Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/326130613a363034343a376362303a3a2f34342d3434203d3e20323135363035.roa
File:                     326130613a363034343a376362303a3a2f34342d3434203d3e20323135363035.roa (raw, json)
Hash identifier:          8pBtTXmeH4T1ngfKZ2Sp2OLUUTtu4XnP/FmErwbfFdI=
Subject key identifier:   DE:76:05:93:17:09:60:E4:E3:9B:41:56:32:94:E8:1B:14:30:9D:1C
Certificate issuer:       /CN=AE038F55F4904E67637BC2F369CA4E00D4AEAB1E
Certificate serial:       31E40B1A839BA0C6052830660315BC1D59CDE861
Authority key identifier: AE:03:8F:55:F4:90:4E:67:63:7B:C2:F3:69:CA:4E:00:D4:AE:AB:1E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AE038F55F4904E67637BC2F369CA4E00D4AEAB1E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/326130613a363034343a376362303a3a2f34342d3434203d3e20323135363035.roa
Signing time:             Thu 14 Mar 2024 08:27:55 +0000
ROA not before:           Thu 14 Mar 2024 08:22:55 +0000
ROA not after:            Thu 13 Mar 2025 08:27:55 +0000
asID:                     215605
IP address blocks:        2a0a:6044:7cb0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e4:0b:1a:83:9b:a0:c6:05:28:30:66:03:15:bc:1d:59:cd:e8:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE038F55F4904E67637BC2F369CA4E00D4AEAB1E
        Validity
            Not Before: Mar 14 08:22:55 2024 GMT
            Not After : Mar 13 08:27:55 2025 GMT
        Subject: CN=DE760593170960E4E39B41563294E81B14309D1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0f:fc:fa:5f:e4:34:14:08:49:a3:a9:a2:11:
                    48:62:e7:27:c7:85:6a:83:ea:ea:d7:3f:e5:3c:71:
                    f1:c2:eb:d8:a5:c8:e3:d1:cb:18:5d:86:82:b0:c2:
                    56:ed:a5:a1:f5:5e:40:f2:99:2c:75:ba:91:66:2f:
                    08:02:de:98:f2:be:d5:d6:e5:1e:85:cd:3f:e5:ff:
                    31:ec:52:f5:f4:23:31:be:40:f4:68:f2:75:6c:95:
                    21:e7:77:f2:ce:04:94:f5:1a:ea:94:b4:96:8a:36:
                    68:39:e4:12:75:19:8f:3b:9e:6d:7b:6d:b2:02:f9:
                    75:c6:5d:83:61:a3:b2:b4:b4:95:f3:31:02:4f:d5:
                    15:5c:f5:b1:70:b0:01:59:f3:32:f1:3c:5b:5d:2c:
                    a2:57:e2:8f:10:19:70:41:34:81:93:bf:ce:b4:0b:
                    e8:07:62:3d:26:a8:28:e0:73:13:51:b1:60:c3:b8:
                    8a:88:0a:c2:d9:8f:04:2e:58:6b:86:8f:b7:d9:e2:
                    ed:3c:30:4d:d4:be:e5:0e:d8:98:95:77:fc:36:75:
                    bc:5f:d7:92:cc:73:5d:d0:6f:f2:51:96:a7:46:ca:
                    00:48:a2:c7:ce:01:7f:62:55:04:79:37:11:54:c6:
                    5e:4a:16:60:9f:ff:d7:1a:47:cc:4a:87:66:89:86:
                    ae:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:76:05:93:17:09:60:E4:E3:9B:41:56:32:94:E8:1B:14:30:9D:1C
            X509v3 Authority Key Identifier:
                keyid:AE:03:8F:55:F4:90:4E:67:63:7B:C2:F3:69:CA:4E:00:D4:AE:AB:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/AE038F55F4904E67637BC2F369CA4E00D4AEAB1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AE038F55F4904E67637BC2F369CA4E00D4AEAB1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/326130613a363034343a376362303a3a2f34342d3434203d3e20323135363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7cb0::/44

    Signature Algorithm: sha256WithRSAEncryption
         3e:25:94:66:be:51:32:e2:9b:11:3b:52:af:44:03:ab:a2:8f:
         39:b8:b9:1d:3d:b3:a6:c5:26:ad:20:eb:bf:81:c1:58:ea:7e:
         53:dd:b3:09:c6:35:3d:48:1b:5f:42:48:56:c3:25:1e:39:bc:
         71:93:65:b8:5c:1c:2e:f9:e5:00:e9:eb:9d:fb:de:f2:02:2f:
         d8:60:b3:4f:1e:b8:87:fb:f9:a8:94:2d:17:cd:c9:47:3b:16:
         b6:33:04:4f:cf:7d:63:9a:51:ca:15:b3:65:52:9a:d4:7a:c2:
         6d:eb:36:d1:43:be:4d:fa:a4:c2:4b:c3:dd:7b:63:47:91:97:
         f7:be:ba:0a:f2:fb:f3:2c:0e:35:0d:af:0a:e2:fa:cf:98:a5:
         d5:37:2e:8f:5a:64:f8:3f:c2:67:0d:47:45:f4:e2:d1:70:80:
         fe:f5:84:9f:4c:19:ce:8d:32:e7:17:61:fb:6a:90:ee:c2:76:
         32:0c:52:20:40:45:0d:87:dd:52:5d:b7:40:91:a8:03:88:5c:
         c3:78:82:ea:20:21:48:30:33:84:fa:b0:24:bb:dd:c5:38:08:
         2d:44:ef:fd:5d:57:61:0f:e2:90:b9:24:4e:1f:8a:20:00:72:
         eb:7f:5e:05:08:ef:29:d6:f1:ec:96:4d:52:1a:23:42:b8:d0:
         6c:f2:30:3c
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUMeQLGoOboMYFKDBmAxW8HVnN6GEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUwMzhGNTVGNDkwNEU2NzYzN0JDMkYzNjlDQTRFMDBE
NEFFQUIxRTAeFw0yNDAzMTQwODIyNTVaFw0yNTAzMTMwODI3NTVaMDMxMTAvBgNV
BAMTKERFNzYwNTkzMTcwOTYwRTRFMzlCNDE1NjMyOTRFODFCMTQzMDlEMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4D/z6X+Q0FAhJo6miEUhi5yfH
hWqD6urXP+U8cfHC69ilyOPRyxhdhoKwwlbtpaH1XkDymSx1upFmLwgC3pjyvtXW
5R6FzT/l/zHsUvX0IzG+QPRo8nVslSHnd/LOBJT1GuqUtJaKNmg55BJ1GY87nm17
bbIC+XXGXYNho7K0tJXzMQJP1RVc9bFwsAFZ8zLxPFtdLKJX4o8QGXBBNIGTv860
C+gHYj0mqCjgcxNRsWDDuIqICsLZjwQuWGuGj7fZ4u08ME3UvuUO2JiVd/w2dbxf
15LMc13Qb/JRlqdGygBIosfOAX9iVQR5NxFUxl5KFmCf/9caR8xKh2aJhq5tAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQU3nYFkxcJYOTjm0FWMpToGxQwnRwwHwYDVR0j
BBgwFoAUrgOPVfSQTmdje8LzacpOANSuqx4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTcwZDU1ZTktMDQwYi00ZWIwLTkwNTUtNGIxZTYzYTg4
YTY2LzEvQUUwMzhGNTVGNDkwNEU2NzYzN0JDMkYzNjlDQTRFMDBENEFFQUIxRS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9BRTAzOEY1NUY0OTA0RTY3NjM3QkMyRjM2
OUNBNEUwMEQ0QUVBQjFFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS81NzBkNTVlOS0wNDBiLTRlYjAtOTA1NS00YjFlNjNhODhhNjYvMS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTM3NjM2MjMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIz
MTM1MzYzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcEKgpgRHywMA0GCSqGSIb3DQEBCwUAA4IBAQA+
JZRmvlEy4psRO1KvRAOroo85uLkdPbOmxSatIOu/gcFY6n5T3bMJxjU9SBtfQkhW
wyUeObxxk2W4XBwu+eUA6eud+97yAi/YYLNPHriH+/molC0XzclHOxa2MwRPz31j
mlHKFbNlUprUesJt6zbRQ75N+qTCS8Pde2NHkZf3vroK8vvzLA41Da8K4vrPmKXV
Ny6PWmT4P8JnDUdF9OLRcID+9YSfTBnOjTLnF2H7apDuwnYyDFIgQEUNh91SXbdA
kagDiFzDeILqICFIMDOE+rAku93FOAgtRO/9XVdhD+KQuSROH4ogAHLrf14FCO8p
1vHslk1SGiNCuNBs8jA8
-----END CERTIFICATE-----