Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/10/323030313a3637383a6233343a3a2f34382d3438203d3e20323038303531.roa
File:                     323030313a3637383a6233343a3a2f34382d3438203d3e20323038303531.roa (raw, json)
Hash identifier:          P50sMDAaAkFKQUxfwK7LzAX4Md5Xi/jA8attwiQRt8k=
Subject key identifier:   5C:D0:C2:34:E8:0F:91:37:2A:75:61:14:D4:00:12:6A:49:83:8F:BB
Certificate issuer:       /CN=4d02651af98c39bd428d1ef39bceb5dbcdbedfdc
Certificate serial:       56E8E5527D549935DD74599C6FBD594D292B9B3D
Authority key identifier: 4D:02:65:1A:F9:8C:39:BD:42:8D:1E:F3:9B:CE:B5:DB:CD:BE:DF:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TQJlGvmMOb1CjR7zm861282-39w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/10/323030313a3637383a6233343a3a2f34382d3438203d3e20323038303531.roa
Signing time:             Sun 30 Jun 2024 12:15:23 +0000
ROA not before:           Sun 30 Jun 2024 12:10:23 +0000
ROA not after:            Sun 29 Jun 2025 12:15:23 +0000
asID:                     208051
IP address blocks:        2001:678:b34::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e8:e5:52:7d:54:99:35:dd:74:59:9c:6f:bd:59:4d:29:2b:9b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d02651af98c39bd428d1ef39bceb5dbcdbedfdc
        Validity
            Not Before: Jun 30 12:10:23 2024 GMT
            Not After : Jun 29 12:15:23 2025 GMT
        Subject: CN=5CD0C234E80F91372A756114D400126A49838FBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:56:68:70:85:8e:d1:17:24:e8:4d:dd:a2:48:
                    63:b6:b4:f5:62:39:50:30:ba:b4:2a:c0:27:42:2b:
                    a6:5e:35:65:97:7f:3c:38:a2:8b:01:fc:66:a4:35:
                    c5:69:9e:09:38:84:97:6f:b4:45:7a:6a:f2:67:10:
                    b8:d4:39:e0:47:b1:7c:73:46:f6:a6:5c:53:76:02:
                    00:2a:4e:e9:05:0f:93:65:e6:1e:11:ee:50:14:0e:
                    31:69:1a:47:56:9b:75:ba:de:7c:0b:d6:85:1e:b6:
                    40:29:29:3a:46:92:b9:fd:31:60:ac:3b:ad:02:84:
                    cd:be:48:f6:98:80:b8:df:50:b7:51:0e:8b:28:84:
                    f7:d6:a5:89:6d:1b:35:18:71:33:71:f1:f8:1a:88:
                    5e:ac:4d:2d:f5:2a:b0:bd:42:a7:dd:2c:64:cc:f6:
                    d1:77:2f:b7:d7:60:c2:3f:be:02:a5:ad:97:4c:89:
                    03:77:0b:84:da:f9:dc:f0:be:f6:88:94:cb:c3:f1:
                    5f:14:44:ca:04:74:9d:14:33:d0:7c:3c:ed:a7:67:
                    9a:69:19:97:f7:b9:16:07:fc:bd:f8:b8:9a:06:e8:
                    5a:f8:ef:b1:96:cf:b9:dd:5d:63:9c:50:4e:93:51:
                    c0:3e:cc:f8:50:b4:a0:80:32:af:68:91:a8:5e:ef:
                    dc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D0:C2:34:E8:0F:91:37:2A:75:61:14:D4:00:12:6A:49:83:8F:BB
            X509v3 Authority Key Identifier:
                keyid:4D:02:65:1A:F9:8C:39:BD:42:8D:1E:F3:9B:CE:B5:DB:CD:BE:DF:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/10/4D02651AF98C39BD428D1EF39BCEB5DBCDBEDFDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQJlGvmMOb1CjR7zm861282-39w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/10/323030313a3637383a6233343a3a2f34382d3438203d3e20323038303531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:b34::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:06:ba:f8:a1:6c:1b:d3:30:5f:41:3a:68:f2:e9:5e:5c:fd:
         c4:31:7a:19:e9:51:85:83:0d:e6:5f:f3:f7:58:d9:ee:cd:30:
         06:00:94:a4:b7:7e:e3:c4:4c:46:68:7e:7e:9e:36:d8:19:6e:
         cd:0c:77:32:ef:56:78:fe:dc:47:c1:95:b7:7c:eb:bd:9d:f9:
         ed:68:34:f3:8d:4f:7b:36:97:04:67:e2:46:41:5a:8e:8f:cb:
         b5:f1:16:f7:65:95:b4:f9:ab:ea:7b:26:bf:ef:bc:46:03:8d:
         f1:a1:3e:d0:39:5f:44:10:fe:74:d3:3d:c0:40:5f:b6:f1:2d:
         64:3b:b3:42:1c:d8:dc:3e:37:9c:53:76:24:1a:a7:0f:61:64:
         e3:08:ec:86:81:54:10:f9:de:95:be:1d:4b:fe:82:dc:bf:04:
         a3:cf:31:d7:5f:f7:23:b2:3f:9f:fc:c7:ea:64:89:ba:33:69:
         bf:fc:9b:0d:11:ee:27:d3:4e:f4:72:4c:d7:f7:ff:7a:9b:0c:
         6d:6c:d7:1a:fa:e6:a6:13:ef:b5:7d:41:ea:c0:9e:ba:ce:37:
         6a:5e:9c:59:9d:32:73:96:a3:9b:37:64:b1:c1:f7:d5:06:ab:
         9d:ef:d6:70:16:98:8a:d3:60:92:d4:c4:3f:f3:bc:5f:8f:4a:
         b6:5d:45:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----