Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634353a3a2f33322d3438203d3e20323136333938.roa
File:                     326131333a656634353a3a2f33322d3438203d3e20323136333938.roa (raw, json)
Hash identifier:          KbOfJgT6i755CFaTxccmpMI+sdE2518lG1Z5LCDQaRs=
Subject key identifier:   B5:1D:82:AF:38:AB:4C:EA:A7:BB:8A:28:D6:BB:9F:7C:81:84:EA:BF
Certificate issuer:       /CN=c3044238bb4721d91399f8b02719dfd22edf0087
Certificate serial:       4208C8D50D792D0A7F537ECB5D6B8CDB604BBF2C
Authority key identifier: C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634353a3a2f33322d3438203d3e20323136333938.roa
Signing time:             Sun 17 Dec 2023 19:20:00 +0000
ROA not before:           Sun 17 Dec 2023 19:15:00 +0000
ROA not after:            Sun 15 Dec 2024 19:20:00 +0000
asID:                     216398
IP address blocks:        2a13:ef45::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:08:c8:d5:0d:79:2d:0a:7f:53:7e:cb:5d:6b:8c:db:60:4b:bf:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3044238bb4721d91399f8b02719dfd22edf0087
        Validity
            Not Before: Dec 17 19:15:00 2023 GMT
            Not After : Dec 15 19:20:00 2024 GMT
        Subject: CN=B51D82AF38AB4CEAA7BB8A28D6BB9F7C8184EABF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c4:03:01:43:6d:be:1c:35:c4:55:6c:a4:40:
                    4c:34:af:66:60:b0:a6:2a:b5:57:55:bc:5c:1b:d2:
                    bc:b1:01:a9:fe:ba:1d:d6:36:a8:69:81:30:a6:96:
                    26:4a:aa:57:97:3a:4a:df:bf:c1:bd:5a:bb:22:7d:
                    a5:bf:20:98:7c:7a:8b:99:14:f6:6a:e6:a8:28:c5:
                    6f:e3:59:4d:b3:6f:5c:1b:e4:86:b2:de:87:76:8e:
                    0a:e5:0c:3d:c2:e2:62:63:e1:d4:85:dd:7e:4e:29:
                    86:64:98:5b:df:60:cd:01:58:ff:ef:49:83:24:a2:
                    16:3f:1b:e0:e3:9f:45:05:8d:bd:8b:54:ca:c7:70:
                    cc:1c:24:3d:4d:18:ac:0c:67:61:db:90:88:84:93:
                    56:ca:70:a0:28:b0:54:e2:d0:1f:e1:0e:a3:f3:6b:
                    0f:f3:89:42:b1:6c:b2:e5:25:74:9c:2a:bc:b0:6e:
                    24:90:43:68:e8:af:d1:b8:71:14:09:28:bb:cb:50:
                    4f:c5:9b:f8:ed:9b:e4:15:78:fe:27:fe:b4:99:9a:
                    74:3d:26:e8:94:c8:fd:4d:74:a4:9d:53:39:6e:a5:
                    5b:a7:97:43:39:84:af:71:91:29:a5:75:5e:4b:58:
                    b6:bb:e8:7d:ea:70:24:b7:9c:3f:ae:e7:d9:cf:f7:
                    da:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:1D:82:AF:38:AB:4C:EA:A7:BB:8A:28:D6:BB:9F:7C:81:84:EA:BF
            X509v3 Authority Key Identifier:
                keyid:C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/C3044238BB4721D91399F8B02719DFD22EDF0087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634353a3a2f33322d3438203d3e20323136333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ef45::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:8c:b5:7a:39:c0:7c:49:4f:8c:eb:1c:fb:9e:2d:e8:4f:05:
         13:93:d0:b2:5e:35:13:a6:a5:b4:37:15:6f:80:f0:ba:51:fd:
         87:9f:2d:a8:13:91:03:af:3d:3a:83:cd:a0:0b:2d:31:03:e2:
         46:81:1e:fd:d2:4f:04:ef:7f:6c:28:0a:14:75:6c:44:48:4b:
         84:c4:e3:5e:6a:b6:6b:5c:1e:df:d5:a3:c6:54:6f:4e:c7:bc:
         db:a5:69:3d:3c:b2:36:d3:27:bb:e9:da:68:94:04:29:34:98:
         78:52:1d:90:63:c5:97:50:57:c1:3f:ee:d3:d6:13:fc:4e:5f:
         98:49:c6:19:ad:f6:c9:99:88:a9:b0:14:af:8d:68:b6:c2:1e:
         4e:37:03:22:8f:8e:b2:9b:a8:65:24:87:de:a5:4c:2e:b9:9a:
         35:00:78:6a:ee:b7:03:05:b7:da:87:db:d3:e6:f6:f1:2b:15:
         e3:4f:a0:7e:2f:5a:d8:d9:78:e1:21:ae:b3:46:cb:35:af:a8:
         08:41:2c:71:a3:04:67:53:6a:85:29:ac:81:e8:24:c1:f8:2e:
         76:aa:42:9b:db:11:0d:05:dd:16:11:cd:09:ee:86:d3:ed:fd:
         90:5e:1d:25:94:8a:5d:e9:f8:7e:ce:4b:9f:c9:f4:48:4f:55:
         19:12:a8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----