Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/2/3130332e3132312e34332e302f32342d3234203d3e20323135363035.roa
File:                     3130332e3132312e34332e302f32342d3234203d3e20323135363035.roa (raw, json)
Hash identifier:          YCBNAJ0M167XVDa1qWNRrwYv39wcBtQYnPr81StZoWg=
Subject key identifier:   2E:24:7F:41:8E:C9:69:A1:54:AB:99:41:07:11:15:13:E6:A5:EC:CF
Certificate issuer:       /CN=561FF8005C03415E4FBB365AC43A3BAA57B82416
Certificate serial:       78F8606D6910EE42D81371115EEFC852E00CD04B
Authority key identifier: 56:1F:F8:00:5C:03:41:5E:4F:BB:36:5A:C4:3A:3B:AA:57:B8:24:16
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/561FF8005C03415E4FBB365AC43A3BAA57B82416.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/2/3130332e3132312e34332e302f32342d3234203d3e20323135363035.roa
Signing time:             Sun 14 Apr 2024 15:55:18 +0000
ROA not before:           Sun 14 Apr 2024 15:50:18 +0000
ROA not after:            Sun 13 Apr 2025 15:55:18 +0000
asID:                     215605
IP address blocks:        103.121.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f8:60:6d:69:10:ee:42:d8:13:71:11:5e:ef:c8:52:e0:0c:d0:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=561FF8005C03415E4FBB365AC43A3BAA57B82416
        Validity
            Not Before: Apr 14 15:50:18 2024 GMT
            Not After : Apr 13 15:55:18 2025 GMT
        Subject: CN=2E247F418EC969A154AB994107111513E6A5ECCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ef:7e:16:d8:db:17:db:34:56:db:19:94:61:
                    56:94:bb:3b:e9:81:10:1e:05:4f:76:3f:9b:d6:5e:
                    6a:b5:6f:53:7d:cf:04:99:61:d0:90:49:ba:99:e2:
                    ac:df:59:98:e9:2e:51:7e:61:38:c9:64:ca:1b:b0:
                    49:40:cf:68:df:e5:64:c3:8e:80:4e:9e:14:43:c5:
                    b1:be:92:1a:de:c4:02:67:9d:fa:ac:ac:c2:cb:2b:
                    b4:6f:9d:d7:cb:b3:44:85:2a:2b:0c:9e:2c:a9:cb:
                    eb:62:e5:9f:85:c0:7c:59:b7:b5:ff:60:5b:e7:19:
                    82:83:ce:04:d4:af:03:65:42:3a:e6:a8:01:cf:a4:
                    db:61:a6:75:4d:fb:11:14:86:2e:2e:f5:45:0e:ae:
                    1f:2e:9a:e6:8a:a1:f3:aa:00:fc:43:7f:f5:69:ec:
                    83:cf:9e:c5:67:cc:b2:d0:ae:95:a2:c8:72:78:a7:
                    bd:e9:b8:28:a0:2c:66:78:e0:0a:31:17:40:75:c1:
                    71:8a:43:cb:ef:41:25:67:1b:07:ea:d0:a4:49:bb:
                    94:de:82:b8:15:90:25:04:b4:d7:8d:54:ef:0f:d7:
                    43:45:e1:dc:61:b8:c0:eb:0d:5e:d0:5a:80:f3:1b:
                    89:d2:be:68:d7:9a:87:db:93:3f:c6:20:4e:95:38:
                    77:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:24:7F:41:8E:C9:69:A1:54:AB:99:41:07:11:15:13:E6:A5:EC:CF
            X509v3 Authority Key Identifier:
                keyid:56:1F:F8:00:5C:03:41:5E:4F:BB:36:5A:C4:3A:3B:AA:57:B8:24:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/2/561FF8005C03415E4FBB365AC43A3BAA57B82416.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/561FF8005C03415E4FBB365AC43A3BAA57B82416.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/2/3130332e3132312e34332e302f32342d3234203d3e20323135363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:82:d9:d8:9c:39:09:a4:e6:20:62:ff:10:6f:5e:87:d0:75:
         82:ab:c1:5d:e2:6b:5b:ea:07:3a:62:0d:57:80:15:7e:54:aa:
         26:80:d3:e5:25:7c:b5:33:8d:a8:c5:dd:2b:07:b9:78:e7:91:
         a0:39:72:ab:f5:d1:d5:73:f9:6e:ea:04:89:f1:aa:89:fa:7e:
         d4:e5:cd:ce:77:4e:a6:6e:01:d8:c7:83:8f:d5:73:56:49:da:
         75:29:14:92:81:07:1f:db:76:dc:80:94:8f:37:40:b2:79:13:
         ce:f7:db:72:6c:0c:80:4c:9d:43:da:7b:b6:74:d7:04:9e:48:
         1c:06:e7:a7:7a:fd:07:27:a2:c9:3d:4a:fc:e6:35:30:93:9f:
         d7:a9:fb:ab:8a:d2:e2:e1:52:e7:1a:bb:84:e1:56:1d:08:40:
         63:42:7c:c7:1b:e4:27:7a:7e:e8:ef:4b:ab:d5:43:02:69:bf:
         57:ba:11:87:3a:22:8d:4f:ed:74:fc:0a:39:ce:36:58:8b:fb:
         b3:4a:92:41:3d:d5:a5:4e:d8:cf:28:c9:fb:3f:51:79:b2:a5:
         bb:b4:fb:17:7a:c4:6b:e7:03:a6:cd:a9:0e:b8:8b:3b:04:39:
         36:db:b3:d2:c6:9b:4c:29:38:4d:b0:94:4f:d5:c7:2b:15:fb:
         a2:4a:55:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----