Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/1/326130373a323438363a6663303a3a2f34342d3438203d3e20323135313437.roa
File:                     326130373a323438363a6663303a3a2f34342d3438203d3e20323135313437.roa (raw, json)
Hash identifier:          tMsNakIaNE1YSnO83Wdq/qu0k7JReRsPeGD6S/YEGho=
Subject key identifier:   B9:BD:97:DF:E1:CF:79:4A:2D:1F:1F:1D:77:5C:93:C8:E1:A2:5F:D6
Certificate issuer:       /CN=86A3055545CB4F4C420BE943F5C18559EBC1F39B
Certificate serial:       48069FA8B6D7C091AE38D9BA6A32CB3D9B93C17C
Authority key identifier: 86:A3:05:55:45:CB:4F:4C:42:0B:E9:43:F5:C1:85:59:EB:C1:F3:9B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/86A3055545CB4F4C420BE943F5C18559EBC1F39B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/1/326130373a323438363a6663303a3a2f34342d3438203d3e20323135313437.roa
Signing time:             Fri 21 Jun 2024 09:14:59 +0000
ROA not before:           Fri 21 Jun 2024 09:09:59 +0000
ROA not after:            Fri 20 Jun 2025 09:14:59 +0000
asID:                     215147
IP address blocks:        2a07:2486:fc0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:06:9f:a8:b6:d7:c0:91:ae:38:d9:ba:6a:32:cb:3d:9b:93:c1:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86A3055545CB4F4C420BE943F5C18559EBC1F39B
        Validity
            Not Before: Jun 21 09:09:59 2024 GMT
            Not After : Jun 20 09:14:59 2025 GMT
        Subject: CN=B9BD97DFE1CF794A2D1F1F1D775C93C8E1A25FD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:15:a5:97:b6:b8:cb:2d:46:d5:58:20:da:88:
                    b3:9a:84:ff:90:d3:67:ef:58:cb:4e:bf:96:bc:84:
                    0c:77:c3:58:be:57:e1:7a:88:ff:73:71:4d:d7:b9:
                    e3:1b:c7:5b:40:98:a0:f7:c7:73:8f:a7:b2:ff:5b:
                    40:a7:50:60:6a:1e:d5:04:c3:40:72:65:e9:50:ea:
                    30:91:6c:21:c1:26:6d:70:cb:55:f8:76:cf:f2:74:
                    ae:47:c6:39:63:42:f5:79:a0:85:10:6b:35:43:89:
                    c1:94:de:60:0a:03:a0:a1:67:9d:c5:37:c2:3e:f0:
                    75:11:04:01:cd:bd:68:ea:7c:cf:8c:43:38:bd:f0:
                    d1:6e:b8:75:ac:cb:f4:6f:0e:8c:04:20:06:4d:17:
                    9e:e5:d3:93:6a:ce:93:d9:75:6e:9b:e0:72:da:cb:
                    01:06:9a:31:87:84:9f:bd:b0:a2:ce:c8:34:5b:69:
                    eb:42:2c:32:f5:55:b5:94:ba:ab:45:80:46:79:1a:
                    2c:dc:84:14:c5:89:c2:bf:42:db:cd:7b:54:5b:40:
                    1f:49:09:df:69:2a:37:9f:b4:2a:82:e9:1c:4a:ca:
                    c3:b4:51:58:3d:80:13:6a:2f:d1:f9:82:cc:8e:a7:
                    17:ad:7b:63:cb:5f:ad:89:9c:6d:d1:f2:c7:09:20:
                    44:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BD:97:DF:E1:CF:79:4A:2D:1F:1F:1D:77:5C:93:C8:E1:A2:5F:D6
            X509v3 Authority Key Identifier:
                keyid:86:A3:05:55:45:CB:4F:4C:42:0B:E9:43:F5:C1:85:59:EB:C1:F3:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/1/86A3055545CB4F4C420BE943F5C18559EBC1F39B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/86A3055545CB4F4C420BE943F5C18559EBC1F39B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/1/326130373a323438363a6663303a3a2f34342d3438203d3e20323135313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:2486:fc0::/44

    Signature Algorithm: sha256WithRSAEncryption
         0d:70:14:3b:b0:ec:c9:a3:26:24:04:f1:cc:8a:08:64:c5:f6:
         71:45:0b:9d:65:58:d5:ce:ec:a8:b0:1a:ce:18:d5:05:02:40:
         a3:2a:6b:af:04:aa:1e:30:90:64:1a:3c:38:5d:cc:a4:d7:6d:
         0b:7d:5d:32:f5:05:7c:7b:95:de:c5:70:84:2b:b7:9d:5d:d1:
         07:20:4d:7b:bb:80:52:33:14:a7:df:d8:33:4d:40:96:10:ae:
         fd:4f:49:93:31:c7:ce:36:2a:82:bd:1b:1d:f5:6d:25:9d:30:
         59:9a:1a:c5:94:46:bb:d6:2d:55:85:4d:c6:2b:e5:6d:ef:bb:
         fb:76:00:61:4b:4d:76:4c:3d:13:14:37:04:fc:0a:dd:43:e0:
         dd:38:d3:dc:cd:f1:0b:04:6b:51:e6:86:5b:e1:b4:b1:58:d7:
         18:7e:ef:ee:dc:8a:66:01:7a:56:7f:9d:d5:56:10:0f:1f:86:
         04:ad:f6:a8:ac:dd:cd:f1:ec:44:24:24:b8:3e:f5:31:dc:e3:
         e8:5f:bb:51:dc:17:65:1d:ea:fd:ea:80:4e:67:95:bf:be:29:
         8e:56:4f:b1:d9:73:4a:00:f3:e5:63:79:5b:7a:bf:21:22:ca:
         2f:68:64:cd:eb:a5:12:67:ac:94:1d:fe:f7:d3:95:84:ba:29:
         f1:c2:f3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----