Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/1/326131333a646638303a316631353a3a2f34382d3438203d3e203531363932.roa
File:                     326131333a646638303a316631353a3a2f34382d3438203d3e203531363932.roa (raw, json)
Hash identifier:          aI+a8KzyTshLwhW4aOZd8kWBpXb349vRriMcyqWfEZQ=
Subject key identifier:   AE:C9:FD:07:3C:5E:1A:77:09:86:9A:06:44:E9:2F:A6:1A:B8:2E:53
Certificate issuer:       /CN=B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9
Certificate serial:       644547151B983E0A72767CED78AACBCD7426CDBF
Authority key identifier: B3:4D:F9:25:A0:FA:AF:47:E4:E9:46:0A:3D:51:F3:FB:A0:80:79:A9
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/1/326131333a646638303a316631353a3a2f34382d3438203d3e203531363932.roa
Signing time:             Sun 17 Mar 2024 12:20:42 +0000
ROA not before:           Sun 17 Mar 2024 12:15:42 +0000
ROA not after:            Sun 16 Mar 2025 12:20:42 +0000
asID:                     51692
IP address blocks:        2a13:df80:1f15::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:45:47:15:1b:98:3e:0a:72:76:7c:ed:78:aa:cb:cd:74:26:cd:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9
        Validity
            Not Before: Mar 17 12:15:42 2024 GMT
            Not After : Mar 16 12:20:42 2025 GMT
        Subject: CN=AEC9FD073C5E1A7709869A0644E92FA61AB82E53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:eb:10:1d:f0:2d:7e:4f:d6:a4:fa:e4:d9:ef:
                    23:fb:b4:6b:80:5a:c2:50:cd:c6:fe:a8:f3:c3:ad:
                    17:bf:ae:d4:48:cf:f8:be:17:37:de:63:4f:fa:23:
                    b8:1d:2f:97:cb:65:59:fc:f5:6f:1d:5a:c9:14:82:
                    4b:58:80:88:ba:eb:3c:b4:72:4e:66:ff:93:86:73:
                    d4:a0:a4:09:aa:e6:dd:1b:83:02:85:bb:c0:03:6f:
                    28:48:f5:7b:91:9e:87:05:d8:f1:c4:c8:12:e4:3e:
                    1c:45:16:47:35:1a:36:b7:f4:8f:90:87:b6:45:bc:
                    62:88:8f:ee:c9:5b:fa:f5:5b:af:da:d1:bc:69:71:
                    76:2e:1c:8e:ae:27:f3:0e:03:90:6b:9e:29:e9:49:
                    49:16:a1:0d:a3:07:24:c1:94:02:bf:da:4d:b0:65:
                    7f:54:7e:22:e2:f8:d8:17:0e:87:dd:4d:44:6c:ed:
                    06:4c:12:6b:b7:af:4f:cd:da:26:8b:80:5f:9e:29:
                    7e:bc:1a:f1:aa:69:8d:39:66:c9:f0:01:ea:1f:69:
                    63:a8:6c:eb:c7:8a:14:9d:c0:c4:5f:34:07:79:48:
                    b0:c8:1c:7d:91:79:17:8f:33:12:32:0f:6d:a0:2b:
                    4c:6d:c0:f6:68:8a:2d:4d:8c:fe:55:dd:ba:72:0a:
                    65:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C9:FD:07:3C:5E:1A:77:09:86:9A:06:44:E9:2F:A6:1A:B8:2E:53
            X509v3 Authority Key Identifier:
                keyid:B3:4D:F9:25:A0:FA:AF:47:E4:E9:46:0A:3D:51:F3:FB:A0:80:79:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/1/B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/1/326131333a646638303a316631353a3a2f34382d3438203d3e203531363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:1f15::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:2d:b0:23:5a:fb:1b:fb:24:55:c8:82:ff:b1:d3:71:e4:56:
         99:73:0f:4d:55:9d:6a:60:0c:db:a8:73:33:9b:62:a6:e4:88:
         fb:b0:e4:8a:97:ab:08:4a:41:e2:d9:15:c4:ca:76:78:9e:c8:
         4b:27:fc:dd:d3:c4:87:bb:66:85:5e:ef:d0:85:01:09:11:c6:
         97:86:0c:3c:00:8a:11:ba:87:06:4e:4f:30:4d:6a:cb:22:4b:
         92:d9:9f:df:cc:4f:7a:4f:e4:a6:4b:bb:27:f1:44:2c:b3:f7:
         32:99:a5:b1:f5:70:45:cd:96:8b:fc:eb:e7:b1:7e:f7:e0:42:
         4e:8f:63:18:8e:6c:30:bc:d5:5b:62:0b:da:8e:76:a5:c6:6a:
         75:32:f9:fe:bf:7b:5e:43:df:f8:09:44:d7:d9:09:d3:aa:e2:
         ea:de:a7:86:fb:70:ee:c7:6b:21:7f:cb:a1:9a:a4:57:d1:eb:
         ec:23:f3:54:20:1b:c9:72:74:04:fa:f2:f6:23:c2:92:7d:aa:
         2c:b3:dd:a1:0e:17:06:f8:bc:54:fd:d3:ca:29:e7:fa:7b:28:
         46:9c:b0:ac:a1:4c:2f:b6:59:26:e6:32:0d:24:68:b1:12:a0:
         b6:0e:54:07:48:68:0a:e5:d8:29:71:57:5b:f1:f3:c5:41:47:
         88:77:e1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----