Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa
File:                     326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (raw, json)
Hash identifier:          kyhJCUB0IZ58PgjtuOoqKcwGy0FM5AeasKvHtiY4Nqs=
Subject key identifier:   0E:2D:77:F4:18:F2:BD:DB:97:B9:CE:41:7A:86:7A:A8:60:84:D6:C9
Certificate issuer:       /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial:       039D403B9118BB1DC73D00D9A168E67CD1C9BEE6
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa
Signing time:             Wed 22 May 2024 01:11:42 +0000
ROA not before:           Wed 22 May 2024 01:06:42 +0000
ROA not after:            Wed 21 May 2025 01:11:42 +0000
asID:                     205463
IP address blocks:        2a0f:85c1:7f3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:9d:40:3b:91:18:bb:1d:c7:3d:00:d9:a1:68:e6:7c:d1:c9:be:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
        Validity
            Not Before: May 22 01:06:42 2024 GMT
            Not After : May 21 01:11:42 2025 GMT
        Subject: CN=0E2D77F418F2BDDB97B9CE417A867AA86084D6C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4a:f7:92:97:1d:11:d0:c0:9a:5a:00:57:1c:
                    fb:22:50:2d:f6:65:bd:07:f2:9b:08:14:b6:c6:a5:
                    ff:f1:4c:f7:0c:e9:40:d7:e2:fd:b6:2e:f6:a6:ce:
                    ff:94:60:e5:7a:42:00:42:61:fa:e1:90:00:92:bd:
                    60:b5:fd:55:65:23:d9:cf:c5:87:40:d0:c2:1d:f7:
                    ac:98:46:e5:bf:98:fe:6b:2c:d3:99:41:23:e7:27:
                    c6:1a:37:b5:02:98:f3:ef:dd:a5:cc:b0:bb:bd:ce:
                    04:bf:90:36:28:14:37:dd:f2:0d:5d:33:01:d3:87:
                    33:92:d4:17:44:94:6c:08:ff:d6:40:2d:2b:c9:f2:
                    3e:c6:73:6c:19:80:9d:64:30:95:fd:c0:7b:4c:cf:
                    0a:ff:14:ed:63:70:27:63:32:ec:ad:ab:8e:d1:7f:
                    f9:af:39:68:ca:46:b4:88:36:5e:88:a1:92:9f:28:
                    d3:a8:35:8e:2f:eb:7e:0a:66:2d:db:c8:2d:05:48:
                    80:fa:01:68:ba:21:f7:63:f7:b4:6a:f4:8c:19:77:
                    46:be:84:ce:03:35:0b:9c:b7:bb:73:16:a0:d1:01:
                    71:71:e7:4b:8a:99:28:f2:9f:9c:7f:3b:fe:1d:12:
                    eb:15:bd:f0:ee:b5:5f:d7:71:0e:a7:be:d0:d7:7e:
                    69:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:2D:77:F4:18:F2:BD:DB:97:B9:CE:41:7A:86:7A:A8:60:84:D6:C9
            X509v3 Authority Key Identifier:
                keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:7f3::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:45:d9:13:3d:2a:4e:38:32:da:29:f3:56:c7:22:81:df:d9:
         8a:3a:7d:ac:90:83:0d:35:77:80:5c:f8:c7:e6:09:76:7c:16:
         34:10:ef:fd:01:21:b7:a8:52:a3:39:05:a0:2f:26:21:06:cb:
         d4:8c:d4:96:9f:34:c2:cd:40:5c:8a:d2:b2:20:0e:6c:a1:1d:
         c8:49:4b:72:f2:e7:e8:b7:c8:4d:98:8d:ec:59:9b:ec:8d:85:
         71:94:40:d2:c7:1f:f3:e4:fd:a8:7e:5a:29:48:b3:d8:7a:f0:
         1a:8f:7c:7f:60:81:56:92:94:79:9e:b7:d8:75:e2:13:36:8b:
         16:61:6b:73:5b:24:c6:74:17:ef:cc:0e:51:b1:04:a2:53:fe:
         e6:1f:2c:24:07:19:c9:ef:d8:18:4d:7a:5c:90:3b:43:37:9e:
         51:1e:df:3c:d9:73:2e:2a:dc:6d:7c:5b:b1:f1:1f:0f:39:6c:
         a0:77:f5:64:d3:a1:6b:b4:7c:72:2a:13:88:fd:c9:98:4b:59:
         64:03:0c:2d:2a:86:68:f4:87:d7:84:6d:25:70:7e:a8:4d:db:
         77:f8:49:5c:15:a1:33:75:7e:61:eb:0a:1b:7b:19:ff:7d:46:
         1c:44:a7:49:13:9f:68:cf:34:dc:61:4b:4d:e3:75:20:d5:a1:
         65:80:48:72
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgIUA51AO5EYux3HPQDZoWjmfNHJvuYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0
OUMxODM3NzAeFw0yNDA1MjIwMTA2NDJaFw0yNTA1MjEwMTExNDJaMDMxMTAvBgNV
BAMTKDBFMkQ3N0Y0MThGMkJEREI5N0I5Q0U0MTdBODY3QUE4NjA4NEQ2QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtSveSlx0R0MCaWgBXHPsiUC32
Zb0H8psIFLbGpf/xTPcM6UDX4v22Lvamzv+UYOV6QgBCYfrhkACSvWC1/VVlI9nP
xYdA0MId96yYRuW/mP5rLNOZQSPnJ8YaN7UCmPPv3aXMsLu9zgS/kDYoFDfd8g1d
MwHThzOS1BdElGwI/9ZALSvJ8j7Gc2wZgJ1kMJX9wHtMzwr/FO1jcCdjMuytq47R
f/mvOWjKRrSINl6IoZKfKNOoNY4v634KZi3byC0FSID6AWi6Ifdj97Rq9IwZd0a+
hM4DNQuct7tzFqDRAXFx50uKmSjyn5x/O/4dEusVvfDutV/XcQ6nvtDXfmlvAgMB
AAGjggKDMIICfzAdBgNVHQ4EFgQUDi139BjyvduXuc5BeoZ6qGCE1skwHwYDVR0j
BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0
MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzIwYWRkMy1hODhlLTRi
YjItYTg0ZC01NWRhMjEyOGYxOTYvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF
QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF
BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9kMDYzMzNjNi05NDZkLTRiMGItOTVlZi1kYWJhMjYyYTQyZTEvMS8zMjYxMzA2
NjNhMzgzNTYzMzEzYTM3NjYzMzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAz
NTM0MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB
BwEB/wQTMBEwDwQCAAIwCQMHACoPhcEH8zANBgkqhkiG9w0BAQsFAAOCAQEApUXZ
Ez0qTjgy2inzVscigd/Zijp9rJCDDTV3gFz4x+YJdnwWNBDv/QEht6hSozkFoC8m
IQbL1IzUlp80ws1AXIrSsiAObKEdyElLcvLn6LfITZiN7Fmb7I2FcZRA0scf8+T9
qH5aKUiz2HrwGo98f2CBVpKUeZ632HXiEzaLFmFrc1skxnQX78wOUbEEolP+5h8s
JAcZye/YGE16XJA7QzeeUR7fPNlzLircbXxbsfEfDzlsoHf1ZNOha7R8cioTiP3J
mEtZZAMMLSqGaPSH14RtJXB+qE3bd/hJXBWhM3V+YesKG3sZ/31GHESnSROfaM80
3GFLTeN1INWhZYBIcg==
-----END CERTIFICATE-----