Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234353a3a2f34382d3438203d3e20323035333239.roa
File:                     326131323a646434373a383234353a3a2f34382d3438203d3e20323035333239.roa (raw, json)
Hash identifier:          VlCQxkfsCF7xFQ41j3X3s1WQFSt/sCYXaZfrIRLVf30=
Subject key identifier:   4F:5D:49:EC:B7:C7:8D:11:57:F0:FF:7F:6B:7F:B8:54:9A:62:E7:C8
Certificate issuer:       /CN=8D57D440906265349F6DEF98557AC28D0381C47E
Certificate serial:       7605544119711E84366A66AEF89733E914363ACF
Authority key identifier: 8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
Authority info access:    rsync://rpki.co/repo/AS945/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234353a3a2f34382d3438203d3e20323035333239.roa
Signing time:             Fri 13 Oct 2023 19:55:04 +0000
ROA not before:           Fri 13 Oct 2023 19:50:04 +0000
ROA not after:            Fri 11 Oct 2024 19:55:04 +0000
asID:                     205329
IP address blocks:        2a12:dd47:8245::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:05:54:41:19:71:1e:84:36:6a:66:ae:f8:97:33:e9:14:36:3a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D57D440906265349F6DEF98557AC28D0381C47E
        Validity
            Not Before: Oct 13 19:50:04 2023 GMT
            Not After : Oct 11 19:55:04 2024 GMT
        Subject: CN=4F5D49ECB7C78D1157F0FF7F6B7FB8549A62E7C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:36:30:a7:c0:4b:ad:c4:db:c5:5b:3d:31:09:
                    5b:d9:76:cd:e6:3a:d3:21:1f:a5:12:3b:31:a7:63:
                    c5:2c:9b:bc:a3:0c:b3:67:b4:e1:3f:f4:5c:25:7e:
                    b1:6b:47:86:79:48:76:ed:44:2d:05:5c:d8:c5:be:
                    c7:12:55:83:2e:22:45:85:39:c1:49:96:ba:b2:85:
                    84:d4:f0:5b:8f:d9:cd:a9:7b:8c:63:bc:02:07:6a:
                    4a:82:37:bd:9e:1d:0d:3e:96:95:05:59:e4:04:1c:
                    d0:26:ab:80:8c:d0:89:57:f8:a1:01:29:7e:3d:de:
                    60:ff:59:7f:ec:61:ed:fd:28:f0:8c:4b:d1:7b:39:
                    d6:61:ca:44:cf:0d:75:51:25:86:9a:fe:34:92:6c:
                    0a:d9:a5:63:1e:d0:a9:03:a4:18:45:18:4c:49:37:
                    55:1a:7c:1e:c3:c3:fa:08:28:f9:e5:18:10:93:67:
                    41:5c:7b:e4:97:35:63:85:9d:d1:2a:37:ed:2a:a6:
                    8b:de:7d:ac:49:e5:81:34:0e:4b:38:49:e9:19:ef:
                    01:27:f0:8b:12:67:0f:2b:c1:c1:1d:7c:ad:41:c2:
                    76:d0:de:bc:34:cc:8b:52:11:56:08:c3:69:b3:d0:
                    fb:23:bb:5d:11:b2:c5:de:2e:36:53:d7:89:dd:3a:
                    7e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5D:49:EC:B7:C7:8D:11:57:F0:FF:7F:6B:7F:B8:54:9A:62:E7:C8
            X509v3 Authority Key Identifier:
                keyid:8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/8D57D440906265349F6DEF98557AC28D0381C47E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234353a3a2f34382d3438203d3e20323035333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8245::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:1b:5a:90:4e:3f:2a:e3:14:0b:a3:e2:2c:fc:2e:b5:60:65:
         c3:77:16:1a:45:f5:7d:55:f6:f9:bf:02:68:de:e5:1f:d9:78:
         2f:e5:1f:3f:e1:33:ce:53:4a:05:43:96:a4:1f:a4:07:f5:a0:
         c4:93:eb:ce:b8:5f:63:bf:bb:a1:12:6d:ae:47:29:e5:ed:89:
         71:97:51:d1:23:b5:d0:e5:4c:71:d2:37:01:7e:3b:37:ad:e1:
         28:71:61:62:46:c8:f7:64:ce:2d:91:cd:95:c6:62:84:b4:b5:
         e0:35:3a:9d:64:a7:d0:cf:a5:e9:e9:6c:f3:63:59:70:03:0e:
         10:65:8f:ee:4f:e6:32:47:47:69:5b:df:78:43:f6:5f:73:95:
         49:5e:65:dc:af:d1:2a:c4:ad:a1:04:d2:ea:7d:76:e5:a4:1b:
         2d:ca:88:e6:2f:31:c7:c1:49:1c:d2:aa:2f:b1:0a:09:e4:14:
         75:bd:dd:07:8b:03:e9:85:9b:d5:d7:4a:96:ef:ea:ca:c6:98:
         b7:7c:0e:53:ff:ef:ec:a8:9c:1c:91:25:a1:73:1d:34:f0:04:
         f3:a8:db:cf:7c:1c:9b:51:e7:bd:65:f6:46:f4:74:21:4c:ee:
         ad:94:77:ac:5f:4b:8d:86:6c:2d:00:a9:63:22:70:6d:b8:35:
         3b:6b:8b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----