Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e203536373632.roa
File:                     326130613a363034343a623030623a3a2f34382d3438203d3e203536373632.roa (raw, json)
Hash identifier:          bMrIpUAbAaxomW//OvLM2f3ny7Mv09gdpB1/OkxFIj4=
Subject key identifier:   20:61:40:44:60:33:54:BF:0B:81:6F:4A:A4:8A:C8:6C:24:DD:EE:FA
Certificate issuer:       /CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
Certificate serial:       5C66EA82F039B19D8A49EC6633BEC3E6B7A67F35
Authority key identifier: 21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e203536373632.roa
Signing time:             Sun 12 Nov 2023 06:59:43 +0000
ROA not before:           Sun 12 Nov 2023 06:54:43 +0000
ROA not after:            Sun 10 Nov 2024 06:59:43 +0000
asID:                     56762
IP address blocks:        2a0a:6044:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:66:ea:82:f0:39:b1:9d:8a:49:ec:66:33:be:c3:e6:b7:a6:7f:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
        Validity
            Not Before: Nov 12 06:54:43 2023 GMT
            Not After : Nov 10 06:59:43 2024 GMT
        Subject: CN=20614044603354BF0B816F4AA48AC86C24DDEEFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:eb:25:59:c0:4e:e9:64:a1:f0:ec:85:ba:88:
                    88:28:30:c6:74:09:58:4b:8e:8d:ab:ba:f2:88:54:
                    33:d5:e7:6f:a3:37:b8:c9:34:b3:7a:97:84:b1:66:
                    b4:f4:69:9b:d9:6d:32:39:be:ba:99:1f:b5:9c:66:
                    df:2b:28:c6:6a:6d:09:ba:4c:54:93:8b:00:2a:cc:
                    19:30:61:16:7c:26:5d:c6:db:71:26:cf:32:67:96:
                    3b:33:a3:ee:13:b8:11:fe:0f:9f:83:48:9a:cb:c8:
                    b5:60:01:f7:2a:fb:35:07:87:43:ed:9b:b3:d7:9d:
                    dc:8f:23:eb:b3:49:74:9c:f3:57:2d:ab:cb:23:25:
                    c8:a8:66:4b:17:41:f5:3b:42:76:b3:b1:66:3c:03:
                    a5:64:9e:20:de:7c:7b:62:2d:4e:82:3f:98:c8:ca:
                    d6:a8:e8:2b:10:d5:8b:e4:93:9b:2d:5d:bf:96:66:
                    f7:a3:45:7a:92:c3:cd:64:5d:fc:7a:4c:19:ad:89:
                    cb:b2:0c:f3:cb:87:e5:b6:61:b3:d9:df:73:9d:39:
                    11:31:04:d2:72:63:ae:b3:c5:00:13:a1:d6:cd:b0:
                    10:01:30:27:5e:09:2f:d4:a3:fe:5d:0f:dc:32:46:
                    a6:e2:a6:4b:69:be:70:34:d3:aa:80:75:bd:9e:57:
                    62:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:61:40:44:60:33:54:BF:0B:81:6F:4A:A4:8A:C8:6C:24:DD:EE:FA
            X509v3 Authority Key Identifier:
                keyid:21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/21CA65857C4339C6923CF5A9F8629948BF3A4B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e203536373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:c6:9b:a4:88:bc:8f:32:f0:5c:05:17:7b:ea:99:63:75:e0:
         39:9e:c8:99:69:45:fd:49:4e:1c:43:02:3c:70:8c:0d:7a:31:
         48:37:00:eb:0a:10:1b:cf:3c:ff:c0:42:09:c3:a8:47:b6:70:
         53:09:3a:09:31:b7:1a:c5:87:02:d6:51:80:51:0a:ae:c5:20:
         c7:5c:68:be:78:74:c6:8a:5d:62:dc:15:b3:c2:98:f2:d2:89:
         fe:65:1e:0c:a5:42:42:9d:69:20:a0:6f:01:dc:1c:08:80:5a:
         7e:45:c8:83:83:5d:78:8b:a5:08:59:65:35:46:36:20:c5:c7:
         47:9e:d7:cc:f0:7f:cc:78:fb:31:ae:64:69:7e:2d:60:e3:be:
         6c:7c:41:d0:1e:55:21:53:48:63:77:5b:d2:37:82:f5:92:09:
         62:c5:84:fc:07:de:f7:af:ae:82:7b:4e:23:87:8b:80:db:ed:
         2f:fb:3f:b8:4f:b9:a0:31:8d:a1:23:6f:3a:bf:f7:71:fb:e5:
         35:56:3b:63:39:7b:ca:0f:47:91:49:90:3b:aa:f5:b9:61:ea:
         76:33:96:a2:89:5a:6b:52:a7:e8:13:66:e9:43:af:8c:31:e8:
         30:08:f2:c8:6d:3d:f7:7d:49:5d:4b:d0:44:db:62:32:70:88:
         8c:22:01:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----