Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/646b5ebc-f4ee-4c8e-80a2-17b3e3acf734/1/323030313a3766383a3134303a3a2f34382d3438203d3e203536373338.roa
File:                     323030313a3766383a3134303a3a2f34382d3438203d3e203536373338.roa (raw, json)
Hash identifier:          OwjEsQZ8BLKl8MFC+hOFBYPMEA4PMaZwR50xl+eGFLE=
Subject key identifier:   FF:2B:44:68:04:59:12:81:A3:06:55:9C:D9:F0:AE:B4:92:69:BF:2E
Certificate issuer:       /CN=25297f0c4b0430f30a7878d51fb3b7ac11250092
Certificate serial:       73E3D73FDEF4F8A63D2C70BB7CA9672610C4FD6F
Authority key identifier: 25:29:7F:0C:4B:04:30:F3:0A:78:78:D5:1F:B3:B7:AC:11:25:00:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JSl_DEsEMPMKeHjVH7O3rBElAJI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/646b5ebc-f4ee-4c8e-80a2-17b3e3acf734/1/323030313a3766383a3134303a3a2f34382d3438203d3e203536373338.roa
Signing time:             Thu 21 Sep 2023 21:47:26 +0000
ROA not before:           Thu 21 Sep 2023 21:42:26 +0000
ROA not after:            Thu 19 Sep 2024 21:47:26 +0000
asID:                     56738
IP address blocks:        2001:7f8:140::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e3:d7:3f:de:f4:f8:a6:3d:2c:70:bb:7c:a9:67:26:10:c4:fd:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25297f0c4b0430f30a7878d51fb3b7ac11250092
        Validity
            Not Before: Sep 21 21:42:26 2023 GMT
            Not After : Sep 19 21:47:26 2024 GMT
        Subject: CN=FF2B446804591281A306559CD9F0AEB49269BF2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e7:38:bf:aa:e0:54:c1:81:8c:ad:4d:4f:26:
                    9e:53:06:3e:32:90:26:07:b5:2c:bc:54:33:d0:4a:
                    af:0b:20:be:f5:c6:c6:21:e8:ff:9f:0c:a2:91:21:
                    65:57:1b:af:c4:1f:4e:b2:66:22:52:f4:62:4b:ca:
                    54:ea:9d:22:8d:0e:64:10:4a:33:e7:52:b8:d3:88:
                    54:6a:58:27:2d:70:f8:ff:b0:be:6e:f6:e2:82:73:
                    c0:52:3d:c6:de:5d:3b:b8:1e:2e:e6:c8:cf:f7:be:
                    fd:cb:01:af:6b:21:47:6d:39:dc:38:96:48:59:9f:
                    fc:ef:fa:4c:31:67:5d:43:1c:b2:37:ef:29:7d:ca:
                    74:56:5b:f9:25:1c:08:ec:b8:97:db:c7:04:10:ce:
                    a8:34:de:05:9a:e8:35:7d:3d:f8:c5:68:00:15:22:
                    2c:42:e2:b5:30:b7:d4:23:81:55:d7:ea:bd:cb:d7:
                    eb:ec:ea:d6:19:21:da:46:83:3a:c0:f6:9c:c4:99:
                    e9:2e:ee:e8:a0:aa:63:9c:df:97:fa:87:e7:d6:b7:
                    bc:d6:9a:ac:69:4b:df:c2:5e:4d:6e:67:51:5f:a1:
                    bf:10:97:9e:57:ef:c7:34:8a:42:cf:99:a9:08:3f:
                    b1:af:ea:7c:ba:53:3f:f7:0c:f1:30:f4:e3:f8:82:
                    1f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:2B:44:68:04:59:12:81:A3:06:55:9C:D9:F0:AE:B4:92:69:BF:2E
            X509v3 Authority Key Identifier:
                keyid:25:29:7F:0C:4B:04:30:F3:0A:78:78:D5:1F:B3:B7:AC:11:25:00:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/646b5ebc-f4ee-4c8e-80a2-17b3e3acf734/1/25297F0C4B0430F30A7878D51FB3B7AC11250092.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSl_DEsEMPMKeHjVH7O3rBElAJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/646b5ebc-f4ee-4c8e-80a2-17b3e3acf734/1/323030313a3766383a3134303a3a2f34382d3438203d3e203536373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:7f8:140::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:a9:08:a5:8a:77:a6:46:29:90:bd:15:a0:03:0f:2b:65:bb:
         35:d9:84:69:02:5a:19:cc:cf:51:9b:9b:1d:c2:35:af:53:c9:
         0b:3e:47:29:55:41:66:b2:77:31:c1:e5:b8:ac:32:22:09:7e:
         f7:76:e5:bc:37:f1:f0:4b:ec:e6:ed:96:af:50:86:82:55:74:
         2e:da:25:67:26:93:8f:5c:68:b7:b3:49:35:1d:fe:8f:1a:19:
         9a:35:2b:84:88:64:33:91:90:06:ae:4b:d6:9f:99:94:ad:e5:
         d9:20:11:10:6c:b7:7a:c8:72:24:52:7d:6a:6f:1c:9b:f4:82:
         d6:4c:43:f7:a7:a2:8a:67:94:f5:e0:e3:25:b7:7d:95:7e:f8:
         23:80:f7:0b:88:13:d6:87:ef:10:d9:17:3a:5c:58:c3:82:82:
         22:e5:7d:89:da:ed:95:f4:68:69:42:cb:9c:4f:17:93:28:61:
         9a:7e:87:0b:25:bb:38:87:1c:7d:82:c4:92:cc:05:01:b4:98:
         bc:d4:5e:52:4b:fc:c3:c2:3a:5f:6c:f6:2d:3f:5e:3b:e5:3c:
         46:51:14:48:4c:96:55:bc:ca:e3:96:a6:a1:30:30:c1:d6:d3:
         ea:9e:86:f5:18:e1:eb:d8:9b:75:94:82:23:d2:b4:f0:76:07:
         f0:fd:a0:55
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----