Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa
File:                     326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (raw, json)
Hash identifier:          GcV9N8X9s2uHdEzyPc2IWdnUBlbIkV9Ott353G6xxsA=
Subject key identifier:   7E:E7:58:D0:E5:23:1C:6E:6E:22:06:07:94:A5:08:98:6C:80:A1:37
Certificate issuer:       /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial:       5B61F13E9428533D8F4FB50CBC38754F2D192BE9
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa
Signing time:             Mon 29 Jul 2024 21:07:44 +0000
ROA not before:           Mon 29 Jul 2024 21:02:44 +0000
ROA not after:            Mon 28 Jul 2025 21:07:44 +0000
asID:                     215242
IP address blocks:        2a0f:85c1:7f2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:61:f1:3e:94:28:53:3d:8f:4f:b5:0c:bc:38:75:4f:2d:19:2b:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
        Validity
            Not Before: Jul 29 21:02:44 2024 GMT
            Not After : Jul 28 21:07:44 2025 GMT
        Subject: CN=7EE758D0E5231C6E6E22060794A508986C80A137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ce:61:36:25:1a:a5:dd:95:d1:15:cd:5a:7e:
                    d7:6c:55:5c:70:a6:1a:b7:b2:c2:96:5f:85:31:e1:
                    80:a7:0b:0e:1f:1e:de:f9:56:44:ce:2e:1b:68:32:
                    af:72:6e:94:a4:9f:71:11:15:c7:61:e7:1e:c6:75:
                    a9:01:e3:2e:a2:b4:78:e6:e7:68:bb:62:8e:16:cf:
                    64:32:18:25:56:74:d4:0c:db:66:95:fb:c5:ec:81:
                    3c:13:ff:4b:f1:8a:0c:51:94:1a:70:a2:5a:12:b5:
                    31:7e:99:89:df:bf:40:17:95:5d:ad:13:be:80:b9:
                    25:eb:3b:a4:67:a9:5d:32:9f:20:a3:8a:51:8e:73:
                    be:e1:a4:a9:44:00:09:1f:44:8e:1e:44:a3:4b:90:
                    2c:85:f8:8f:71:05:9d:91:0e:1e:d8:09:fb:c0:7b:
                    74:72:90:b3:b1:91:38:60:34:48:a0:8a:07:2d:2c:
                    1e:2b:a7:f5:04:4b:98:3d:20:e8:0a:09:a4:a9:f9:
                    9c:49:31:01:45:03:59:a1:df:cb:e7:73:27:b3:35:
                    48:09:04:96:71:8e:f7:db:ee:c0:be:1e:ae:31:66:
                    8b:6e:d0:3c:e4:e4:be:1f:f9:b2:8a:a2:15:5b:5f:
                    3e:04:6b:a4:e1:0b:38:5e:76:d7:01:f4:81:bc:ea:
                    6c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E7:58:D0:E5:23:1C:6E:6E:22:06:07:94:A5:08:98:6C:80:A1:37
            X509v3 Authority Key Identifier:
                keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:7f2::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:4c:e2:39:5b:8b:23:ff:77:41:37:24:e3:76:22:4c:ee:57:
         8d:ee:55:da:0f:64:cd:0d:5a:fe:eb:16:af:7a:a4:06:0c:ed:
         f0:64:c0:76:61:7e:e0:6f:70:70:25:23:12:8e:b5:c9:2f:fb:
         c0:2b:24:a3:1f:d3:84:8e:c8:e1:c6:3a:b3:6f:d2:fa:4e:81:
         8b:67:86:b9:8e:65:a9:78:e5:db:4e:4f:36:b2:4f:8a:67:46:
         94:06:3a:fc:2b:1d:15:e5:c8:59:36:74:e9:d9:f5:71:f4:05:
         6f:a3:05:c5:17:d1:59:04:45:e5:2c:bd:95:3c:b2:dc:68:f8:
         50:db:4b:1e:be:83:1b:2f:5c:6a:f5:cc:ae:62:e9:91:9d:23:
         62:89:74:6e:04:b7:43:69:2c:f1:eb:8e:dc:89:0e:8b:3e:4f:
         19:32:a8:d5:b9:5c:af:8a:06:11:65:e1:c7:00:53:e7:6f:a4:
         15:da:5e:b0:74:fe:58:a3:ee:d0:66:8a:e4:f6:35:69:f0:b1:
         59:be:d3:0f:94:be:d8:b3:6d:61:52:1d:b8:b4:34:5d:c7:6b:
         6c:ff:88:13:da:e9:48:14:3a:2a:ed:bd:a6:f0:fb:b3:17:75:
         1a:53:c9:10:57:87:55:9c:bd:06:91:b5:2a:6d:17:8c:fb:81:
         7c:31:57:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----