Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a3a2f33322d3438203d3e203537383730.roa
File:                     326130373a353463353a3a2f33322d3438203d3e203537383730.roa (raw, json)
Hash identifier:          WfQ8Lc6BmNlnMD8jReYFcUt6sO/xzA2lUdstsXBq/HQ=
Subject key identifier:   8E:7F:28:D2:22:93:D3:F9:85:FA:E4:D4:91:90:05:7B:7D:0F:E5:0F
Certificate issuer:       /CN=F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB
Certificate serial:       71940826EB062EE07C3547A06A862CCFA8AFF71C
Authority key identifier: F3:64:8E:FD:78:D6:BE:1E:E2:CE:BC:E8:91:40:A2:F2:D1:45:70:CB
Authority info access:    rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a3a2f33322d3438203d3e203537383730.roa
Signing time:             Mon 18 Sep 2023 15:33:04 +0000
ROA not before:           Mon 18 Sep 2023 15:28:04 +0000
ROA not after:            Mon 16 Sep 2024 15:33:04 +0000
asID:                     57870
IP address blocks:        2a07:54c5::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:94:08:26:eb:06:2e:e0:7c:35:47:a0:6a:86:2c:cf:a8:af:f7:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB
        Validity
            Not Before: Sep 18 15:28:04 2023 GMT
            Not After : Sep 16 15:33:04 2024 GMT
        Subject: CN=8E7F28D22293D3F985FAE4D49190057B7D0FE50F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a3:6b:23:63:0e:48:67:92:4d:be:3c:cf:88:
                    13:b6:d1:e3:c4:5e:6d:fa:9c:f5:65:17:ce:3b:6f:
                    65:3d:fe:33:22:c8:d7:66:39:e0:0f:f8:b9:e2:72:
                    93:ca:ab:39:f7:02:14:02:96:63:cd:f5:ef:ee:0d:
                    37:e7:00:7e:44:76:02:cd:85:67:9c:d0:c5:e7:10:
                    3e:8a:f7:ce:9e:af:3b:8c:84:f1:73:78:84:fc:92:
                    b0:38:5d:b8:d3:e4:ae:6c:62:09:46:f5:ae:ed:e2:
                    19:4d:23:79:85:50:92:f1:8c:fb:a2:66:83:d4:e2:
                    80:5b:60:bf:a2:ee:3b:1c:0c:b7:d1:fb:cf:73:66:
                    02:f5:73:bf:43:77:35:f4:91:58:40:ab:90:1e:73:
                    ea:6a:a9:ef:cd:4c:64:9d:b9:5d:cc:55:26:83:24:
                    77:04:e1:fa:0e:a6:ce:94:1a:3f:2e:16:eb:75:7f:
                    fa:5c:01:77:4b:c1:59:aa:61:e3:6c:88:b8:0c:db:
                    72:f5:a6:e2:eb:60:5c:80:69:79:d1:bd:ea:ef:5a:
                    53:0a:7c:af:44:d8:69:93:e8:8a:c8:f6:12:b7:df:
                    4d:49:c5:19:7d:3c:24:17:1d:a7:e0:9a:bc:5f:94:
                    dd:b3:bd:1b:82:11:88:94:78:06:32:9a:5b:b4:f2:
                    8f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:7F:28:D2:22:93:D3:F9:85:FA:E4:D4:91:90:05:7B:7D:0F:E5:0F
            X509v3 Authority Key Identifier:
                keyid:F3:64:8E:FD:78:D6:BE:1E:E2:CE:BC:E8:91:40:A2:F2:D1:45:70:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a3a2f33322d3438203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c5::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:44:d1:9a:50:52:99:ec:42:b9:87:19:1e:3c:84:be:04:05:
         a2:19:b0:cb:e7:63:5b:a4:da:39:c6:8e:c0:cc:5f:bb:3c:54:
         33:c4:9c:5b:cc:4f:15:8f:90:7a:6d:ac:d5:7e:e9:1b:3b:08:
         d1:f6:09:83:4f:ac:c6:80:41:6f:7d:9d:29:2f:17:3d:b8:26:
         7a:04:37:75:21:5d:41:83:14:a5:76:c2:b9:ff:eb:82:b2:c8:
         e8:67:58:c4:e9:50:5e:a8:a3:77:e1:b0:ab:9e:e0:b4:28:10:
         0c:97:53:44:be:b1:f0:04:38:7b:9b:db:1a:1d:79:59:46:14:
         3b:e6:44:48:57:c2:a5:58:e3:15:a1:5d:fb:d9:17:8b:e4:fe:
         67:a8:85:66:9a:d0:78:56:3e:63:c4:f8:58:bd:46:a0:8c:ff:
         b5:a4:1a:e7:79:12:d5:30:27:a0:fe:b6:a1:35:b1:8b:f9:b1:
         0f:12:97:8c:1f:22:ea:19:49:ca:ad:12:a9:d0:30:3b:00:ff:
         d2:21:bf:67:f1:56:8d:9b:b5:0d:19:50:4e:f4:20:84:b4:b4:
         e1:bc:92:62:10:a3:92:b6:8c:bd:20:d1:c7:62:aa:b4:48:03:
         c3:69:72:ab:8c:4d:1c:dd:3b:6f:e7:ac:ef:de:cd:54:e6:61:
         cb:0c:ca:0b
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUcZQIJusGLuB8NUegaoYsz6iv9xwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM2NDhFRkQ3OEQ2QkUxRUUyQ0VCQ0U4OTE0MEEyRjJE
MTQ1NzBDQjAeFw0yMzA5MTgxNTI4MDRaFw0yNDA5MTYxNTMzMDRaMDMxMTAvBgNV
BAMTKDhFN0YyOEQyMjI5M0QzRjk4NUZBRTRENDkxOTAwNTdCN0QwRkU1MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyo2sjYw5IZ5JNvjzPiBO20ePE
Xm36nPVlF847b2U9/jMiyNdmOeAP+LnicpPKqzn3AhQClmPN9e/uDTfnAH5EdgLN
hWec0MXnED6K986erzuMhPFzeIT8krA4XbjT5K5sYglG9a7t4hlNI3mFUJLxjPui
ZoPU4oBbYL+i7jscDLfR+89zZgL1c79DdzX0kVhAq5Aec+pqqe/NTGSduV3MVSaD
JHcE4foOps6UGj8uFut1f/pcAXdLwVmqYeNsiLgM23L1puLrYFyAaXnRvervWlMK
fK9E2GmT6IrI9hK3301JxRl9PCQXHafgmrxflN2zvRuCEYiUeAYymlu08o9ZAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUjn8o0iKT0/mF+uTUkZAFe30P5Q8wHwYDVR0j
BBgwFoAU82SO/XjWvh7izrzokUCi8tFFcMswDgYDVR0PAQH/BAQDAgeAMIGXBgNV
HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5LTRmYWVhNGIx
YmMxMi8xNi9GMzY0OEVGRDc4RDZCRTFFRTJDRUJDRTg5MTQwQTJGMkQxNDU3MENC
LmNybDCBgAYIKwYBBQUHAQEEdDByMHAGCCsGAQUFBzAChmRyc3luYzovL3Jwa2ku
emFwcGllaG9zdC5jb20vcmVwby9OT1JUSExBWUVSX1VJRF8xMzg2NC8wL0YzNjQ4
RUZENzhENkJFMUVFMkNFQkNFODkxNDBBMkYyRDE0NTcwQ0IuY2VyMIGsBggrBgEF
BQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3JzeW5jLnBhYXMucnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5LTRm
YWVhNGIxYmMxMi8xNi8zMjYxMzAzNzNhMzUzNDYzMzUzYTNhMmYzMzMyMmQzNDM4
MjAzZDNlMjAzNTM3MzgzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgdUxTANBgkqhkiG9w0BAQsF
AAOCAQEAe0TRmlBSmexCuYcZHjyEvgQFohmwy+djW6TaOcaOwMxfuzxUM8ScW8xP
FY+Qem2s1X7pGzsI0fYJg0+sxoBBb32dKS8XPbgmegQ3dSFdQYMUpXbCuf/rgrLI
6GdYxOlQXqijd+Gwq57gtCgQDJdTRL6x8AQ4e5vbGh15WUYUO+ZESFfCpVjjFaFd
+9kXi+T+Z6iFZprQeFY+Y8T4WL1GoIz/taQa53kS1TAnoP62oTWxi/mxDxKXjB8i
6hlJyq0SqdAwOwD/0iG/Z/FWjZu1DRlQTvQghLS04bySYhCjkraMvSDRx2KqtEgD
w2lyq4xNHN07b+es797NVOZhywzKCw==
-----END CERTIFICATE-----
Generated at Thu Mar 14 17:33:24 2024 by rpki-client on console-fra.rpki-client.org