Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6530303a3a2f34342d3434203d3e203438373532.roa
File:                     326130373a323438363a6530303a3a2f34342d3434203d3e203438373532.roa (raw, json)
Hash identifier:          hRcW2sgC+ljKo7qVuumyAMn71ZCbf7lH7HJZDNPrnGA=
Subject key identifier:   6C:C1:80:CF:E9:D9:6F:4C:F1:73:63:04:18:B5:A6:4C:DB:5C:F9:6C
Certificate issuer:       /CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Certificate serial:       6BD6A6CF455F48830BF85C8A918D61072889FEE2
Authority key identifier: AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6530303a3a2f34342d3434203d3e203438373532.roa
Signing time:             Tue 07 May 2024 01:33:06 +0000
ROA not before:           Tue 07 May 2024 01:28:06 +0000
ROA not after:            Tue 06 May 2025 01:33:06 +0000
asID:                     48752
IP address blocks:        2a07:2486:e00::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:d6:a6:cf:45:5f:48:83:0b:f8:5c:8a:91:8d:61:07:28:89:fe:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
        Validity
            Not Before: May  7 01:28:06 2024 GMT
            Not After : May  6 01:33:06 2025 GMT
        Subject: CN=6CC180CFE9D96F4CF173630418B5A64CDB5CF96C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:53:88:48:04:14:0f:93:5a:35:e8:eb:96:ae:
                    5b:d7:ee:17:2e:9e:a6:5f:7e:28:f2:dc:78:40:e0:
                    27:22:fc:98:e7:d1:2d:37:bb:c4:8d:3a:22:b4:7a:
                    69:6a:4a:26:ef:ef:f6:52:00:a5:c0:1b:5e:d2:0f:
                    6d:62:52:35:35:e3:ec:83:03:fd:fd:e9:53:00:a7:
                    99:b3:92:06:54:c9:9b:d6:1d:89:a0:71:ab:1d:33:
                    54:6a:dc:34:35:21:32:76:ac:cd:69:4c:a2:c9:20:
                    77:af:f9:d2:c3:83:43:96:0a:e1:6c:07:40:26:2a:
                    d1:3f:c1:fc:27:40:b1:f4:92:a4:11:e6:d9:a8:d1:
                    f9:9c:60:d4:53:a2:9e:03:ff:a6:d2:2b:08:bf:87:
                    89:39:ba:f8:37:37:f6:18:0d:11:f1:8b:b7:78:fe:
                    ee:d9:c0:12:0b:76:f0:b7:27:cb:19:5e:7f:50:ed:
                    2b:40:5f:7b:76:41:02:11:ff:ee:97:d1:8e:29:77:
                    f9:73:09:47:a7:22:74:a1:29:61:df:2c:25:4e:5d:
                    83:42:93:11:5d:d7:4f:92:bf:42:31:5d:05:d1:6a:
                    4e:dc:03:a8:0d:6b:55:f7:53:16:f3:d7:e4:14:92:
                    52:d0:66:07:94:fc:9c:6f:8c:98:a7:dd:25:68:9a:
                    79:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C1:80:CF:E9:D9:6F:4C:F1:73:63:04:18:B5:A6:4C:DB:5C:F9:6C
            X509v3 Authority Key Identifier:
                keyid:AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/AC2B083EE37BCF2D737C576EF9D532ED717A1711.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6530303a3a2f34342d3434203d3e203438373532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:2486:e00::/44

    Signature Algorithm: sha256WithRSAEncryption
         31:af:82:12:31:ff:3e:1f:03:42:b3:2c:91:78:a5:cd:96:ea:
         40:ca:11:3b:63:bb:51:1b:e7:a2:db:f5:12:f6:d7:9b:0d:f3:
         f4:ee:ba:06:3b:4e:1c:85:dc:51:81:b0:eb:0a:5e:05:20:9e:
         28:d5:aa:d5:f1:f4:e5:1e:89:96:7d:98:85:88:e6:e3:02:b7:
         4d:88:b9:43:bb:8a:ab:88:21:2a:23:a9:c0:d4:e4:c9:2a:0f:
         b5:1e:47:35:a9:ed:c8:10:91:f5:3f:25:48:11:3b:5b:b9:ab:
         6a:8c:87:97:e8:9a:7b:8b:43:46:fb:9e:9a:f9:d7:9b:06:ed:
         7a:3b:2b:6b:5a:e5:6b:17:dd:d4:2c:01:97:80:01:02:0b:73:
         b2:4f:30:11:5d:b5:66:fb:53:16:91:91:37:e2:e3:a8:3d:12:
         1c:c7:27:48:8d:42:40:77:17:ae:ce:66:9a:ea:9c:90:20:e3:
         40:8a:4b:88:2b:56:af:ed:87:82:a9:a9:18:83:23:71:8b:c0:
         8a:ec:97:a1:e6:ba:b0:d5:fc:01:33:99:ed:88:41:49:b7:71:
         b6:89:63:01:da:c7:67:85:09:7e:7c:50:91:30:69:f5:20:dc:
         25:17:2c:c7:94:bb:f1:ec:ab:5a:71:f6:71:af:50:d2:a0:c5:
         eb:b6:40:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----