Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa
File:                     326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (raw, json)
Hash identifier:          hLmxywOTn2v4iv//wqgMLMQxfJouQHupbxrvDFSX9Zg=
Subject key identifier:   CF:D9:FD:A5:F5:A4:AD:C9:E0:3A:19:38:19:50:C0:D9:B4:F5:79:68
Certificate issuer:       /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial:       609CA9052C5A4944041D8B3B335B7E8F7D45330A
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa
Signing time:             Sat 03 Aug 2024 02:20:24 +0000
ROA not before:           Sat 03 Aug 2024 02:15:24 +0000
ROA not after:            Sat 02 Aug 2025 02:20:24 +0000
asID:                     205463
IP address blocks:        2a0f:85c1:7f1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:9c:a9:05:2c:5a:49:44:04:1d:8b:3b:33:5b:7e:8f:7d:45:33:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
        Validity
            Not Before: Aug  3 02:15:24 2024 GMT
            Not After : Aug  2 02:20:24 2025 GMT
        Subject: CN=CFD9FDA5F5A4ADC9E03A19381950C0D9B4F57968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:10:e7:14:61:32:1d:bf:c4:d5:a2:f7:fc:18:
                    49:5d:be:27:2f:ce:24:f8:62:12:6b:00:90:8b:f9:
                    03:37:b2:21:3c:08:ed:11:2a:e3:88:75:f4:1d:94:
                    dd:6a:63:f0:25:e6:31:27:64:91:c5:9a:cb:58:4b:
                    6f:6b:41:4a:17:98:02:da:6d:ab:25:51:14:29:20:
                    f0:c5:b6:e7:9c:98:52:9d:d7:01:a5:28:3f:f7:93:
                    ef:47:50:59:d5:f7:e6:d1:78:fb:d4:d4:0c:b5:1b:
                    28:f5:88:83:a1:60:67:27:94:74:50:c7:d9:fa:1d:
                    d6:9d:00:7b:ad:da:c3:3d:3c:fa:c8:6c:d9:16:68:
                    8c:d4:50:9d:ba:77:56:98:74:98:71:73:fa:cd:f5:
                    17:e0:2b:dd:16:b6:a9:d3:62:d6:a1:4a:f6:37:5f:
                    67:d4:11:55:ea:46:7a:2e:18:e5:ea:d7:ba:69:eb:
                    23:9d:60:5f:62:c5:56:72:8e:60:c6:68:e1:c6:ef:
                    7d:80:e2:83:a7:43:6d:6e:c5:fd:8d:ef:f9:1e:a2:
                    7c:64:5e:76:33:8f:15:55:f8:e0:43:8b:d8:99:50:
                    9c:31:3b:80:db:7f:94:62:34:f8:0d:d3:53:05:f1:
                    b5:59:38:36:15:4c:dc:6c:8d:d9:ff:74:bf:20:f3:
                    72:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D9:FD:A5:F5:A4:AD:C9:E0:3A:19:38:19:50:C0:D9:B4:F5:79:68
            X509v3 Authority Key Identifier:
                keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:7f1::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:13:39:d8:3f:e4:5c:f4:4e:5f:50:87:77:31:aa:c4:67:8b:
         0e:6d:5d:cc:bf:56:be:68:22:d9:00:6e:1a:b3:01:33:42:1f:
         db:09:ca:2f:0d:de:09:97:5d:64:46:a5:47:68:15:cc:68:b3:
         bc:63:8f:00:0a:85:0b:08:40:30:79:9c:4a:09:8f:e6:cf:96:
         1b:30:c5:3c:cd:e4:92:7e:ce:82:cc:3b:98:68:27:f5:dc:6b:
         bb:c0:29:3e:b9:eb:07:79:3f:27:99:39:27:5b:0c:29:ce:d8:
         3e:e0:ad:c1:38:f9:4d:93:ea:a9:68:35:57:20:6e:96:60:b1:
         c6:af:84:da:d1:bd:67:23:eb:53:c3:50:a1:e6:b2:b9:d6:c2:
         10:7a:fe:84:37:3b:bc:ce:15:b7:34:aa:85:23:df:b8:46:78:
         d7:a4:14:b5:bf:e0:a8:d1:8d:a1:e0:15:50:51:0f:3c:87:f2:
         b8:1f:1a:58:b3:7f:0a:e8:64:5c:17:7e:19:21:b7:0a:de:45:
         39:dd:f9:55:22:d5:e2:a1:00:29:d7:6b:4a:50:26:28:9c:0f:
         f1:34:24:14:5f:98:c9:91:d6:e9:4b:3b:34:62:59:a3:6d:83:
         fa:05:d1:d0:11:b5:39:68:da:27:20:2c:4e:83:6e:c7:2c:17:
         df:4b:82:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----