Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/2/326131333a646638303a396430303a3a2f34382d3438203d3e20323135373931.roa
File:                     326131333a646638303a396430303a3a2f34382d3438203d3e20323135373931.roa (raw, json)
Hash identifier:          +XJWSPIgR33u6Qrj8t++P0SwF5Jm2dI40rT2ymX0BbY=
Subject key identifier:   E8:D6:08:38:A9:33:BD:53:1B:28:17:05:66:4B:E7:EB:72:EB:60:0E
Certificate issuer:       /CN=1775F6FE3E8D1497058AFC5AB91A070A2ECF027C
Certificate serial:       31DEA547261FF41C86C083AC1F18CD3E3F1FA84D
Authority key identifier: 17:75:F6:FE:3E:8D:14:97:05:8A:FC:5A:B9:1A:07:0A:2E:CF:02:7C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/1775F6FE3E8D1497058AFC5AB91A070A2ECF027C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/2/326131333a646638303a396430303a3a2f34382d3438203d3e20323135373931.roa
Signing time:             Wed 13 Mar 2024 00:51:08 +0000
ROA not before:           Wed 13 Mar 2024 00:46:08 +0000
ROA not after:            Wed 12 Mar 2025 00:51:08 +0000
asID:                     215791
IP address blocks:        2a13:df80:9d00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:de:a5:47:26:1f:f4:1c:86:c0:83:ac:1f:18:cd:3e:3f:1f:a8:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1775F6FE3E8D1497058AFC5AB91A070A2ECF027C
        Validity
            Not Before: Mar 13 00:46:08 2024 GMT
            Not After : Mar 12 00:51:08 2025 GMT
        Subject: CN=E8D60838A933BD531B281705664BE7EB72EB600E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:72:9c:52:29:59:7d:e4:96:be:cd:32:6c:13:
                    fe:93:d6:7a:18:c0:7c:4b:dd:59:af:db:a1:fa:1f:
                    89:a1:68:c9:13:41:d4:15:e3:65:bb:20:ce:8d:f0:
                    b8:13:2d:16:9b:76:2c:d5:29:36:a8:27:cd:82:32:
                    d0:5c:b3:52:e8:04:9c:d9:5f:e1:7d:34:b6:40:28:
                    13:05:ab:c1:ec:f5:6d:06:7d:ca:0e:56:bf:24:53:
                    c7:29:88:12:f9:fa:7d:02:be:3e:d7:b2:b3:cb:9e:
                    ae:64:3f:7d:39:c9:0f:34:61:68:2b:2b:8e:cb:6d:
                    34:75:ca:2d:51:f4:a8:57:7a:a7:07:e8:21:00:97:
                    db:6d:a0:79:a7:b7:a9:47:2a:ca:7d:a3:92:eb:a1:
                    32:6b:41:c4:a4:e7:d9:ef:32:ff:17:82:0e:58:de:
                    e5:95:2a:5d:84:6b:58:b5:ce:68:07:84:78:65:68:
                    65:15:f5:67:6e:ca:c6:94:62:82:9d:05:fb:2f:ba:
                    2b:01:89:e8:b1:76:a1:74:28:64:d3:3f:9b:73:1b:
                    5f:66:17:33:17:13:6f:3a:1a:32:2d:e3:29:22:9b:
                    c7:b4:29:87:c3:10:89:7e:4c:da:a0:e7:92:10:45:
                    9f:1a:d0:88:bf:25:0e:7f:f4:48:4e:e5:1e:ce:bc:
                    bb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D6:08:38:A9:33:BD:53:1B:28:17:05:66:4B:E7:EB:72:EB:60:0E
            X509v3 Authority Key Identifier:
                keyid:17:75:F6:FE:3E:8D:14:97:05:8A:FC:5A:B9:1A:07:0A:2E:CF:02:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/2/1775F6FE3E8D1497058AFC5AB91A070A2ECF027C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/1775F6FE3E8D1497058AFC5AB91A070A2ECF027C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/2/326131333a646638303a396430303a3a2f34382d3438203d3e20323135373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:9d00::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:ba:1d:03:fe:69:82:79:e1:07:40:e4:50:df:b6:2a:2a:0e:
         6a:4a:b9:b0:af:b9:73:f9:01:ee:e6:61:cc:6f:fc:2f:58:c8:
         76:be:f6:31:38:ce:73:0e:3c:ff:72:90:d6:82:43:b8:7b:5e:
         f2:a9:c2:c9:65:3f:d8:e4:63:49:5a:0d:31:93:2c:ea:84:14:
         92:cc:35:18:fe:0a:68:b9:f0:8f:c5:b3:47:26:b2:d2:29:63:
         d2:4d:67:49:05:89:2f:33:7c:07:1e:8b:2e:c6:0d:2c:3d:08:
         2a:cd:96:e5:a7:17:3b:47:8c:f4:1c:3c:d3:a9:8b:af:6d:18:
         0d:83:37:1e:5f:30:37:94:5a:6c:1a:5c:59:1f:4d:14:80:1f:
         45:45:cc:6b:8b:91:09:c4:c9:f5:07:04:4d:30:6f:72:da:81:
         af:44:61:51:2e:aa:9a:be:3e:c7:2f:17:ab:b5:5b:ef:38:51:
         d7:ca:88:7b:4e:74:41:cd:28:a5:17:ec:d6:87:d3:fd:ee:e2:
         a5:90:4a:cd:d6:37:df:b9:a2:21:35:27:ae:80:aa:15:3e:70:
         6d:92:f0:ff:7f:c2:f6:6b:e2:48:b1:c4:b1:94:ac:17:4e:bd:
         45:c9:7e:cc:41:9a:97:31:f2:95:9b:61:7d:58:74:5f:d0:1c:
         03:2f:0c:39
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUMd6lRyYf9ByGwIOsHxjNPj8fqE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc3NUY2RkUzRThEMTQ5NzA1OEFGQzVBQjkxQTA3MEEy
RUNGMDI3QzAeFw0yNDAzMTMwMDQ2MDhaFw0yNTAzMTIwMDUxMDhaMDMxMTAvBgNV
BAMTKEU4RDYwODM4QTkzM0JENTMxQjI4MTcwNTY2NEJFN0VCNzJFQjYwMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPcpxSKVl95Ja+zTJsE/6T1noY
wHxL3Vmv26H6H4mhaMkTQdQV42W7IM6N8LgTLRabdizVKTaoJ82CMtBcs1LoBJzZ
X+F9NLZAKBMFq8Hs9W0GfcoOVr8kU8cpiBL5+n0Cvj7XsrPLnq5kP305yQ80YWgr
K47LbTR1yi1R9KhXeqcH6CEAl9ttoHmnt6lHKsp9o5LroTJrQcSk59nvMv8Xgg5Y
3uWVKl2Ea1i1zmgHhHhlaGUV9WduysaUYoKdBfsvuisBieixdqF0KGTTP5tzG19m
FzMXE286GjIt4ykim8e0KYfDEIl+TNqg55IQRZ8a0Ii/JQ5/9EhO5R7OvLuLAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQU6NYIOKkzvVMbKBcFZkvn63LrYA4wHwYDVR0j
BBgwFoAUF3X2/j6NFJcFivxauRoHCi7PAnwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzIvMTc3NUY2RkUzRThEMTQ5NzA1OEFGQzVBQjkxQTA3MEEyRUNGMDI3Qy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wNDAzMmM4Zi0xZDU3LTRj
M2ItOTA0My1hMGU3ZmViZjE2N2QvMC8xNzc1RjZGRTNFOEQxNDk3MDU4QUZDNUFC
OTFBMDcwQTJFQ0YwMjdDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS84OTI3MGY2Yy1hM2ZlLTQyOTktYjA3OS0zMDllZDk3ZjM4MjQvMi8zMjYxMzEz
MzNhNjQ2NjM4MzAzYTM5NjQzMDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM1MzczOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKhPfgJ0AMA0GCSqGSIb3DQEBCwUAA4IBAQAF
uh0D/mmCeeEHQORQ37YqKg5qSrmwr7lz+QHu5mHMb/wvWMh2vvYxOM5zDjz/cpDW
gkO4e17yqcLJZT/Y5GNJWg0xkyzqhBSSzDUY/gpoufCPxbNHJrLSKWPSTWdJBYkv
M3wHHosuxg0sPQgqzZblpxc7R4z0HDzTqYuvbRgNgzceXzA3lFpsGlxZH00UgB9F
Rcxri5EJxMn1BwRNMG9y2oGvRGFRLqqavj7HLxertVvvOFHXyoh7TnRBzSilF+zW
h9P97uKlkErN1jffuaIhNSeugKoVPnBtkvD/f8L2a+JIscSxlKwXTr1FyX7MQZqX
MfKVm2F9WHRf0BwDLww5
-----END CERTIFICATE-----