19:49:39 2025 GMT
        Subject: CN=EA74AB53176BA464B9B99586AFE442AB22246DB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c9:69:7c:f8:d3:74:d9:12:ac:a7:bc:2b:00:
                    08:7a:a9:8a:7a:fc:55:2b:c2:67:ca:ce:1e:17:10:
                    c5:1f:34:65:1c:ab:c9:29:7f:20:da:e6:89:8c:ec:
                    60:ce:76:7e:8e:fe:de:f5:ac:2d:a8:07:a3:11:19:
                    e6:6c:d1:43:80:50:74:db:f4:9f:00:92:61:7f:5f:
                    51:f3:71:be:36:03:1c:65:90:36:d2:14:e5:30:66:
                    d9:c4:05:95:de:7c:ed:31:d3:44:48:d1:39:15:cb:
                    8c:8b:8c:c0:15:83:dc:d6:82:7c:5e:f3:00:3b:34:
                    2d:f3:0b:93:4d:95:51:b3:83:5b:bf:24:de:8f:fe:
                    d5:cf:66:c1:73:6f:88:79:c9:bf:bd:b3:99:00:90:
                    7d:67:0b:7e:fa:02:b7:83:e6:f3:4b:e0:76:71:5d:
                    9d:7d:18:38:8a:52:b9:d8:47:08:6d:ca:47:94:29:
                    70:aa:7e:39:fc:bf:5e:4b:5e:81:f3:37:0d:32:19:
                    0d:2d:7f:cb:d5:af:4b:57:a9:ea:04:5c:32:93:db:
                    99:3a:f3:c8:f9:61:48:f5:5c:6b:31:ec:95:af:e8:
                    b8:d4:48:48:60:bb:3f:95:35:1a:78:37:68:ec:a7:
                    99:fe:26:a5:6a:f8:f8:b6:e9:ed:54:50:86:96:b9:
                    23:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:74:AB:53:17:6B:A4:64:B9:B9:95:86:AF:E4:42:AB:22:24:6D:B5
            X509v3 Authority Key Identifier:
                keyid:1A:7D:3D:E7:82:3D:7B:9E:72:19:C8:65:9E:76:99:9F:12:0E:0D:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/1A7D3DE7823D7B9E7219C8659E76999F120E0DD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/1A7D3DE7823D7B9E7219C8659E76999F120E0DD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/326130613a363034353a666630633a3a2f34382d3438203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:ff0c::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:af:9c:3e:3d:c0:d3:21:01:33:0b:01:22:b7:7e:e1:60:e3:
         7a:6b:3a:b3:55:9a:69:ac:14:94:e0:fb:98:e2:b8:1c:2f:e7:
         fa:0b:d9:09:ae:2c:8f:cb:e4:56:f6:53:db:d0:5a:81:e3:60:
         95:3d:44:26:ab:17:60:e4:a7:34:09:c8:5e:16:94:4b:73:2f:
         c3:01:04:94:34:e0:11:c0:b6:d9:18:d6:64:69:86:6e:d0:fb:
         c1:54:87:da:ce:51:e9:36:c6:17:eb:f8:fd:57:da:b7:40:d2:
         fd:95:c3:78:8d:2f:5c:03:1d:b5:52:1d:d0:09:15:e6:93:fa:
         16:63:ca:e1:76:89:15:cb:d0:f9:dd:8e:61:89:89:99:bf:36:
         3d:33:d2:f4:44:4c:0d:da:76:2c:bc:96:37:c5:da:82:f1:20:
         89:11:e7:7c:63:a3:16:2d:e0:ff:5d:39:e1:1d:f5:36:d3:98:
         24:57:a1:48:a6:2f:7a:6c:50:15:aa:d9:f0:6b:0d:bf:6b:e8:
         75:96:56:7d:ff:99:8c:42:b2:95:80:e3:8a:16:4f:9c:7f:d8:
         45:87:51:d6:74:c6:08:d7:d7:af:8d:4f:91:3d:de:eb:79:e7:
         01:ac:0a:30:2f:90:b7:25:4b:ec:6b:5d:c2:f2:3e:eb:0b:7e:
         b5:34:b3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----