Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/326130613a363034343a376330303a3a2f34302d3430203d3e20323135363035.roa
File:                     326130613a363034343a376330303a3a2f34302d3430203d3e20323135363035.roa (raw, json)
Hash identifier:          9IQ+se4djupfr7nK6iPRFKYthOvUThnRKWTCpd38+7k=
Subject key identifier:   5E:39:EB:F0:A4:9A:2B:5B:41:A2:C5:9D:7D:8F:4A:98:B8:EE:45:B6
Certificate issuer:       /CN=AE038F55F4904E67637BC2F369CA4E00D4AEAB1E
Certificate serial:       5751163CF16678F7F530A5804B3725A849E4D771
Authority key identifier: AE:03:8F:55:F4:90:4E:67:63:7B:C2:F3:69:CA:4E:00:D4:AE:AB:1E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AE038F55F4904E67637BC2F369CA4E00D4AEAB1E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/326130613a363034343a376330303a3a2f34302d3430203d3e20323135363035.roa
Signing time:             Mon 11 Mar 2024 23:52:57 +0000
ROA not before:           Mon 11 Mar 2024 23:47:57 +0000
ROA not after:            Mon 10 Mar 2025 23:52:57 +0000
asID:                     215605
IP address blocks:        2a0a:6044:7c00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:51:16:3c:f1:66:78:f7:f5:30:a5:80:4b:37:25:a8:49:e4:d7:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE038F55F4904E67637BC2F369CA4E00D4AEAB1E
        Validity
            Not Before: Mar 11 23:47:57 2024 GMT
            Not After : Mar 10 23:52:57 2025 GMT
        Subject: CN=5E39EBF0A49A2B5B41A2C59D7D8F4A98B8EE45B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ac:2a:88:d1:fb:8d:3f:c2:1c:ce:95:e8:e0:
                    64:09:96:fa:65:b5:72:db:43:aa:19:11:8e:41:8b:
                    aa:30:13:39:c7:21:b7:13:83:09:8b:eb:af:7d:70:
                    79:47:ec:87:3f:43:c5:dc:94:94:2a:92:93:c3:0b:
                    e6:95:44:1f:9a:f6:10:7f:f6:b6:62:3d:f3:cf:d0:
                    1a:67:a9:33:44:0c:1d:0b:f9:af:7c:9b:05:c2:07:
                    86:7f:e7:15:47:28:05:1f:99:06:e7:94:7f:9b:26:
                    26:ba:66:3f:71:b6:bf:68:58:57:ec:a3:70:5c:a3:
                    51:6d:1b:85:98:00:42:bd:f1:a0:01:01:ae:07:ea:
                    fa:69:49:7b:2e:19:db:dc:51:d2:ad:d0:3b:29:76:
                    0f:de:ba:bf:b7:74:1e:f0:c9:92:d9:26:87:14:89:
                    70:1d:6f:ad:60:60:79:ae:dd:ff:d5:0e:31:32:05:
                    78:92:80:a3:d4:b5:a2:3b:7b:2a:49:da:f5:9c:09:
                    bb:1e:af:de:8b:bd:f6:e7:59:78:33:ce:b6:a6:53:
                    d6:cb:ab:e7:c3:97:3c:1a:b7:7c:ba:8c:d1:e5:8d:
                    73:e9:d0:4c:6b:29:7c:d0:c3:9b:ed:5f:fb:cd:32:
                    cb:61:d2:e7:5a:a4:80:b3:05:e6:6c:42:ab:ba:ea:
                    15:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:39:EB:F0:A4:9A:2B:5B:41:A2:C5:9D:7D:8F:4A:98:B8:EE:45:B6
            X509v3 Authority Key Identifier:
                keyid:AE:03:8F:55:F4:90:4E:67:63:7B:C2:F3:69:CA:4E:00:D4:AE:AB:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/AE038F55F4904E67637BC2F369CA4E00D4AEAB1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AE038F55F4904E67637BC2F369CA4E00D4AEAB1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/326130613a363034343a376330303a3a2f34302d3430203d3e20323135363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         9b:3f:56:bd:6f:cb:5d:31:d4:bc:03:4d:3c:22:29:ac:8f:32:
         c4:db:a1:78:53:77:5f:a8:01:6e:05:43:ca:9a:1c:31:40:95:
         41:70:8f:72:d9:23:b3:24:83:75:f2:95:3c:da:00:e4:9c:b9:
         de:9c:0b:ed:a0:59:d5:74:c8:03:29:e7:6b:e6:69:6d:32:5f:
         31:84:64:0c:10:4b:92:ff:db:c8:84:7f:af:c4:a6:79:45:76:
         f5:d5:ed:00:59:09:06:bb:3a:54:2f:b7:92:e6:c9:9f:17:47:
         f1:aa:24:bb:bd:53:40:03:2c:ae:a4:21:87:01:9c:ae:5c:4e:
         25:cf:fc:f9:54:82:89:8d:c5:a9:a1:28:0c:7e:9b:91:63:7b:
         df:69:7d:cc:71:9c:a4:03:9b:9b:4c:b5:1a:20:20:e0:a9:ef:
         71:56:b2:ae:f6:5a:0c:6e:d0:4c:0f:df:6b:ec:11:e3:f5:22:
         40:24:f9:21:2f:45:d3:3f:07:6f:c8:f0:27:01:6a:e4:17:70:
         d9:18:cb:32:50:6c:21:00:84:66:aa:70:de:90:b0:05:81:36:
         9c:bd:3e:9d:0e:8a:f2:db:22:55:b9:9d:86:ef:39:a9:ac:a4:
         f5:a2:8f:77:26:08:5f:df:e1:59:84:42:4f:6b:9a:54:36:38:
         b6:3f:d5:18
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIUV1EWPPFmePf1MKWASzclqEnk13EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUwMzhGNTVGNDkwNEU2NzYzN0JDMkYzNjlDQTRFMDBE
NEFFQUIxRTAeFw0yNDAzMTEyMzQ3NTdaFw0yNTAzMTAyMzUyNTdaMDMxMTAvBgNV
BAMTKDVFMzlFQkYwQTQ5QTJCNUI0MUEyQzU5RDdEOEY0QTk4QjhFRTQ1QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5rCqI0fuNP8IczpXo4GQJlvpl
tXLbQ6oZEY5Bi6owEznHIbcTgwmL6699cHlH7Ic/Q8XclJQqkpPDC+aVRB+a9hB/
9rZiPfPP0BpnqTNEDB0L+a98mwXCB4Z/5xVHKAUfmQbnlH+bJia6Zj9xtr9oWFfs
o3Bco1FtG4WYAEK98aABAa4H6vppSXsuGdvcUdKt0Dspdg/eur+3dB7wyZLZJocU
iXAdb61gYHmu3f/VDjEyBXiSgKPUtaI7eypJ2vWcCbser96LvfbnWXgzzramU9bL
q+fDlzwat3y6jNHljXPp0ExrKXzQw5vtX/vNMsth0udapICzBeZsQqu66hU1AgMB
AAGjggKEMIICgDAdBgNVHQ4EFgQUXjnr8KSaK1tBosWdfY9KmLjuRbYwHwYDVR0j
BBgwFoAUrgOPVfSQTmdje8LzacpOANSuqx4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTcwZDU1ZTktMDQwYi00ZWIwLTkwNTUtNGIxZTYzYTg4
YTY2LzEvQUUwMzhGNTVGNDkwNEU2NzYzN0JDMkYzNjlDQTRFMDBENEFFQUIxRS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9BRTAzOEY1NUY0OTA0RTY3NjM3QkMyRjM2
OUNBNEUwMEQ0QUVBQjFFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS81NzBkNTVlOS0wNDBiLTRlYjAtOTA1NS00YjFlNjNhODhhNjYvMS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTM3NjMzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIz
MTM1MzYzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgRHwwDQYJKoZIhvcNAQELBQADggEBAJs/
Vr1vy10x1LwDTTwiKayPMsTboXhTd1+oAW4FQ8qaHDFAlUFwj3LZI7Mkg3XylTza
AOScud6cC+2gWdV0yAMp52vmaW0yXzGEZAwQS5L/28iEf6/EpnlFdvXV7QBZCQa7
OlQvt5LmyZ8XR/GqJLu9U0ADLK6kIYcBnK5cTiXP/PlUgomNxamhKAx+m5Fje99p
fcxxnKQDm5tMtRogIOCp73FWsq72Wgxu0EwP32vsEeP1IkAk+SEvRdM/B2/I8CcB
auQXcNkYyzJQbCEAhGaqcN6QsAWBNpy9Pp0OivLbIlW5nYbvOamspPWij3cmCF/f
4VmEQk9rmlQ2OLY/1Rg=
-----END CERTIFICATE-----