Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a663030363a3a2f34382d3438203d3e20323136323839.roa
File:                     326131333a656634343a663030363a3a2f34382d3438203d3e20323136323839.roa (raw, json)
Hash identifier:          5MOfZOfOjhAeRxb/O8u7y34GczQVP1q/dwC1od/QwrE=
Subject key identifier:   AB:89:4F:15:70:24:A5:85:EE:09:E2:2B:14:E8:C6:C3:C9:1B:77:0E
Certificate issuer:       /CN=c3044238bb4721d91399f8b02719dfd22edf0087
Certificate serial:       355784DE35063CEB004C0DADFB66510122B614DE
Authority key identifier: C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a663030363a3a2f34382d3438203d3e20323136323839.roa
Signing time:             Sun 17 Dec 2023 16:04:44 +0000
ROA not before:           Sun 17 Dec 2023 15:59:44 +0000
ROA not after:            Sun 15 Dec 2024 16:04:44 +0000
asID:                     216289
IP address blocks:        2a13:ef44:f006::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:57:84:de:35:06:3c:eb:00:4c:0d:ad:fb:66:51:01:22:b6:14:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3044238bb4721d91399f8b02719dfd22edf0087
        Validity
            Not Before: Dec 17 15:59:44 2023 GMT
            Not After : Dec 15 16:04:44 2024 GMT
        Subject: CN=AB894F157024A585EE09E22B14E8C6C3C91B770E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ae:43:4b:1a:40:31:63:26:5e:62:d7:cd:f4:
                    35:e8:a6:a3:c6:e1:11:da:dc:7c:09:00:e6:dd:aa:
                    a6:66:93:f0:fb:a7:d2:9b:8d:0d:ba:47:85:fb:ff:
                    02:b1:ad:c3:cd:c0:79:7b:8f:09:80:d6:36:04:f3:
                    3e:30:1a:46:c5:62:aa:ee:d3:ef:e8:3c:a5:a0:53:
                    77:68:13:1f:ad:de:d2:32:03:28:5c:0a:a6:8a:b6:
                    dd:9c:2e:31:cc:57:42:07:07:19:31:7f:5c:2d:68:
                    01:f2:23:6f:34:35:23:25:07:38:63:51:49:17:6e:
                    70:f0:6f:3f:6c:12:57:25:7f:71:34:da:ff:e2:03:
                    cb:c8:41:e5:db:50:45:40:0e:3d:fb:c2:7f:c3:6f:
                    57:69:1f:87:f1:80:49:70:0b:28:9a:3c:92:59:4e:
                    bd:7b:6c:50:ef:5d:51:67:4b:2a:a5:05:80:06:32:
                    24:21:e3:02:6f:1f:54:05:4b:ae:91:de:8d:e9:f1:
                    2a:35:e7:2d:0a:10:03:ef:01:f1:19:ae:f7:27:d9:
                    5b:c3:c9:9d:f8:0a:a8:7d:7f:71:da:c3:77:c0:87:
                    a5:03:e9:df:b4:fb:2e:52:27:b5:d7:45:1c:d6:ce:
                    cb:1b:5c:e0:27:2d:ec:a7:27:fc:2c:ca:ef:26:1d:
                    4f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:89:4F:15:70:24:A5:85:EE:09:E2:2B:14:E8:C6:C3:C9:1B:77:0E
            X509v3 Authority Key Identifier:
                keyid:C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/C3044238BB4721D91399F8B02719DFD22EDF0087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a663030363a3a2f34382d3438203d3e20323136323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ef44:f006::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:a5:04:ac:35:15:56:f2:1c:40:f1:5d:73:35:89:e9:46:b1:
         fb:0f:a4:9d:e9:07:ff:df:fc:0e:1c:5f:8b:54:11:06:1b:ff:
         e2:d0:51:cf:51:71:9e:39:fb:a3:d8:9b:a6:ff:70:59:0d:f0:
         fb:26:20:5f:6c:a1:4b:c1:a1:da:bd:f2:9b:2c:76:93:bd:94:
         27:21:c0:eb:df:6c:70:a7:84:4b:4e:94:44:1d:16:93:9d:38:
         9c:bb:0c:1b:2a:a2:c7:cd:83:df:d7:55:3c:39:3a:26:45:37:
         b2:85:6e:ab:d0:ea:04:9c:ae:a7:5b:3a:1c:71:3e:a5:2b:96:
         5e:11:65:b5:f1:d5:f7:c2:50:d3:cb:c5:fa:20:2b:99:f7:fd:
         51:56:42:6f:8c:42:50:9a:b1:18:f0:03:9c:c6:af:00:16:43:
         eb:ea:3b:39:db:fb:5d:9b:17:85:18:3a:aa:6a:23:05:af:14:
         95:da:db:c2:d7:e4:d1:a9:d1:ad:65:5e:b8:12:4e:d3:54:d5:
         c5:25:19:f5:7a:0c:f8:df:b7:6b:34:f1:7a:22:e3:24:f6:5f:
         12:35:0d:a0:1d:c7:e1:e1:90:dc:c1:e6:85:e5:96:24:f4:b3:
         75:20:db:ee:1c:53:1f:1f:96:2b:24:3a:68:69:8a:57:17:71:
         a5:87:76:a1
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUNVeE3jUGPOsATA2t+2ZRASK2FN4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzMwNDQyMzhiYjQ3MjFkOTEzOTlmOGIwMjcxOWRmZDIy
ZWRmMDA4NzAeFw0yMzEyMTcxNTU5NDRaFw0yNDEyMTUxNjA0NDRaMDMxMTAvBgNV
BAMTKEFCODk0RjE1NzAyNEE1ODVFRTA5RTIyQjE0RThDNkMzQzkxQjc3MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkrkNLGkAxYyZeYtfN9DXopqPG
4RHa3HwJAObdqqZmk/D7p9KbjQ26R4X7/wKxrcPNwHl7jwmA1jYE8z4wGkbFYqru
0+/oPKWgU3doEx+t3tIyAyhcCqaKtt2cLjHMV0IHBxkxf1wtaAHyI280NSMlBzhj
UUkXbnDwbz9sElclf3E02v/iA8vIQeXbUEVADj37wn/Db1dpH4fxgElwCyiaPJJZ
Tr17bFDvXVFnSyqlBYAGMiQh4wJvH1QFS66R3o3p8So15y0KEAPvAfEZrvcn2VvD
yZ34Cqh9f3Haw3fAh6UD6d+0+y5SJ7XXRRzWzssbXOAnLeynJ/wsyu8mHU9BAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUq4lPFXAkpYXuCeIrFOjGw8kbdw4wHwYDVR0j
BBgwFoAUwwRCOLtHIdkTmfiwJxnf0i7fAIcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTRlMTE5ZTEtYTM0MC00MTE2LWEyOTctN2NhZjdmMTFh
YzVkLzAvQzMwNDQyMzhCQjQ3MjFEOTEzOTlGOEIwMjcxOURGRDIyRURGMDA4Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3d3UkNPTHRISWRrVG1maXdKeG5mMGk3
ZkFJYy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTRlMTE5ZTEt
YTM0MC00MTE2LWEyOTctN2NhZjdmMTFhYzVkLzAvMzI2MTMxMzMzYTY1NjYzNDM0
M2E2NjMwMzAzNjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNjMyMzgzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoT70TwBjANBgkqhkiG9w0BAQsFAAOCAQEAUaUErDUVVvIcQPFd
czWJ6Uax+w+knekH/9/8Dhxfi1QRBhv/4tBRz1Fxnjn7o9ibpv9wWQ3w+yYgX2yh
S8Gh2r3ymyx2k72UJyHA699scKeES06URB0Wk504nLsMGyqix82D39dVPDk6JkU3
soVuq9DqBJyup1s6HHE+pSuWXhFltfHV98JQ08vF+iArmff9UVZCb4xCUJqxGPAD
nMavABZD6+o7Odv7XZsXhRg6qmojBa8Uldrbwtfk0anRrWVeuBJO01TVxSUZ9XoM
+N+3azTxeiLjJPZfEjUNoB3H4eGQ3MHmheWWJPSzdSDb7hxTHx+WKyQ6aGmKVxdx
pYd2oQ==
-----END CERTIFICATE-----