Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/326130373a323438303a3a2f33322d3332203d3e203433363037.roa
File:                     326130373a323438303a3a2f33322d3332203d3e203433363037.roa (raw, json)
Hash identifier:          GebQaNqzCtdrXzNUpCWbrzmOx02SEpA8l4oUUbBXZYI=
Subject key identifier:   B3:BA:12:E9:92:44:F9:FC:85:BA:2A:2E:65:F0:F8:17:81:14:2B:D6
Certificate issuer:       /CN=18fec82431047ecdac19db3bd93c1c3fe79197d3
Certificate serial:       463112D1FF95E3D1E0B970606971BF8E4AB7C544
Authority key identifier: 18:FE:C8:24:31:04:7E:CD:AC:19:DB:3B:D9:3C:1C:3F:E7:91:97:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GP7IJDEEfs2sGds72TwcP-eRl9M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/326130373a323438303a3a2f33322d3332203d3e203433363037.roa
Signing time:             Fri 23 Feb 2024 23:57:13 +0000
ROA not before:           Fri 23 Feb 2024 23:52:13 +0000
ROA not after:            Fri 21 Feb 2025 23:57:13 +0000
asID:                     43607
IP address blocks:        2a07:2480::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:31:12:d1:ff:95:e3:d1:e0:b9:70:60:69:71:bf:8e:4a:b7:c5:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18fec82431047ecdac19db3bd93c1c3fe79197d3
        Validity
            Not Before: Feb 23 23:52:13 2024 GMT
            Not After : Feb 21 23:57:13 2025 GMT
        Subject: CN=B3BA12E99244F9FC85BA2A2E65F0F81781142BD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c0:c5:e9:33:13:66:12:9c:df:3a:00:60:3a:
                    f8:2e:bc:7e:a3:42:4d:12:e6:e9:23:a3:e2:f1:e2:
                    33:d4:42:33:b2:f7:6e:a7:36:8f:e8:d9:7e:31:60:
                    85:ea:c2:de:97:2c:17:75:28:a1:23:4d:e3:cb:d5:
                    c2:2e:8e:e5:8d:69:49:d5:34:8d:cf:b0:00:a2:1b:
                    7a:a6:81:d8:e5:13:9e:1c:dc:ea:d6:5f:94:49:e5:
                    4d:b3:cf:82:ae:97:4e:ff:97:ca:2d:59:ee:02:5f:
                    dc:3f:47:3f:ee:36:64:27:a3:33:87:c1:fc:4a:59:
                    d0:76:18:ed:0c:43:17:3b:de:01:39:01:72:94:2b:
                    98:af:6f:61:74:e7:62:d3:e5:b2:e4:ee:a7:94:e9:
                    e4:99:5d:7a:cc:c5:f6:db:35:c5:ea:4d:b5:b3:b3:
                    fa:cf:4b:18:07:04:f2:5c:6c:9d:89:e0:31:12:52:
                    e7:56:2f:ee:fd:f0:10:5c:f4:d7:7e:b6:00:15:9b:
                    f7:fa:6f:96:28:da:7b:20:dc:54:07:33:86:dc:0a:
                    42:51:b7:de:8b:8b:12:ad:99:59:85:d4:f7:eb:99:
                    55:77:a1:dc:70:6d:9a:1d:9e:bc:a2:a3:5b:34:28:
                    b7:c7:61:5f:e3:9c:a9:ed:6f:90:d8:b0:eb:d8:ee:
                    b5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BA:12:E9:92:44:F9:FC:85:BA:2A:2E:65:F0:F8:17:81:14:2B:D6
            X509v3 Authority Key Identifier:
                keyid:18:FE:C8:24:31:04:7E:CD:AC:19:DB:3B:D9:3C:1C:3F:E7:91:97:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/18FEC82431047ECDAC19DB3BD93C1C3FE79197D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GP7IJDEEfs2sGds72TwcP-eRl9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/326130373a323438303a3a2f33322d3332203d3e203433363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:2480::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:9b:d2:38:8c:33:95:2b:56:de:6a:9c:84:53:7a:8b:f9:6e:
         75:40:b7:bb:16:5b:2d:73:a3:1e:2f:d2:11:96:39:18:a5:0d:
         0c:47:78:66:50:0a:0b:cb:27:3e:e2:8a:5a:42:f2:99:86:88:
         a3:14:02:43:36:d6:1a:71:fb:c2:bd:35:69:6d:19:af:95:b4:
         98:a4:15:ac:22:b7:2b:ff:96:31:64:05:7b:14:94:2f:cb:57:
         9e:ba:35:e7:c6:d5:0c:e5:f9:19:05:d3:1c:c6:d7:e4:74:91:
         c9:1e:6c:75:95:d7:eb:ae:32:bd:e6:1b:2c:3e:fd:ad:0b:3e:
         95:3c:eb:c9:5f:4f:b7:0e:9d:c2:44:f7:47:a9:1e:c3:cb:8f:
         f0:54:01:bb:c5:17:10:1b:77:25:20:20:5c:c8:31:30:7a:2e:
         81:98:5a:bb:bb:3e:0d:92:0f:1d:72:7b:cb:05:71:4a:93:71:
         00:45:21:39:e4:ff:a5:fb:79:55:ed:7a:25:58:b1:e7:42:be:
         07:72:e8:64:a9:ca:a8:bb:65:8f:7f:54:7a:c6:c4:ba:29:e7:
         86:c9:4b:1e:d6:1d:67:1c:77:fb:89:ce:0b:9d:ba:b1:a3:b8:
         48:06:b6:18:f1:f1:be:09:cf:88:52:ea:e3:f6:3e:91:04:d3:
         66:63:67:8c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURjES0f+V49HguXBgaXG/jkq3xUQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMThmZWM4MjQzMTA0N2VjZGFjMTlkYjNiZDkzYzFjM2Zl
NzkxOTdkMzAeFw0yNDAyMjMyMzUyMTNaFw0yNTAyMjEyMzU3MTNaMDMxMTAvBgNV
BAMTKEIzQkExMkU5OTI0NEY5RkM4NUJBMkEyRTY1RjBGODE3ODExNDJCRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQwMXpMxNmEpzfOgBgOvguvH6j
Qk0S5ukjo+Lx4jPUQjOy926nNo/o2X4xYIXqwt6XLBd1KKEjTePL1cIujuWNaUnV
NI3PsACiG3qmgdjlE54c3OrWX5RJ5U2zz4Kul07/l8otWe4CX9w/Rz/uNmQnozOH
wfxKWdB2GO0MQxc73gE5AXKUK5ivb2F052LT5bLk7qeU6eSZXXrMxfbbNcXqTbWz
s/rPSxgHBPJcbJ2J4DESUudWL+798BBc9Nd+tgAVm/f6b5Yo2nsg3FQHM4bcCkJR
t96LixKtmVmF1PfrmVV3odxwbZodnryio1s0KLfHYV/jnKntb5DYsOvY7rUjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUs7oS6ZJE+fyFuiouZfD4F4EUK9YwHwYDVR0j
BBgwFoAUGP7IJDEEfs2sGds72TwcP+eRl9MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkxYzgyNjktNDUxZS00ZDBkLTkzZTQtZDExMWVjOGRk
Y2VlLzAvMThGRUM4MjQzMTA0N0VDREFDMTlEQjNCRDkzQzFDM0ZFNzkxOTdEMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0dQN0lKREVFZnMyc0dkczcyVHdjUC1l
Umw5TS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTkxYzgyNjkt
NDUxZS00ZDBkLTkzZTQtZDExMWVjOGRkY2VlLzAvMzI2MTMwMzczYTMyMzQzODMw
M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzQzMzM2MzAzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoH
JIAwDQYJKoZIhvcNAQELBQADggEBAAub0jiMM5UrVt5qnIRTeov5bnVAt7sWWy1z
ox4v0hGWORilDQxHeGZQCgvLJz7iilpC8pmGiKMUAkM21hpx+8K9NWltGa+VtJik
Fawityv/ljFkBXsUlC/LV566NefG1Qzl+RkF0xzG1+R0kckebHWV1+uuMr3mGyw+
/a0LPpU868lfT7cOncJE90epHsPLj/BUAbvFFxAbdyUgIFzIMTB6LoGYWru7Pg2S
Dx1ye8sFcUqTcQBFITnk/6X7eVXteiVYsedCvgdy6GSpyqi7ZY9/VHrGxLop54bJ
Sx7WHWccd/uJzgudurGjuEgGthjx8b4Jz4hS6uP2PpEE02ZjZ4w=
-----END CERTIFICATE-----