Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2777cfa2-1052-413c-83ed-36dc62f6da38/0/323030313a3637633a6265343a3a2f34382d3438203d3e20323036323731.roa
File:                     323030313a3637633a6265343a3a2f34382d3438203d3e20323036323731.roa (raw, json)
Hash identifier:          s9rJnDCXYbfzEncN/ERH+ZAWZY3bMUGYRdi7nB5vwa8=
Subject key identifier:   F6:56:23:0D:9C:2B:1A:1E:51:07:78:72:2C:4A:79:0A:45:37:69:2D
Certificate issuer:       /CN=5ef3711a2c62cd6ddb6ec0e53dd3717249b1149b
Certificate serial:       0DEDEAB95A48CEA8123F3CDA7C7643FAC73CB9A8
Authority key identifier: 5E:F3:71:1A:2C:62:CD:6D:DB:6E:C0:E5:3D:D3:71:72:49:B1:14:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XvNxGixizW3bbsDlPdNxckmxFJs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2777cfa2-1052-413c-83ed-36dc62f6da38/0/323030313a3637633a6265343a3a2f34382d3438203d3e20323036323731.roa
Signing time:             Wed 19 Apr 2023 07:31:14 +0000
ROA not before:           Wed 19 Apr 2023 07:26:14 +0000
ROA not after:            Wed 17 Apr 2024 07:31:14 +0000
asID:                     206271
IP address blocks:        2001:67c:be4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ed:ea:b9:5a:48:ce:a8:12:3f:3c:da:7c:76:43:fa:c7:3c:b9:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ef3711a2c62cd6ddb6ec0e53dd3717249b1149b
        Validity
            Not Before: Apr 19 07:26:14 2023 GMT
            Not After : Apr 17 07:31:14 2024 GMT
        Subject: CN=F656230D9C2B1A1E510778722C4A790A4537692D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:31:12:11:60:d9:65:27:65:98:3a:53:e3:7a:
                    89:57:e6:2a:23:e0:4f:72:1a:db:99:ff:a6:43:f8:
                    44:5b:88:09:ac:cd:e2:7a:0e:87:e3:d4:fe:d1:bd:
                    35:7c:91:80:64:b8:06:03:93:a2:44:23:f1:99:30:
                    55:c2:b3:8d:81:de:bb:f8:8d:e1:35:7b:96:8d:5a:
                    55:18:21:4b:8f:06:04:c7:de:70:39:b6:c9:61:36:
                    d2:ec:27:a2:35:17:38:3f:9b:7e:9f:3d:ec:7d:64:
                    54:bb:f6:b6:af:c0:64:7e:95:ea:5b:ed:00:f6:46:
                    cc:f5:51:23:02:c5:19:c1:99:cc:fc:b3:c3:31:ee:
                    2a:8b:36:3f:9a:9e:6c:23:e7:24:1b:ee:a6:98:8a:
                    c7:62:b0:f8:69:e4:e9:29:0a:9e:1c:70:68:8f:e1:
                    e4:d8:44:37:db:58:fe:34:2f:42:67:5c:b4:64:74:
                    06:1c:06:2a:7f:ef:29:06:23:ff:b8:11:8a:04:de:
                    fb:ba:82:b6:34:18:96:1c:27:f6:37:1b:fa:e4:92:
                    be:08:e4:cc:be:8d:13:a0:57:12:1a:c0:c4:e7:05:
                    81:8e:eb:de:71:4a:39:aa:4c:95:24:e9:b7:f3:1e:
                    90:ab:77:82:fd:50:36:b8:b8:bb:65:9f:66:20:18:
                    e0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:56:23:0D:9C:2B:1A:1E:51:07:78:72:2C:4A:79:0A:45:37:69:2D
            X509v3 Authority Key Identifier:
                keyid:5E:F3:71:1A:2C:62:CD:6D:DB:6E:C0:E5:3D:D3:71:72:49:B1:14:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2777cfa2-1052-413c-83ed-36dc62f6da38/0/5EF3711A2C62CD6DDB6EC0E53DD3717249B1149B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvNxGixizW3bbsDlPdNxckmxFJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2777cfa2-1052-413c-83ed-36dc62f6da38/0/323030313a3637633a6265343a3a2f34382d3438203d3e20323036323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:be4::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:80:a6:df:56:8f:ce:40:79:c7:27:48:dd:e4:80:74:84:c7:
         45:3a:07:ca:fb:d2:f6:dc:cb:eb:42:f3:4c:8e:87:d7:cf:d0:
         d7:ee:a6:6f:50:52:2e:21:8e:61:23:2b:b0:69:33:5b:81:25:
         d3:d7:f0:22:0d:5d:a5:28:9a:b4:d8:20:35:1c:01:4f:aa:a7:
         74:be:24:af:50:d2:e9:45:14:15:7b:76:e4:b4:b8:5f:95:ea:
         b8:8f:55:01:44:a3:f7:a4:54:16:66:12:ad:f6:b8:af:bd:00:
         4e:47:f0:36:a1:62:4f:c8:4a:87:23:b1:54:72:f3:5b:70:99:
         77:25:1f:3b:60:7c:02:67:d1:54:9f:15:72:bf:ee:57:5b:61:
         1c:87:05:9c:91:4b:e3:7b:2e:16:b2:41:31:92:71:92:71:b2:
         3e:e4:7a:c1:8a:07:d5:aa:16:1a:38:3e:3e:d0:02:82:c9:ab:
         e5:b5:de:54:23:2b:a4:48:98:55:e1:fd:c0:36:8c:38:e8:34:
         80:cd:8a:36:17:13:76:34:0c:85:1c:f3:d1:3f:c1:b5:3c:d6:
         87:74:18:f1:8c:57:fb:d6:da:9e:8e:ac:84:06:59:f0:a2:bf:
         ef:f7:b7:9e:4d:e6:c2:bb:2c:74:df:85:59:a0:0e:4d:8e:49:
         67:00:87:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----