Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa
File:                     326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (raw, json)
Hash identifier:          PeIsCkDSoavJPo2g0zxTJ1XkAim2DieAEnHktN86nIs=
Subject key identifier:   BA:EB:44:37:7B:23:CD:56:7B:F1:6F:6E:C8:44:E1:EB:35:E0:67:93
Certificate issuer:       /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial:       0363A792640EFD3B6F93C18DD31C1EE686D9620B
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa
Signing time:             Thu 01 Aug 2024 00:46:06 +0000
ROA not before:           Thu 01 Aug 2024 00:41:06 +0000
ROA not after:            Thu 31 Jul 2025 00:46:06 +0000
asID:                     215242
IP address blocks:        2a0f:85c1:3a2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:63:a7:92:64:0e:fd:3b:6f:93:c1:8d:d3:1c:1e:e6:86:d9:62:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
        Validity
            Not Before: Aug  1 00:41:06 2024 GMT
            Not After : Jul 31 00:46:06 2025 GMT
        Subject: CN=BAEB44377B23CD567BF16F6EC844E1EB35E06793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:49:30:58:37:42:76:1d:5c:f5:6a:5d:1e:b6:
                    79:ee:6b:56:f2:0b:51:02:e8:af:f9:8d:22:2f:61:
                    97:87:71:0c:b6:47:54:91:12:29:1b:e6:87:4a:3d:
                    99:a9:a5:72:35:d4:3d:f4:64:05:27:37:c3:c0:5c:
                    e0:fc:71:df:92:6a:2b:7d:03:a5:ae:70:3a:ba:9c:
                    c6:3b:9b:0d:d7:6e:d3:35:d5:c6:bc:a4:27:9a:d2:
                    2f:42:5b:00:07:3e:a7:ce:44:7c:62:6e:bf:7a:25:
                    4c:87:c4:61:9c:5d:7f:b5:2b:75:8e:ef:46:77:29:
                    4f:11:79:10:2f:08:b0:e3:ea:dc:88:74:04:8d:ba:
                    75:12:55:94:4b:74:a0:8a:d2:d8:9f:89:55:dc:5c:
                    f6:eb:1a:45:a2:a5:5f:ea:0d:da:05:31:89:b6:b0:
                    a2:8b:00:ca:59:d2:97:cd:4b:26:ba:a3:df:bb:0a:
                    a8:89:7d:a2:9f:e5:43:06:ad:c0:7a:02:6c:9d:5b:
                    06:26:0b:4c:bd:b9:e6:97:52:13:8d:91:cd:a8:86:
                    7e:bb:8b:23:05:0a:ea:84:21:5b:a6:00:87:aa:8e:
                    59:08:58:d9:03:eb:b1:b6:1c:23:5e:b4:dc:af:99:
                    69:69:97:77:b0:9e:ee:df:fc:75:e2:60:1c:b8:72:
                    61:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EB:44:37:7B:23:CD:56:7B:F1:6F:6E:C8:44:E1:EB:35:E0:67:93
            X509v3 Authority Key Identifier:
                keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:3a2::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:a5:63:b8:a4:2f:4f:b7:de:cb:b7:e1:31:5a:4e:5e:3c:98:
         44:34:c1:c2:1b:58:b7:fc:a2:36:94:76:60:2d:8f:4d:d2:fa:
         1a:0b:75:ae:a7:f1:37:d6:ba:fd:22:1b:15:c0:d2:c6:7f:fa:
         6a:0d:a7:07:54:cd:97:12:14:ad:f8:fe:78:5e:d1:04:84:79:
         af:f8:64:51:4a:b8:a7:8e:f9:c2:bd:63:70:37:71:d8:6a:af:
         e3:1b:82:1c:29:96:de:d1:71:87:d8:c0:dd:6d:c9:ff:53:1d:
         90:fc:4d:7e:c9:18:8b:47:1d:a8:74:24:88:32:dc:6d:5c:bf:
         55:14:c8:3d:60:34:2b:55:d1:08:af:f8:cb:d0:d8:49:df:9b:
         61:6d:36:28:99:59:d3:62:0e:ac:66:85:66:aa:b6:c0:2a:f1:
         d2:54:02:ca:9c:5b:c3:f7:af:56:f9:42:47:04:97:14:a6:a6:
         de:62:9c:d5:85:c7:c4:8b:b1:4a:48:fd:3d:ec:d4:70:93:ea:
         75:9f:88:19:52:30:83:f2:f4:d4:36:05:84:2d:b3:bf:b4:af:
         fc:6c:9e:61:81:32:48:db:91:fd:7d:32:5a:d7:93:26:66:56:
         eb:b2:ac:7a:a6:76:de:f0:4b:86:11:47:e0:be:4f:9e:e5:21:
         62:10:24:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----