Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/326130373a353463303a633066663a3a2f34382d3438203d3e203534363831.roa
File:                     326130373a353463303a633066663a3a2f34382d3438203d3e203534363831.roa (raw, json)
Hash identifier:          fetUhaIRJPErmynwhmrIQ44AGGdVnC3ZX0rSTu5e0Cw=
Subject key identifier:   7B:82:90:26:F1:45:93:03:95:4E:9F:78:41:F3:BE:CB:7C:09:38:33
Certificate issuer:       /CN=A6EAAC4901429B15740ABF1D9A54BFB181C6F538
Certificate serial:       6E6357F51B2DF02EC9270DD93D2ADDE65C94D1A3
Authority key identifier: A6:EA:AC:49:01:42:9B:15:74:0A:BF:1D:9A:54:BF:B1:81:C6:F5:38
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A6EAAC4901429B15740ABF1D9A54BFB181C6F538.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/326130373a353463303a633066663a3a2f34382d3438203d3e203534363831.roa
Signing time:             Sat 20 Jan 2024 19:50:40 +0000
ROA not before:           Sat 20 Jan 2024 19:45:40 +0000
ROA not after:            Sat 18 Jan 2025 19:50:40 +0000
asID:                     54681
IP address blocks:        2a07:54c0:c0ff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:63:57:f5:1b:2d:f0:2e:c9:27:0d:d9:3d:2a:dd:e6:5c:94:d1:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6EAAC4901429B15740ABF1D9A54BFB181C6F538
        Validity
            Not Before: Jan 20 19:45:40 2024 GMT
            Not After : Jan 18 19:50:40 2025 GMT
        Subject: CN=7B829026F1459303954E9F7841F3BECB7C093833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:70:67:95:f6:43:0c:2a:8f:55:89:11:af:41:
                    f6:14:2e:88:5d:f9:a3:d4:d8:a8:d2:d5:d5:8c:54:
                    34:48:a8:9c:40:b2:b5:bd:d4:7b:ea:f0:bf:f0:ad:
                    7d:65:9a:0c:0b:63:7e:01:17:6b:66:a4:77:40:1e:
                    9a:42:b2:cf:bd:3c:5d:9b:61:89:4f:96:53:cb:2c:
                    bf:21:a6:11:f8:00:f3:e1:91:22:63:1c:a3:94:be:
                    56:89:d4:67:bb:19:ad:2f:93:54:51:d9:d9:30:6b:
                    3d:de:b7:4b:65:98:1b:a9:b6:56:28:f5:bc:b3:ec:
                    94:68:6e:b1:e0:9b:96:d8:96:ad:48:c3:54:d8:4d:
                    90:65:aa:f8:0d:e2:25:bd:0d:57:a0:88:4c:7a:81:
                    44:88:76:f8:00:80:c2:27:be:3a:ea:93:e4:b0:e2:
                    fe:94:c0:3e:ee:dd:9a:9f:44:dd:4a:cd:35:6b:b8:
                    2d:19:6b:26:41:6b:2f:69:c8:71:77:a3:bf:12:fa:
                    30:9a:3a:c7:9c:42:2d:0e:bf:e4:c0:70:40:29:db:
                    1f:7a:82:70:74:8c:1e:15:3f:f5:ef:b0:c5:f2:a6:
                    1a:b7:99:07:53:da:4f:ea:d3:99:41:f9:64:94:9a:
                    91:7a:d8:54:b6:c7:ed:4f:de:8d:85:94:74:35:f3:
                    3d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:82:90:26:F1:45:93:03:95:4E:9F:78:41:F3:BE:CB:7C:09:38:33
            X509v3 Authority Key Identifier:
                keyid:A6:EA:AC:49:01:42:9B:15:74:0A:BF:1D:9A:54:BF:B1:81:C6:F5:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/A6EAAC4901429B15740ABF1D9A54BFB181C6F538.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A6EAAC4901429B15740ABF1D9A54BFB181C6F538.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/326130373a353463303a633066663a3a2f34382d3438203d3e203534363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:c0ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:10:13:94:cb:81:d4:ee:f8:eb:d6:f1:f1:ae:55:29:fa:4b:
         4f:74:51:86:3c:68:de:84:84:bd:43:f1:60:ba:b9:fe:e1:0f:
         9b:82:df:03:98:a5:08:a6:9d:a0:cc:c9:0b:88:7c:79:3b:6e:
         5e:f1:17:bc:39:0f:0a:39:a6:0d:07:24:c2:72:6e:09:8a:51:
         88:33:07:3d:95:4e:8a:03:27:f0:35:8a:92:5c:1e:f6:a0:4e:
         77:44:38:46:c2:92:e0:df:75:4e:14:ff:bb:1a:11:02:f4:b6:
         ad:fa:8e:17:2b:a7:22:3d:e9:f4:8c:1a:e6:01:c8:98:67:f6:
         2c:ed:2d:6f:e0:cc:61:9b:e4:53:3b:76:2c:47:05:18:7d:dc:
         c5:e8:a2:b7:a7:eb:1a:73:93:b8:d0:36:51:e7:36:29:2f:c1:
         e8:54:6a:6c:e0:ad:22:81:72:fd:97:58:17:d3:93:c5:c7:1f:
         2e:b3:cf:6f:a3:03:85:e7:ff:fc:1f:5a:19:bf:59:23:89:ea:
         99:4f:52:a6:d0:d1:9d:0d:f5:50:d3:18:dd:24:71:33:7e:17:
         1c:e6:a0:b0:11:c0:eb:22:91:a1:f3:53:44:0a:10:a6:2c:b0:
         a6:08:5f:f3:58:fe:ca:01:af:31:3a:f0:b3:f4:3d:ae:6a:bc:
         b5:f0:96:e5
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgIUbmNX9Rst8C7JJw3ZPSrd5lyU0aMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTZFQUFDNDkwMTQyOUIxNTc0MEFCRjFEOUE1NEJGQjE4
MUM2RjUzODAeFw0yNDAxMjAxOTQ1NDBaFw0yNTAxMTgxOTUwNDBaMDMxMTAvBgNV
BAMTKDdCODI5MDI2RjE0NTkzMDM5NTRFOUY3ODQxRjNCRUNCN0MwOTM4MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpcGeV9kMMKo9ViRGvQfYULohd
+aPU2KjS1dWMVDRIqJxAsrW91Hvq8L/wrX1lmgwLY34BF2tmpHdAHppCss+9PF2b
YYlPllPLLL8hphH4APPhkSJjHKOUvlaJ1Ge7Ga0vk1RR2dkwaz3et0tlmBuptlYo
9byz7JRobrHgm5bYlq1Iw1TYTZBlqvgN4iW9DVegiEx6gUSIdvgAgMInvjrqk+Sw
4v6UwD7u3ZqfRN1KzTVruC0ZayZBay9pyHF3o78S+jCaOsecQi0Ov+TAcEAp2x96
gnB0jB4VP/XvsMXyphq3mQdT2k/q05lB+WSUmpF62FS2x+1P3o2FlHQ18z0FAgMB
AAGjggKDMIICfzAdBgNVHQ4EFgQUe4KQJvFFkwOVTp94QfO+y3wJODMwHwYDVR0j
BBgwFoAUpuqsSQFCmxV0Cr8dmlS/sYHG9TgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDM0NGZmMjktNzE4NC00N2JkLTkxNzItMzYwOWY1OWNl
NmRmLzIvQTZFQUFDNDkwMTQyOUIxNTc0MEFCRjFEOUE1NEJGQjE4MUM2RjUzOC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk
YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC9BNkVBQUM0OTAxNDI5QjE1NzQwQUJGMUQ5
QTU0QkZCMTgxQzZGNTM4LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF
BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS80MzQ0ZmYyOS03MTg0LTQ3YmQtOTE3Mi0zNjA5ZjU5Y2U2ZGYvMi8zMjYxMzAz
NzNhMzUzNDYzMzAzYTYzMzA2NjY2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzUz
NDM2MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB
BwEB/wQTMBEwDwQCAAIwCQMHACoHVMDA/zANBgkqhkiG9w0BAQsFAAOCAQEAhRAT
lMuB1O7469bx8a5VKfpLT3RRhjxo3oSEvUPxYLq5/uEPm4LfA5ilCKadoMzJC4h8
eTtuXvEXvDkPCjmmDQckwnJuCYpRiDMHPZVOigMn8DWKklwe9qBOd0Q4RsKS4N91
ThT/uxoRAvS2rfqOFyunIj3p9Iwa5gHImGf2LO0tb+DMYZvkUzt2LEcFGH3cxeii
t6frGnOTuNA2Uec2KS/B6FRqbOCtIoFy/ZdYF9OTxccfLrPPb6MDhef//B9aGb9Z
I4nqmU9SptDRnQ31UNMY3SRxM34XHOagsBHA6yKRofNTRAoQpiywpghf81j+ygGv
MTrws/Q9rmq8tfCW5Q==
-----END CERTIFICATE-----