Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a313330303a3a2f34302d3438203d3e20323033363335.roa
File:                     326130373a353463353a313330303a3a2f34302d3438203d3e20323033363335.roa (raw, json)
Hash identifier:          6OlPLvCJfCHErkTKiwnwsriaDeCl/Ayhqk4Qzjeno8s=
Subject key identifier:   CF:1D:72:8B:A9:33:CE:E1:E8:BF:33:54:6C:98:8B:80:55:FF:3B:B1
Certificate issuer:       /CN=F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB
Certificate serial:       3415EE34A8FBF812B4AC39DA9CD67AE38CB8ACBB
Authority key identifier: F3:64:8E:FD:78:D6:BE:1E:E2:CE:BC:E8:91:40:A2:F2:D1:45:70:CB
Authority info access:    rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a313330303a3a2f34302d3438203d3e20323033363335.roa
Signing time:             Mon 18 Sep 2023 15:33:05 +0000
ROA not before:           Mon 18 Sep 2023 15:28:05 +0000
ROA not after:            Mon 16 Sep 2024 15:33:05 +0000
asID:                     203635
IP address blocks:        2a07:54c5:1300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:15:ee:34:a8:fb:f8:12:b4:ac:39:da:9c:d6:7a:e3:8c:b8:ac:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB
        Validity
            Not Before: Sep 18 15:28:05 2023 GMT
            Not After : Sep 16 15:33:05 2024 GMT
        Subject: CN=CF1D728BA933CEE1E8BF33546C988B8055FF3BB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:64:7c:ff:a9:3c:82:1e:2e:f9:0a:a2:6d:f0:
                    34:01:a1:cc:f3:2a:4e:ae:fd:06:61:79:a5:88:d5:
                    0f:8a:58:af:4b:25:ba:a6:77:91:7b:23:8b:8e:54:
                    c0:e3:ce:20:68:e7:51:70:23:e0:cd:a1:d7:99:38:
                    47:e9:19:54:e9:3b:ed:66:d5:6f:00:0a:4e:f6:86:
                    54:79:be:db:74:b7:34:05:0c:5e:4e:39:86:45:e8:
                    73:90:81:39:d3:12:09:74:58:87:61:1d:58:9a:50:
                    20:df:19:d7:a6:3d:87:a1:a3:9d:14:bb:bf:b5:37:
                    0a:0e:b9:65:99:26:47:8b:55:e3:d0:46:02:e7:46:
                    1a:76:05:c5:08:53:80:14:ca:f7:ce:c6:b9:cf:1d:
                    20:ad:21:b7:5d:58:6a:5b:55:47:5a:35:91:02:2a:
                    d5:ec:12:f2:61:a6:05:96:8c:3a:89:22:be:49:93:
                    6c:3f:f4:c8:20:4e:59:87:05:f0:2f:14:67:40:81:
                    11:ef:26:ca:d5:5a:af:78:21:17:cc:c4:83:f5:9c:
                    1b:2f:19:65:e5:a9:58:3a:83:a4:34:dc:e6:d2:c4:
                    52:a2:d3:0c:0b:5e:90:8e:d1:54:4c:1d:80:3b:0a:
                    7e:c0:86:17:55:f2:67:da:a6:4a:c5:54:f4:26:41:
                    4b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:1D:72:8B:A9:33:CE:E1:E8:BF:33:54:6C:98:8B:80:55:FF:3B:B1
            X509v3 Authority Key Identifier:
                keyid:F3:64:8E:FD:78:D6:BE:1E:E2:CE:BC:E8:91:40:A2:F2:D1:45:70:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a313330303a3a2f34302d3438203d3e20323033363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c5:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:97:ea:02:cc:e6:e9:36:2f:7e:88:f4:70:fe:80:97:d2:ff:
         ce:25:41:0e:65:16:ae:55:45:a5:c5:61:86:fb:a5:74:cf:e8:
         83:25:8b:7d:62:9f:eb:a1:ef:59:79:a3:79:51:32:22:58:70:
         b9:73:b1:1f:e3:f9:7f:a9:2b:e3:86:cb:d2:ff:ed:02:ca:03:
         63:6f:ea:e1:e6:ce:de:b3:98:32:eb:40:57:f6:81:d0:2f:c8:
         6e:f8:5a:61:cc:fe:fb:38:87:7a:67:e2:5e:0f:b2:54:4e:d1:
         fe:3b:cf:24:72:35:67:16:db:72:06:c1:06:e0:bf:f8:dd:52:
         b8:bf:b6:51:39:de:c6:6f:df:84:85:b0:be:62:a3:c2:82:83:
         56:84:ad:cc:08:db:49:3f:46:6a:9b:d4:19:b2:30:55:fa:1c:
         b8:6a:4e:87:72:69:9d:11:b8:08:77:f4:22:86:9a:dc:13:9f:
         72:67:da:f7:11:9a:a2:97:46:40:aa:ef:0c:0b:e1:dd:8c:3d:
         59:d1:4c:6a:09:b1:6a:1a:23:fd:39:ef:2f:05:cb:cf:dd:83:
         c3:9f:ca:e3:29:c4:47:39:29:5b:67:b8:05:14:63:80:9b:a8:
         dc:24:25:41:b1:e5:f4:51:14:99:03:28:f5:64:ff:39:81:1c:
         c1:5a:e3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----