Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/8/326130663a383563313a3333313a3a2f34382d3438203d3e20323135383835.roa
File:                     326130663a383563313a3333313a3a2f34382d3438203d3e20323135383835.roa (raw, json)
Hash identifier:          PERd4VmCi6mzxYUGdk3Lcmsp5CKw9IJNVRR0bLNOLMg=
Subject key identifier:   34:DA:28:29:29:13:21:10:9F:07:D0:90:34:61:0C:74:1F:15:38:23
Certificate issuer:       /CN=CC2B47BFD397E66019550C83BF1B56353173A0CB
Certificate serial:       1045D92662E457556BCDAD1FDF81FB0765605208
Authority key identifier: CC:2B:47:BF:D3:97:E6:60:19:55:0C:83:BF:1B:56:35:31:73:A0:CB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/CC2B47BFD397E66019550C83BF1B56353173A0CB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/8/326130663a383563313a3333313a3a2f34382d3438203d3e20323135383835.roa
Signing time:             Fri 28 Jun 2024 16:15:53 +0000
ROA not before:           Fri 28 Jun 2024 16:10:53 +0000
ROA not after:            Fri 27 Jun 2025 16:15:53 +0000
asID:                     215885
IP address blocks:        2a0f:85c1:331::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:45:d9:26:62:e4:57:55:6b:cd:ad:1f:df:81:fb:07:65:60:52:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC2B47BFD397E66019550C83BF1B56353173A0CB
        Validity
            Not Before: Jun 28 16:10:53 2024 GMT
            Not After : Jun 27 16:15:53 2025 GMT
        Subject: CN=34DA2829291321109F07D09034610C741F153823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:05:33:ad:7d:bc:41:b7:f2:61:56:ce:54:ac:
                    af:6e:e2:1e:0f:3e:98:b8:34:92:d1:7b:63:65:0b:
                    c2:e5:28:14:e7:20:fe:d2:4c:56:f3:b3:ca:46:0f:
                    3d:62:8b:63:41:58:1f:17:9e:7f:39:46:33:7f:e4:
                    da:db:e4:f2:5a:b2:28:b8:8b:c2:c9:a5:48:06:78:
                    11:a9:c0:ad:2c:c5:4e:da:de:6c:85:1b:96:e0:1a:
                    90:ac:65:7f:e4:69:1b:3c:a1:43:a7:86:3e:5e:e9:
                    3d:c5:5e:9b:d9:32:ca:bc:af:70:3e:94:d3:69:ba:
                    90:af:1d:56:58:d6:49:14:38:73:52:aa:a2:92:79:
                    6f:3b:8e:8a:22:d8:d7:88:90:1e:9a:4a:bf:cd:1e:
                    55:90:ed:2d:1a:a9:62:0e:ed:ca:f7:ae:27:24:2f:
                    ff:9f:c9:9b:39:82:5c:3c:a7:45:d1:f8:0c:50:2c:
                    5c:65:51:9e:58:44:1a:aa:cf:6e:95:36:4e:8a:6f:
                    d2:13:53:19:97:93:2a:6b:75:b5:6b:b8:7f:63:cb:
                    bf:eb:2b:ac:be:88:ac:4d:21:b9:a9:05:30:a2:eb:
                    2e:a8:a0:ed:1a:4f:d1:39:4d:66:39:3f:19:ac:2e:
                    30:0b:be:7c:4b:26:7c:f0:8a:c3:c4:a1:fd:8d:14:
                    ca:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DA:28:29:29:13:21:10:9F:07:D0:90:34:61:0C:74:1F:15:38:23
            X509v3 Authority Key Identifier:
                keyid:CC:2B:47:BF:D3:97:E6:60:19:55:0C:83:BF:1B:56:35:31:73:A0:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/8/CC2B47BFD397E66019550C83BF1B56353173A0CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/CC2B47BFD397E66019550C83BF1B56353173A0CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/8/326130663a383563313a3333313a3a2f34382d3438203d3e20323135383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:331::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:b7:8e:a9:c3:cc:d1:03:19:a0:a8:4a:7e:00:cf:83:2d:1e:
         08:60:81:cb:79:78:ca:a3:a5:97:ec:d8:ca:6a:02:83:a5:21:
         f1:4f:09:ab:d5:fe:8a:fb:31:3a:66:2a:03:07:6f:76:89:53:
         d5:97:70:8a:8d:0e:85:ca:1c:87:44:d0:50:a1:d8:78:a1:d1:
         41:eb:61:42:df:6e:19:0c:4c:24:99:b0:67:4c:47:f5:4d:15:
         37:26:b5:44:75:f6:37:a6:1a:3e:13:96:0f:4b:71:c6:f5:fd:
         bb:c7:d0:93:3a:30:bb:42:dd:42:d6:60:3e:34:6c:89:02:c8:
         a3:e3:6b:9f:eb:74:d2:e2:cf:a4:bf:f8:d2:be:ad:fc:0c:c0:
         11:1b:d6:1b:c3:5f:71:f5:e0:f0:4e:a3:b4:41:25:04:b0:20:
         f4:6e:74:77:0c:7c:6f:8a:9e:43:21:24:6f:46:e9:9a:c4:86:
         cd:b2:0c:66:6e:c6:a3:d9:ee:d7:b5:82:49:84:46:4c:aa:92:
         35:97:7a:aa:00:19:67:84:ad:62:74:90:b5:0a:2b:81:cf:4f:
         45:aa:79:e8:0c:78:9a:82:7f:79:88:2b:5e:7d:1e:59:a3:24:
         b7:9e:16:8c:ed:46:dd:8c:a8:5c:b0:8e:87:20:70:3e:77:95:
         81:0b:86:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----