Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/2/326130353a646663313a393162393a3a2f34382d3438203d3e203534313438.roa
File:                     326130353a646663313a393162393a3a2f34382d3438203d3e203534313438.roa (raw, json)
Hash identifier:          7wp0Ew4mNmmbkRjESOEZT2oGkWblndAOOk+JoYL9ivo=
Subject key identifier:   F3:2B:EE:91:6B:7A:8A:1A:2A:D1:35:EC:7F:99:F1:33:6B:A9:30:33
Certificate issuer:       /CN=2699D31EA71B96E1A99C35B1F5626ACC517EE2E1
Certificate serial:       2ADBC6A2F3C87E65591BB78C6090CEBDA5758638
Authority key identifier: 26:99:D3:1E:A7:1B:96:E1:A9:9C:35:B1:F5:62:6A:CC:51:7E:E2:E1
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/2699D31EA71B96E1A99C35B1F5626ACC517EE2E1.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/2/326130353a646663313a393162393a3a2f34382d3438203d3e203534313438.roa
Signing time:             Mon 03 Jun 2024 22:10:35 +0000
ROA not before:           Mon 03 Jun 2024 22:05:35 +0000
ROA not after:            Mon 02 Jun 2025 22:10:35 +0000
asID:                     54148
IP address blocks:        2a05:dfc1:91b9::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:db:c6:a2:f3:c8:7e:65:59:1b:b7:8c:60:90:ce:bd:a5:75:86:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2699D31EA71B96E1A99C35B1F5626ACC517EE2E1
        Validity
            Not Before: Jun  3 22:05:35 2024 GMT
            Not After : Jun  2 22:10:35 2025 GMT
        Subject: CN=F32BEE916B7A8A1A2AD135EC7F99F1336BA93033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:dd:86:13:21:1a:46:12:ae:37:97:ff:91:71:
                    ec:74:78:37:9c:39:81:89:2b:06:61:f6:da:75:79:
                    21:5e:1e:41:7c:b8:9c:48:fc:52:dd:1f:24:56:c3:
                    09:c1:94:af:05:90:50:df:1a:3d:23:b0:98:b7:69:
                    48:7d:23:70:a7:cd:4d:a4:49:55:a2:da:01:d9:76:
                    ac:a0:63:c0:75:a0:16:77:8c:11:ed:31:5e:46:71:
                    1c:a0:06:68:db:22:56:36:b6:e6:0b:01:a4:84:5f:
                    ed:42:3e:2c:60:12:36:5c:54:ae:80:5b:cc:1d:b2:
                    1b:78:39:ac:d5:1c:6c:95:da:fd:a5:c5:0c:19:79:
                    a2:3d:87:ed:fa:cf:74:39:f7:9f:5a:7e:c3:4c:7f:
                    db:d9:61:1b:24:37:42:95:80:ba:9a:5b:ac:cb:ee:
                    35:25:01:81:e7:bb:9d:ac:15:a0:76:6c:cf:a3:4d:
                    f9:6f:45:d6:2c:e3:0c:7f:94:80:48:70:2e:c1:01:
                    09:41:06:53:6e:ca:35:e8:c0:65:a0:10:72:59:71:
                    51:81:6c:08:98:76:57:71:71:77:03:e2:5a:2b:a8:
                    d4:c1:97:ec:4d:20:46:e6:9d:14:a4:0a:18:ec:5b:
                    66:9e:4c:5d:7f:f7:1a:99:43:71:e5:ed:6e:1a:a6:
                    ff:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:2B:EE:91:6B:7A:8A:1A:2A:D1:35:EC:7F:99:F1:33:6B:A9:30:33
            X509v3 Authority Key Identifier:
                keyid:26:99:D3:1E:A7:1B:96:E1:A9:9C:35:B1:F5:62:6A:CC:51:7E:E2:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/2/2699D31EA71B96E1A99C35B1F5626ACC517EE2E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/2699D31EA71B96E1A99C35B1F5626ACC517EE2E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/2/326130353a646663313a393162393a3a2f34382d3438203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:91b9::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:a4:91:c2:24:35:f8:6b:53:c3:aa:a5:71:98:15:5a:67:7e:
         6d:35:55:c0:76:eb:68:00:36:55:b6:77:ec:af:af:57:77:f7:
         85:2c:e6:97:04:10:e3:4c:e8:1f:4b:cd:6d:be:d7:d4:0c:03:
         04:9a:f9:f1:07:f9:3f:82:bd:91:7e:25:cd:86:e4:22:65:fd:
         6b:05:8e:48:00:96:c5:90:39:9e:10:29:b4:32:4d:35:93:a7:
         51:23:42:6c:93:6a:f0:b2:f4:61:89:51:9a:79:64:e2:72:f8:
         f0:84:e1:50:12:1f:d4:59:ed:f0:3c:2d:43:11:6d:5a:7c:74:
         b6:a4:30:86:e3:44:4d:cb:61:3c:64:56:e0:b7:0f:38:67:ad:
         4e:4e:1d:13:54:c3:86:68:f9:b5:1a:d5:e7:c7:3c:fd:fc:79:
         bd:ef:6d:20:04:84:92:27:34:26:b6:5b:a4:b3:44:fb:1c:03:
         34:31:34:ea:5c:cb:41:49:4b:a6:b5:05:ff:78:c8:10:60:0b:
         6e:db:67:07:c8:40:59:8b:7f:9b:e0:1b:cb:de:1c:c4:5e:af:
         be:89:5e:66:d3:06:fd:df:a2:e3:5b:09:69:2f:6e:7c:4e:a4:
         c2:11:54:6f:20:c0:5f:34:af:d1:80:8e:2f:d5:f8:00:c2:34:
         98:9e:40:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----