Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/326130373a353463303a623030623a3a2f34382d3438203d3e20323130363637.roa
File:                     326130373a353463303a623030623a3a2f34382d3438203d3e20323130363637.roa (raw, json)
Hash identifier:          78ILiliL9cuOA6ic1AFnzANKR6py/Q86j24g8zXYUUo=
Subject key identifier:   D7:AC:4A:54:C5:3B:E5:FB:5D:58:77:B4:B9:3F:50:37:E1:61:00:F3
Certificate issuer:       /CN=A6EAAC4901429B15740ABF1D9A54BFB181C6F538
Certificate serial:       64742571BEBE4567876B5CF29A78C1723B21B4AD
Authority key identifier: A6:EA:AC:49:01:42:9B:15:74:0A:BF:1D:9A:54:BF:B1:81:C6:F5:38
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A6EAAC4901429B15740ABF1D9A54BFB181C6F538.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/326130373a353463303a623030623a3a2f34382d3438203d3e20323130363637.roa
Signing time:             Mon 19 Feb 2024 13:25:27 +0000
ROA not before:           Mon 19 Feb 2024 13:20:27 +0000
ROA not after:            Mon 17 Feb 2025 13:25:27 +0000
asID:                     210667
IP address blocks:        2a07:54c0:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:74:25:71:be:be:45:67:87:6b:5c:f2:9a:78:c1:72:3b:21:b4:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6EAAC4901429B15740ABF1D9A54BFB181C6F538
        Validity
            Not Before: Feb 19 13:20:27 2024 GMT
            Not After : Feb 17 13:25:27 2025 GMT
        Subject: CN=D7AC4A54C53BE5FB5D5877B4B93F5037E16100F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2d:da:59:25:57:75:9f:5d:2b:70:ec:d1:e7:
                    2b:52:48:04:50:30:57:04:ed:82:ee:5d:07:52:73:
                    df:b3:05:21:4d:b2:43:e0:e3:d6:ee:2d:5e:90:ac:
                    1d:5a:f6:21:ba:21:a8:3f:9e:a3:8f:ac:84:e7:5f:
                    75:6c:85:26:6c:14:64:6e:cf:02:da:e1:a8:bd:53:
                    d8:e2:9a:c1:1a:0d:8a:1b:6f:f0:ef:06:ef:8c:01:
                    5a:67:ec:2d:72:e5:86:13:46:18:93:e4:d8:dd:36:
                    ae:1f:6e:f9:11:f6:ad:d9:5e:b7:b8:62:c8:a7:08:
                    68:d8:81:0d:bb:f1:61:a9:21:43:f2:37:2a:2e:1b:
                    18:48:ec:ac:32:db:ed:7d:a4:3f:fc:f5:bb:a4:7e:
                    8f:5a:8f:8d:dc:14:47:df:63:dc:79:76:bf:06:d5:
                    d9:bb:11:d9:f8:55:91:d3:05:a3:fd:e7:05:50:15:
                    1b:bc:4a:a0:be:8d:8d:fb:cd:f1:fa:96:7e:e6:05:
                    39:45:d3:03:84:6a:6d:32:f5:86:17:b0:ae:c9:8d:
                    8f:d5:1e:43:08:32:14:d4:8c:c4:9e:ab:b9:5b:93:
                    29:8b:18:56:a1:cf:4e:e8:f7:4b:fe:fe:78:37:4f:
                    06:ad:75:56:1c:ab:a4:18:4e:fd:45:a0:43:9b:de:
                    11:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:AC:4A:54:C5:3B:E5:FB:5D:58:77:B4:B9:3F:50:37:E1:61:00:F3
            X509v3 Authority Key Identifier:
                keyid:A6:EA:AC:49:01:42:9B:15:74:0A:BF:1D:9A:54:BF:B1:81:C6:F5:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/A6EAAC4901429B15740ABF1D9A54BFB181C6F538.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A6EAAC4901429B15740ABF1D9A54BFB181C6F538.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/326130373a353463303a623030623a3a2f34382d3438203d3e20323130363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:b0:aa:64:a7:3a:e2:74:e9:fb:7f:94:fd:0a:7f:d2:78:0c:
         66:2e:de:0a:70:3c:6f:9c:30:0d:0b:84:3b:00:b7:aa:9b:b7:
         24:e3:c9:6a:b1:f2:59:12:ce:bb:c6:73:ed:a9:d1:48:19:8c:
         01:fd:bc:6a:43:9e:e0:83:83:7e:83:e8:20:ea:04:7b:e2:aa:
         c0:71:08:fb:bf:58:37:b8:a3:cc:8f:4a:c1:ad:f8:24:8b:0d:
         d1:18:67:03:50:b6:14:33:0b:66:bb:14:5c:9a:ea:fc:d1:19:
         ab:93:ab:25:aa:14:e2:d4:7e:32:06:1d:24:7e:d5:c4:24:fa:
         ee:86:58:44:f1:98:1e:4d:36:b4:57:81:59:7c:91:a7:39:e2:
         3b:f0:16:c9:04:56:ec:a8:01:eb:e2:40:65:f7:aa:b2:8d:db:
         c8:30:86:4c:d1:b9:2a:0d:7e:7e:e9:3e:ad:35:7e:cf:77:ab:
         cc:e4:91:bd:ad:7b:38:6a:36:97:2f:32:3a:35:16:8c:84:a4:
         81:12:ef:96:c0:ec:18:78:0d:58:e6:6c:af:02:e5:e5:04:e4:
         67:bc:81:74:fd:8c:26:f7:21:bc:62:a7:9e:b8:7a:22:91:71:
         91:e1:e2:b0:65:46:15:8d:ac:51:fc:b5:6e:dd:87:c5:a8:f6:
         48:f8:05:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----