Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c733315-bdad-4a76-ac80-3f787fc83fcb/0/326131313a343238303a3a2f32392d3239203d3e20323130383833.roa
File:                     326131313a343238303a3a2f32392d3239203d3e20323130383833.roa (raw, json)
Hash identifier:          h4KbDD17qq0H6ubQkKBNpg8tLhiAt1+/Igw+UDKaXls=
Subject key identifier:   70:9B:88:3E:0E:A2:E3:E5:09:13:64:38:E7:73:97:CD:92:CE:22:8F
Certificate issuer:       /CN=0893bff9f6ed42d9058987140aa711c3b125a981
Certificate serial:       2DFB5B60FB4CAD17DB10A98CAE652C15AE49FE1A
Authority key identifier: 08:93:BF:F9:F6:ED:42:D9:05:89:87:14:0A:A7:11:C3:B1:25:A9:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CJO_-fbtQtkFiYcUCqcRw7ElqYE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c733315-bdad-4a76-ac80-3f787fc83fcb/0/326131313a343238303a3a2f32392d3239203d3e20323130383833.roa
Signing time:             Thu 08 Jun 2023 13:21:13 +0000
ROA not before:           Thu 08 Jun 2023 13:16:13 +0000
ROA not after:            Thu 06 Jun 2024 13:21:13 +0000
asID:                     210883
IP address blocks:        2a11:4280::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:fb:5b:60:fb:4c:ad:17:db:10:a9:8c:ae:65:2c:15:ae:49:fe:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0893bff9f6ed42d9058987140aa711c3b125a981
        Validity
            Not Before: Jun  8 13:16:13 2023 GMT
            Not After : Jun  6 13:21:13 2024 GMT
        Subject: CN=709B883E0EA2E3E509136438E77397CD92CE228F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:41:21:be:c5:3d:2e:c3:9d:eb:cc:1d:a9:33:
                    e7:cf:5c:61:c0:93:63:29:7a:10:cd:88:33:ad:a2:
                    10:f9:48:6b:d6:df:0f:c6:4b:45:f7:e4:92:07:31:
                    7e:67:e2:0d:14:68:5f:6d:b0:1d:74:77:5c:96:08:
                    2b:dd:c2:34:9d:76:1f:b9:fc:2b:8c:bc:d7:5e:08:
                    44:a3:01:73:fc:d6:79:18:82:76:9f:34:b3:e4:59:
                    34:9c:9f:34:80:1b:47:fd:d9:fe:79:ba:af:e2:38:
                    a2:71:f7:de:6b:c6:c1:47:f1:72:fd:44:11:b7:12:
                    f5:f4:28:1f:74:0b:7e:08:eb:ff:f2:8f:c1:b2:cf:
                    f0:89:48:5f:3d:d4:67:29:c9:c4:df:12:dd:66:d3:
                    0b:13:c4:23:59:93:2d:ec:cc:64:13:ef:ff:c4:e8:
                    c1:1c:3e:81:95:d8:9c:26:f0:36:1a:0a:0c:5c:f1:
                    01:f8:dd:d4:e7:31:70:5a:e6:64:a6:66:f6:83:15:
                    2f:73:35:38:7f:2e:f1:84:2b:ee:48:0c:0e:41:58:
                    06:27:1f:09:ea:3a:88:50:4f:e7:6a:72:cc:09:7d:
                    c8:1b:dd:02:f4:e2:56:f1:22:b5:a7:cb:28:79:95:
                    6b:52:5e:36:a4:08:ae:f8:7b:6b:87:04:00:9a:c0:
                    d5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9B:88:3E:0E:A2:E3:E5:09:13:64:38:E7:73:97:CD:92:CE:22:8F
            X509v3 Authority Key Identifier:
                keyid:08:93:BF:F9:F6:ED:42:D9:05:89:87:14:0A:A7:11:C3:B1:25:A9:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c733315-bdad-4a76-ac80-3f787fc83fcb/0/0893BFF9F6ED42D9058987140AA711C3B125A981.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJO_-fbtQtkFiYcUCqcRw7ElqYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c733315-bdad-4a76-ac80-3f787fc83fcb/0/326131313a343238303a3a2f32392d3239203d3e20323130383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:4280::/29

    Signature Algorithm: sha256WithRSAEncryption
         69:4b:4f:a8:43:d6:fe:c3:cf:a0:ce:8b:fc:23:2b:a9:f6:eb:
         ae:15:ed:e5:ec:67:97:7d:49:35:cb:f4:72:69:31:95:65:a7:
         14:27:d4:b4:7e:b9:d2:b2:33:4f:b4:e5:10:a4:a1:47:a8:60:
         f1:07:5c:bd:31:61:26:97:90:c7:51:a8:fa:e8:9e:7e:32:23:
         2b:7b:76:af:a6:09:f2:80:1a:c3:4c:f7:3b:b2:86:31:a8:f5:
         25:18:d3:88:0f:14:08:be:39:80:ac:e4:fb:cd:6c:d8:ba:9e:
         32:2d:d1:92:b6:4a:3e:65:b2:30:b9:e6:12:8a:3b:48:77:98:
         c9:88:f8:cd:60:3a:82:a4:c5:6c:30:4b:9b:dd:00:86:e6:5b:
         98:93:be:b1:50:9c:6d:70:a5:26:fb:b1:94:3f:29:29:2b:01:
         e1:84:59:c9:59:fc:c1:aa:06:5f:bf:d8:d3:ac:e1:0e:78:49:
         9e:81:df:3f:34:1e:37:66:61:f7:3e:b4:3c:93:1c:42:61:99:
         53:e7:d4:d5:09:7f:db:a0:1f:30:36:24:5d:cb:a4:cf:45:ef:
         08:00:83:29:9e:df:0d:6a:2c:98:4e:84:24:f1:75:0e:80:96:
         d4:e6:c8:ba:8d:40:b0:83:8d:7d:bd:72:a5:42:74:66:ef:f6:
         a1:41:c0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----