Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6533303a3a2f34342d3434203d3e203438373532.roa
File:                     326130373a323438363a6533303a3a2f34342d3434203d3e203438373532.roa (raw, json)
Hash identifier:          WDJmpgtYMTR9/hsq1Yyl3FztgUNiJzvER8pRhFL4Hf0=
Subject key identifier:   4C:C9:98:5E:A3:71:61:6A:FD:B0:A3:24:48:F2:46:63:0E:37:DA:0B
Certificate issuer:       /CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Certificate serial:       61171D34CA6B9D5DA5BFA54465909517A3EC20A9
Authority key identifier: AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6533303a3a2f34342d3434203d3e203438373532.roa
Signing time:             Tue 07 May 2024 01:10:42 +0000
ROA not before:           Tue 07 May 2024 01:05:42 +0000
ROA not after:            Tue 06 May 2025 01:10:42 +0000
asID:                     48752
IP address blocks:        2a07:2486:e30::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:17:1d:34:ca:6b:9d:5d:a5:bf:a5:44:65:90:95:17:a3:ec:20:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
        Validity
            Not Before: May  7 01:05:42 2024 GMT
            Not After : May  6 01:10:42 2025 GMT
        Subject: CN=4CC9985EA371616AFDB0A32448F246630E37DA0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b4:1a:4d:74:4f:74:aa:43:dd:26:fd:af:b0:
                    93:a3:52:97:a2:1a:e4:ce:ea:54:e9:a0:92:11:46:
                    9c:a2:67:eb:5f:74:89:e5:8a:e0:44:2c:b2:88:7b:
                    1e:c6:a2:b5:2d:b3:84:db:d2:10:e6:fe:68:30:02:
                    af:c1:64:1b:20:32:dd:13:03:73:5e:cc:b2:92:e6:
                    1f:2b:99:c7:42:7b:fa:7b:e7:ed:74:76:fb:4e:64:
                    1e:ef:51:4e:32:78:cf:d3:b8:4f:75:ba:a4:a7:04:
                    64:b2:06:e3:df:3a:1f:ff:f5:88:9a:2b:b3:e8:47:
                    fb:9f:85:85:94:29:15:33:b2:50:40:11:17:ee:7b:
                    29:31:ed:a3:b8:8c:ae:9f:95:19:db:1a:51:fb:fa:
                    5d:17:9d:d7:f6:37:f4:4c:88:c7:5c:9b:45:eb:c2:
                    b3:d0:0c:71:ae:bd:7e:14:6c:7d:ad:88:4b:a8:6d:
                    2c:c2:ec:83:bf:5c:ab:f4:17:2a:0b:47:29:91:a8:
                    ca:d4:49:24:1f:23:0f:0e:9e:7e:79:00:ed:21:43:
                    d8:94:33:a9:5c:b4:ee:c7:66:00:89:39:62:fd:ca:
                    d0:5b:ec:c7:1c:0c:a5:84:0f:5c:70:5b:33:80:57:
                    7a:4d:84:bc:1b:2d:f2:37:50:84:0b:fe:8a:42:fd:
                    8c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C9:98:5E:A3:71:61:6A:FD:B0:A3:24:48:F2:46:63:0E:37:DA:0B
            X509v3 Authority Key Identifier:
                keyid:AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/AC2B083EE37BCF2D737C576EF9D532ED717A1711.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6533303a3a2f34342d3434203d3e203438373532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:2486:e30::/44

    Signature Algorithm: sha256WithRSAEncryption
         24:40:66:ec:7e:cb:15:33:a7:55:4e:cf:70:75:26:ef:fa:0d:
         6b:7e:4b:1a:20:18:3c:84:a7:32:6f:bd:b0:9f:f9:1e:c9:5b:
         95:57:f0:61:58:15:be:7d:90:cb:79:31:8a:81:a1:31:aa:f2:
         08:0f:8d:09:76:31:35:4d:ba:41:3a:2e:cd:37:24:b8:00:f1:
         d7:9b:23:22:01:ec:0e:d3:40:38:09:16:6c:de:5a:96:bf:f4:
         8a:62:fa:b8:c5:bb:93:06:e9:29:64:00:aa:6f:64:69:56:ba:
         9a:6e:e0:3a:bd:a1:87:3d:3e:a0:58:26:26:61:7b:f5:c2:3c:
         f1:31:11:91:55:34:01:a0:9d:c5:70:48:89:63:62:fd:61:9c:
         e3:63:ac:77:98:6f:1d:6b:20:b1:b5:3b:68:41:7e:9c:3f:49:
         8b:c2:04:af:fd:9a:c9:1a:35:f9:c3:cc:e2:5f:c9:0c:a1:b1:
         2d:42:e5:cb:7d:ec:ba:17:41:7c:42:b8:e9:e5:ee:f9:63:d5:
         8f:ad:57:52:11:fa:d0:87:d8:2d:d1:00:11:d5:dc:27:0a:ac:
         77:78:ee:d2:cb:5e:85:0d:89:0d:2a:eb:e7:90:81:fb:92:bd:
         7f:86:18:77:4e:bc:07:9a:12:ea:a4:3f:33:e6:07:24:30:5e:
         16:c9:6e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----