Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/326130613a363034343a376330313a3a2f34382d3438203d3e20323135363035.roa
File:                     326130613a363034343a376330313a3a2f34382d3438203d3e20323135363035.roa (raw, json)
Hash identifier:          t46mzfbW5VZ1FQ1yxR0sc1jNcbT6uYKA0M1XIDCkVGY=
Subject key identifier:   50:0E:49:2A:5A:F4:84:DD:E8:27:7A:C0:3F:9F:CF:0B:72:F6:40:34
Certificate issuer:       /CN=AE038F55F4904E67637BC2F369CA4E00D4AEAB1E
Certificate serial:       2D4644D2489B55C7312266315BD895F5AD551164
Authority key identifier: AE:03:8F:55:F4:90:4E:67:63:7B:C2:F3:69:CA:4E:00:D4:AE:AB:1E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AE038F55F4904E67637BC2F369CA4E00D4AEAB1E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/326130613a363034343a376330313a3a2f34382d3438203d3e20323135363035.roa
Signing time:             Fri 01 Mar 2024 16:38:21 +0000
ROA not before:           Fri 01 Mar 2024 16:33:21 +0000
ROA not after:            Fri 28 Feb 2025 16:38:21 +0000
asID:                     215605
IP address blocks:        2a0a:6044:7c01::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:46:44:d2:48:9b:55:c7:31:22:66:31:5b:d8:95:f5:ad:55:11:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE038F55F4904E67637BC2F369CA4E00D4AEAB1E
        Validity
            Not Before: Mar  1 16:33:21 2024 GMT
            Not After : Feb 28 16:38:21 2025 GMT
        Subject: CN=500E492A5AF484DDE8277AC03F9FCF0B72F64034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3a:22:7f:92:9b:f6:7d:65:5b:c5:ff:42:30:
                    71:f7:32:07:8a:ac:a2:d2:7b:22:ac:02:e3:b4:32:
                    3d:7b:91:d1:80:77:22:86:39:2e:16:4f:a2:3e:8d:
                    a6:c6:9b:da:6c:bb:c4:ff:09:66:06:16:21:36:98:
                    1d:40:b4:5d:e5:a8:f0:b2:0b:c2:47:31:12:8b:93:
                    e5:69:7e:8b:dd:f1:88:94:e6:d4:30:74:b5:da:f9:
                    9c:80:c1:c1:bc:97:1d:9f:9d:9b:98:5e:30:1f:2b:
                    ae:8a:44:f9:ff:68:fa:bf:7e:0f:01:31:2b:7d:eb:
                    f6:bb:40:62:e5:82:dc:e3:f8:78:69:d6:f9:cb:72:
                    ec:51:17:be:69:35:00:11:4a:b4:7b:05:3e:10:da:
                    19:78:60:4a:8e:ee:ad:39:62:ea:52:71:20:8e:0a:
                    a1:75:fd:77:29:a4:3e:61:12:41:92:57:9f:f9:9c:
                    fb:c3:25:a2:25:9b:19:13:68:c8:86:d0:89:2a:bb:
                    c0:97:60:20:ef:b0:47:09:3c:44:ae:6c:ab:45:54:
                    cd:85:60:aa:f8:96:06:b2:c2:cb:5b:93:f8:ce:ae:
                    78:01:68:a3:ec:9c:c5:40:2a:81:5c:2b:89:c8:f3:
                    c7:99:b9:c5:39:e0:bb:e6:e2:a1:a5:20:ea:6e:35:
                    7b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0E:49:2A:5A:F4:84:DD:E8:27:7A:C0:3F:9F:CF:0B:72:F6:40:34
            X509v3 Authority Key Identifier:
                keyid:AE:03:8F:55:F4:90:4E:67:63:7B:C2:F3:69:CA:4E:00:D4:AE:AB:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/AE038F55F4904E67637BC2F369CA4E00D4AEAB1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AE038F55F4904E67637BC2F369CA4E00D4AEAB1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/326130613a363034343a376330313a3a2f34382d3438203d3e20323135363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7c01::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:e2:ba:e6:3c:f7:2b:0a:9b:85:ab:a8:0f:17:16:42:46:e2:
         82:02:c5:4c:5f:0f:29:72:63:7c:5b:f8:77:1c:e1:d3:4b:86:
         1d:bc:d1:7d:d8:03:f8:bc:1a:af:9c:ee:7d:f4:fa:18:78:8a:
         ee:bc:b7:f3:b7:be:9f:83:41:8a:22:66:20:ae:c6:37:03:48:
         4f:87:db:43:65:03:d0:66:e8:5c:70:f3:66:93:58:cd:17:c9:
         ce:34:21:ec:91:15:e8:21:b6:72:7d:38:e7:87:b3:ae:6e:5b:
         bb:2a:db:e2:64:bb:7a:ed:88:47:c6:45:48:98:39:aa:fc:00:
         02:82:b2:d0:05:75:77:9c:99:59:ba:38:d1:36:aa:56:d0:e3:
         4d:b8:ea:19:6f:b3:8b:ea:7f:f4:a2:12:fe:de:66:1a:e9:51:
         cc:33:6a:ed:d2:7a:a3:27:a4:1a:52:31:ab:da:8e:63:b9:ab:
         94:8e:62:a8:e0:76:23:11:9d:1c:94:0a:f8:87:bc:e0:f6:66:
         e9:41:b0:1e:3d:a2:5f:0f:d2:6f:6c:37:c7:57:e4:d3:63:2f:
         fe:19:f7:99:b1:61:5c:b5:c4:e0:dd:c3:df:25:90:5c:43:f1:
         99:02:6e:2b:a7:0c:0c:ed:8e:07:4c:ae:a2:53:ca:15:05:df:
         bd:0a:28:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----