Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/326130613a363034343a383130303a3a2f34302d3430203d3e20323135363035.roa
File:                     326130613a363034343a383130303a3a2f34302d3430203d3e20323135363035.roa (raw, json)
Hash identifier:          ha3cZvgRiA6nRmqgICw19c5vzvYx7dwi0WwSn+K/xT4=
Subject key identifier:   47:99:1F:C4:1F:27:B1:3B:BB:16:D4:87:04:23:46:FD:3E:7E:51:56
Certificate issuer:       /CN=AE038F55F4904E67637BC2F369CA4E00D4AEAB1E
Certificate serial:       0ED77A10957BAD99CEDB623D48EA630DAF74CB44
Authority key identifier: AE:03:8F:55:F4:90:4E:67:63:7B:C2:F3:69:CA:4E:00:D4:AE:AB:1E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AE038F55F4904E67637BC2F369CA4E00D4AEAB1E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/326130613a363034343a383130303a3a2f34302d3430203d3e20323135363035.roa
Signing time:             Fri 15 Mar 2024 00:07:52 +0000
ROA not before:           Fri 15 Mar 2024 00:02:52 +0000
ROA not after:            Fri 14 Mar 2025 00:07:52 +0000
asID:                     215605
IP address blocks:        2a0a:6044:8100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d7:7a:10:95:7b:ad:99:ce:db:62:3d:48:ea:63:0d:af:74:cb:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE038F55F4904E67637BC2F369CA4E00D4AEAB1E
        Validity
            Not Before: Mar 15 00:02:52 2024 GMT
            Not After : Mar 14 00:07:52 2025 GMT
        Subject: CN=47991FC41F27B13BBB16D487042346FD3E7E5156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:df:c0:07:f0:8f:54:b1:f4:c0:a0:a7:fb:da:
                    e9:44:98:97:6f:18:70:1b:f5:f9:bb:1e:53:e4:9c:
                    cb:c2:fb:9f:c5:4b:5c:0b:75:19:12:78:bf:cb:71:
                    15:d9:a8:59:48:ee:77:60:7c:d0:08:6b:a2:15:ad:
                    30:69:b0:74:74:f5:bb:0f:24:11:52:1c:29:46:88:
                    a3:b8:57:85:8e:6d:8a:76:6f:ac:03:d1:54:cb:cf:
                    89:e9:6f:87:f0:20:b8:2f:c3:2f:fa:ce:85:a1:ae:
                    8b:6f:59:6a:7d:81:a1:d8:88:a6:33:7a:84:e1:24:
                    5e:87:21:18:de:f1:c7:d4:1f:d0:62:be:71:a8:49:
                    ea:35:62:2d:bd:ea:9a:e8:6c:97:21:f2:86:3a:b6:
                    4e:3d:65:89:5c:11:36:fe:d8:af:5c:e1:f4:45:ad:
                    dd:62:1d:1b:62:ab:5f:89:a2:64:c6:a6:36:04:a7:
                    e9:7b:bd:17:92:22:1d:e0:fd:01:c8:fd:ec:5c:fe:
                    76:c4:7c:b1:b6:cb:62:84:ed:03:62:46:2e:23:55:
                    32:c0:2e:e3:ef:65:30:07:31:a2:6f:ac:2f:5d:84:
                    64:9e:eb:7f:6b:6d:bf:33:74:c7:28:37:4b:87:ea:
                    fc:d2:3b:ca:d4:40:67:db:5a:bd:42:85:b6:37:50:
                    af:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:99:1F:C4:1F:27:B1:3B:BB:16:D4:87:04:23:46:FD:3E:7E:51:56
            X509v3 Authority Key Identifier:
                keyid:AE:03:8F:55:F4:90:4E:67:63:7B:C2:F3:69:CA:4E:00:D4:AE:AB:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/AE038F55F4904E67637BC2F369CA4E00D4AEAB1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AE038F55F4904E67637BC2F369CA4E00D4AEAB1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/326130613a363034343a383130303a3a2f34302d3430203d3e20323135363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         45:43:1f:11:a8:55:08:33:7a:9b:f0:cd:ae:5b:4b:66:c2:7d:
         4a:a0:fb:b8:e2:9c:31:ed:38:8d:bf:da:b3:ea:d4:13:6b:15:
         ce:2d:c0:cd:6f:79:3b:c4:d7:b6:99:54:7b:30:0d:f9:69:c8:
         7e:3e:c8:bf:b7:51:8d:0d:1e:16:3d:66:67:1b:30:7e:47:6b:
         98:32:e6:60:f0:85:c7:5e:9a:b3:84:70:96:17:ac:fa:3e:29:
         6d:ea:44:c8:83:07:dc:74:17:a7:e9:88:d6:0c:bb:f3:16:b4:
         bb:9d:dc:62:59:9f:83:3a:cc:61:e5:4f:f4:f9:a8:4b:20:2d:
         9d:0f:8f:dc:3e:3d:74:df:03:17:b3:04:bd:96:d9:0a:9c:7f:
         a0:75:cc:92:e7:7b:d1:71:6a:d3:e6:31:92:1a:91:13:f1:0b:
         af:43:c8:64:8d:27:02:a2:f6:18:16:ed:84:dc:65:fd:c2:4e:
         b6:e3:99:c9:73:fb:a1:fe:fd:0a:8f:2e:58:c6:6f:68:c9:8a:
         a7:1d:de:a5:f1:43:61:86:fa:92:c6:d9:66:3f:97:53:b7:9c:
         a2:4c:25:de:0d:31:70:83:7d:c6:f5:65:cb:4d:d1:1b:d4:5d:
         2d:df:04:85:96:6d:44:b0:f7:7c:aa:64:21:39:04:d0:33:59:
         b9:b0:bd:f0
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIUDtd6EJV7rZnO22I9SOpjDa90y0QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUwMzhGNTVGNDkwNEU2NzYzN0JDMkYzNjlDQTRFMDBE
NEFFQUIxRTAeFw0yNDAzMTUwMDAyNTJaFw0yNTAzMTQwMDA3NTJaMDMxMTAvBgNV
BAMTKDQ3OTkxRkM0MUYyN0IxM0JCQjE2RDQ4NzA0MjM0NkZEM0U3RTUxNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO38AH8I9UsfTAoKf72ulEmJdv
GHAb9fm7HlPknMvC+5/FS1wLdRkSeL/LcRXZqFlI7ndgfNAIa6IVrTBpsHR09bsP
JBFSHClGiKO4V4WObYp2b6wD0VTLz4npb4fwILgvwy/6zoWhrotvWWp9gaHYiKYz
eoThJF6HIRje8cfUH9BivnGoSeo1Yi296probJch8oY6tk49ZYlcETb+2K9c4fRF
rd1iHRtiq1+JomTGpjYEp+l7vReSIh3g/QHI/exc/nbEfLG2y2KE7QNiRi4jVTLA
LuPvZTAHMaJvrC9dhGSe639rbb8zdMcoN0uH6vzSO8rUQGfbWr1ChbY3UK95AgMB
AAGjggKEMIICgDAdBgNVHQ4EFgQUR5kfxB8nsTu7FtSHBCNG/T5+UVYwHwYDVR0j
BBgwFoAUrgOPVfSQTmdje8LzacpOANSuqx4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTcwZDU1ZTktMDQwYi00ZWIwLTkwNTUtNGIxZTYzYTg4
YTY2LzEvQUUwMzhGNTVGNDkwNEU2NzYzN0JDMkYzNjlDQTRFMDBENEFFQUIxRS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9BRTAzOEY1NUY0OTA0RTY3NjM3QkMyRjM2
OUNBNEUwMEQ0QUVBQjFFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS81NzBkNTVlOS0wNDBiLTRlYjAtOTA1NS00YjFlNjNhODhhNjYvMS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTM4MzEzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIz
MTM1MzYzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgRIEwDQYJKoZIhvcNAQELBQADggEBAEVD
HxGoVQgzepvwza5bS2bCfUqg+7jinDHtOI2/2rPq1BNrFc4twM1veTvE17aZVHsw
DflpyH4+yL+3UY0NHhY9ZmcbMH5Ha5gy5mDwhcdemrOEcJYXrPo+KW3qRMiDB9x0
F6fpiNYMu/MWtLud3GJZn4M6zGHlT/T5qEsgLZ0Pj9w+PXTfAxezBL2W2Qqcf6B1
zJLne9FxatPmMZIakRPxC69DyGSNJwKi9hgW7YTcZf3CTrbjmclz+6H+/QqPLljG
b2jJiqcd3qXxQ2GG+pLG2WY/l1O3nKJMJd4NMXCDfcb1ZctN0RvUXS3fBIWWbUSw
93yqZCE5BNAzWbmwvfA=
-----END CERTIFICATE-----