Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/1/326131333a646638303a316631303a3a2f34382d3438203d3e203531363932.roa
File:                     326131333a646638303a316631303a3a2f34382d3438203d3e203531363932.roa (raw, json)
Hash identifier:          bv0tfnqwAC7cUV8y42XrtsZf+7iA2Z2INxElwv4y3Aw=
Subject key identifier:   07:5D:EA:6C:55:D4:75:28:74:41:28:24:FB:D8:2C:3F:B8:F6:14:17
Certificate issuer:       /CN=B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9
Certificate serial:       7FE48AEC5550EEC516057D714657E75EEB8DCC69
Authority key identifier: B3:4D:F9:25:A0:FA:AF:47:E4:E9:46:0A:3D:51:F3:FB:A0:80:79:A9
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/1/326131333a646638303a316631303a3a2f34382d3438203d3e203531363932.roa
Signing time:             Sun 17 Mar 2024 12:20:42 +0000
ROA not before:           Sun 17 Mar 2024 12:15:42 +0000
ROA not after:            Sun 16 Mar 2025 12:20:42 +0000
asID:                     51692
IP address blocks:        2a13:df80:1f10::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e4:8a:ec:55:50:ee:c5:16:05:7d:71:46:57:e7:5e:eb:8d:cc:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9
        Validity
            Not Before: Mar 17 12:15:42 2024 GMT
            Not After : Mar 16 12:20:42 2025 GMT
        Subject: CN=075DEA6C55D4752874412824FBD82C3FB8F61417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:88:72:06:d7:cc:e2:41:8d:00:88:5d:1e:db:
                    6c:e8:40:e3:b5:83:aa:d8:98:53:02:8e:a9:6a:58:
                    61:a9:11:39:08:a5:ed:2c:6f:92:76:d2:24:29:92:
                    f7:5c:98:6b:9b:ea:d0:45:88:ff:71:83:78:6d:b4:
                    cd:b9:0c:68:99:36:07:b3:89:dd:09:51:5e:1c:e7:
                    2b:43:ec:dc:e7:8b:4f:37:d7:9a:40:a0:68:7b:92:
                    7d:61:10:a3:1d:37:f5:f0:00:12:44:0a:bc:17:03:
                    e2:e3:3a:e4:b7:c9:5f:f8:7b:a0:8a:cc:df:4b:e7:
                    7d:8f:fb:5a:5e:cd:d3:c7:17:a1:a3:95:9a:98:b3:
                    da:b2:12:61:4d:9e:42:48:6b:46:ea:9d:0c:15:01:
                    95:41:bc:d4:7f:77:7d:83:ec:be:51:c4:5a:af:18:
                    17:e5:7b:20:8e:d8:c0:68:91:48:44:d4:dc:05:c1:
                    4a:58:da:93:b8:f0:02:6c:ea:2a:19:5b:2b:81:df:
                    b3:fc:33:a0:27:57:27:ee:67:ed:e4:89:a2:cc:47:
                    61:02:57:25:a7:b5:b8:15:53:80:f5:73:7c:d0:1f:
                    2d:84:3a:fa:8d:17:f8:71:6c:5d:4f:af:89:93:e9:
                    90:a2:b9:c2:f8:79:78:79:cd:29:73:13:f5:3f:28:
                    29:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5D:EA:6C:55:D4:75:28:74:41:28:24:FB:D8:2C:3F:B8:F6:14:17
            X509v3 Authority Key Identifier:
                keyid:B3:4D:F9:25:A0:FA:AF:47:E4:E9:46:0A:3D:51:F3:FB:A0:80:79:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/1/B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/1/326131333a646638303a316631303a3a2f34382d3438203d3e203531363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:1f10::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:99:95:27:84:f9:22:d1:78:7d:a3:78:1c:ae:e0:9c:f9:d0:
         7d:6a:37:ea:fd:e7:bc:0e:46:dc:16:87:fb:76:ca:66:2d:81:
         da:41:85:be:46:60:9a:ff:2f:0a:5c:49:9e:15:86:66:3c:be:
         f0:cb:01:0a:f9:71:fd:10:08:f6:6d:29:db:cb:7e:55:d0:db:
         02:1e:a7:3e:7c:8c:8b:86:6e:22:3d:6b:62:70:b6:21:bc:9b:
         d8:c5:bf:b9:e8:0c:4e:72:bd:b0:5b:4e:ce:4a:3d:13:a3:5a:
         1f:88:f4:d5:7a:ab:d2:5f:3f:6f:2b:f5:9a:c5:98:31:98:2b:
         e8:0e:2c:42:58:94:9e:50:d3:fd:a6:58:86:1c:c3:5c:cb:c8:
         fa:0f:8e:7b:e9:06:ad:04:f7:1b:0b:34:71:8f:ce:44:e8:94:
         ad:9c:9f:a8:48:a2:fa:25:0f:7c:ec:df:c1:59:e5:48:19:12:
         54:7e:da:59:c0:f1:a9:65:26:13:22:8e:74:e4:f3:e0:2d:bb:
         ba:2b:20:4d:0f:cd:5b:90:ff:2e:d2:d6:2e:3a:27:0a:d0:2a:
         5d:9a:bb:90:23:23:e5:80:9b:b6:4b:ff:16:1e:d4:2b:f2:04:
         ee:7e:b2:57:d5:36:43:27:0b:be:2c:8c:be:e7:3d:00:c6:e9:
         de:42:5b:f4
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgIUf+SK7FVQ7sUWBX1xRlfnXuuNzGkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM0REY5MjVBMEZBQUY0N0U0RTk0NjBBM0Q1MUYzRkJB
MDgwNzlBOTAeFw0yNDAzMTcxMjE1NDJaFw0yNTAzMTYxMjIwNDJaMDMxMTAvBgNV
BAMTKDA3NURFQTZDNTVENDc1Mjg3NDQxMjgyNEZCRDgyQzNGQjhGNjE0MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8iHIG18ziQY0AiF0e22zoQOO1
g6rYmFMCjqlqWGGpETkIpe0sb5J20iQpkvdcmGub6tBFiP9xg3httM25DGiZNgez
id0JUV4c5ytD7Nzni08315pAoGh7kn1hEKMdN/XwABJECrwXA+LjOuS3yV/4e6CK
zN9L532P+1pezdPHF6GjlZqYs9qyEmFNnkJIa0bqnQwVAZVBvNR/d32D7L5RxFqv
GBfleyCO2MBokUhE1NwFwUpY2pO48AJs6ioZWyuB37P8M6AnVyfuZ+3kiaLMR2EC
VyWntbgVU4D1c3zQHy2EOvqNF/hxbF1Pr4mT6ZCiucL4eXh5zSlzE/U/KCndAgMB
AAGjggKDMIICfzAdBgNVHQ4EFgQUB13qbFXUdSh0QSgk+9gsP7j2FBcwHwYDVR0j
BBgwFoAUs035JaD6r0fk6UYKPVHz+6CAeakwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvM2U5MGEzYzUtM2YzOC00ZGRmLWIyY2EtYTRkNTJhY2Uz
YzE0LzEvQjM0REY5MjVBMEZBQUY0N0U0RTk0NjBBM0Q1MUYzRkJBMDgwNzlBOS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wNDAzMmM4Zi0xZDU3LTRj
M2ItOTA0My1hMGU3ZmViZjE2N2QvMC9CMzRERjkyNUEwRkFBRjQ3RTRFOTQ2MEEz
RDUxRjNGQkEwODA3OUE5LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF
BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8zZTkwYTNjNS0zZjM4LTRkZGYtYjJjYS1hNGQ1MmFjZTNjMTQvMS8zMjYxMzEz
MzNhNjQ2NjM4MzAzYTMxNjYzMTMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzUz
MTM2MzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB
BwEB/wQTMBEwDwQCAAIwCQMHACoT34AfEDANBgkqhkiG9w0BAQsFAAOCAQEAVpmV
J4T5ItF4faN4HK7gnPnQfWo36v3nvA5G3BaH+3bKZi2B2kGFvkZgmv8vClxJnhWG
Zjy+8MsBCvlx/RAI9m0p28t+VdDbAh6nPnyMi4ZuIj1rYnC2Ibyb2MW/uegMTnK9
sFtOzko9E6NaH4j01Xqr0l8/byv1msWYMZgr6A4sQliUnlDT/aZYhhzDXMvI+g+O
e+kGrQT3Gws0cY/OROiUrZyfqEii+iUPfOzfwVnlSBkSVH7aWcDxqWUmEyKOdOTz
4C27uisgTQ/NW5D/LtLWLjonCtAqXZq7kCMj5YCbtkv/Fh7UK/IE7n6yV9U2QycL
viyMvuc9AMbp3kJb9A==
-----END CERTIFICATE-----