Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337383a3a2f34372d3437203d3e20323134373537.roa
File:                     326130613a363034343a616337383a3a2f34372d3437203d3e20323134373537.roa (raw, json)
Hash identifier:          o5k+/Rq1PQ+JN3Whpv7NeH55fT4DaEcVicN1G+tZ9FM=
Subject key identifier:   2F:F7:4C:75:4A:0D:73:11:DB:7B:B9:85:AF:23:81:5A:55:CB:BE:38
Certificate issuer:       /CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
Certificate serial:       761428980F7E6247C7A05A6A82E28B79A554F50B
Authority key identifier: 5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337383a3a2f34372d3437203d3e20323134373537.roa
Signing time:             Tue 11 Jun 2024 13:14:29 +0000
ROA not before:           Tue 11 Jun 2024 13:09:29 +0000
ROA not after:            Tue 10 Jun 2025 13:14:29 +0000
asID:                     214757
IP address blocks:        2a0a:6044:ac78::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:14:28:98:0f:7e:62:47:c7:a0:5a:6a:82:e2:8b:79:a5:54:f5:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
        Validity
            Not Before: Jun 11 13:09:29 2024 GMT
            Not After : Jun 10 13:14:29 2025 GMT
        Subject: CN=2FF74C754A0D7311DB7BB985AF23815A55CBBE38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0f:71:fb:49:2e:c2:a9:a8:31:9a:8e:b7:d7:
                    2b:01:3e:4f:64:1e:16:62:5e:3e:92:f8:f3:28:51:
                    89:69:1d:ce:2d:98:fb:d3:a5:1a:db:dd:0a:12:97:
                    0a:bb:4a:d4:9e:25:9f:1c:e5:ed:5b:c3:9a:ff:92:
                    97:f0:91:ad:30:2c:0a:58:ea:f7:46:ca:16:b6:f9:
                    e9:34:06:25:9f:2e:ee:38:7b:18:76:1d:8d:eb:31:
                    2b:e2:35:95:1b:73:8d:dd:16:4a:23:a9:51:fb:f5:
                    90:d1:55:ff:44:0d:48:5b:e9:01:84:63:3e:cd:5b:
                    03:56:52:d8:f4:2a:a0:92:4a:fb:63:73:2e:eb:6f:
                    8f:83:82:8d:0a:8b:9f:c3:67:4c:90:07:7f:09:a9:
                    62:1f:da:c3:21:0f:95:8d:69:be:20:bf:b4:d5:5d:
                    76:be:c9:a4:7b:72:39:a5:f3:8d:ce:80:24:1f:7a:
                    15:0e:24:85:15:ed:5f:f4:41:08:88:97:37:76:3d:
                    65:43:64:45:37:dd:ea:50:2d:73:31:2b:9f:47:e0:
                    2a:c4:68:22:60:4e:56:c4:13:af:44:63:81:11:e0:
                    ba:4d:da:3e:42:d6:00:8e:a2:e0:5c:88:d8:13:2e:
                    6f:fd:83:9c:71:4a:b5:d4:10:47:8a:77:ab:1e:e4:
                    92:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F7:4C:75:4A:0D:73:11:DB:7B:B9:85:AF:23:81:5A:55:CB:BE:38
            X509v3 Authority Key Identifier:
                keyid:5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337383a3a2f34372d3437203d3e20323134373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ac78::/47

    Signature Algorithm: sha256WithRSAEncryption
         8f:6a:c1:34:fd:a1:58:74:57:80:10:0d:f1:78:12:d6:86:5d:
         11:5b:24:58:14:a3:52:bb:7a:fc:5b:1b:19:4e:cd:3f:53:0f:
         97:81:c6:01:92:2a:c4:08:ad:fb:e2:c4:3b:19:b1:2d:30:9f:
         77:c3:f5:15:9d:11:c1:c7:df:ed:cc:fb:03:81:a9:14:d7:8f:
         ae:44:56:f4:74:84:35:2b:fb:a9:b8:9c:be:9c:7b:2b:10:42:
         10:8c:54:13:0f:c2:c8:84:b0:75:a3:55:4c:9f:77:08:d6:1c:
         55:0f:69:86:05:bf:64:8e:fd:0e:46:2a:41:e5:66:83:2e:27:
         80:7d:fb:09:e3:ce:aa:50:06:74:87:1e:34:ee:c8:83:c8:16:
         ec:7a:86:8b:a3:01:86:ed:fe:71:2f:f4:87:03:3a:a1:75:32:
         64:f4:04:25:f6:fe:b0:c1:3a:4f:5a:94:4e:99:52:09:52:d7:
         74:75:ff:da:dc:f2:70:f4:8a:e3:77:ac:75:15:80:a1:b4:33:
         50:b8:8b:9b:12:cd:43:b6:6a:8f:73:2c:7b:15:e4:0a:d6:85:
         63:e0:91:1a:b7:d1:7e:3a:79:13:1b:2c:84:98:c5:a9:9a:e5:
         87:78:fe:8e:ac:03:d3:c7:51:b2:2c:98:96:51:ac:34:12:26:
         a5:7f:38:81
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUdhQomA9+YkfHoFpqguKLeaVU9QswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURCMEUzNjJBRkJDOTAwMkIyRDU1MjEwMkRBMTFEQTdB
MzQzNkMxQzAeFw0yNDA2MTExMzA5MjlaFw0yNTA2MTAxMzE0MjlaMDMxMTAvBgNV
BAMTKDJGRjc0Qzc1NEEwRDczMTFEQjdCQjk4NUFGMjM4MTVBNTVDQkJFMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUD3H7SS7Cqagxmo631ysBPk9k
HhZiXj6S+PMoUYlpHc4tmPvTpRrb3QoSlwq7StSeJZ8c5e1bw5r/kpfwka0wLApY
6vdGyha2+ek0BiWfLu44exh2HY3rMSviNZUbc43dFkojqVH79ZDRVf9EDUhb6QGE
Yz7NWwNWUtj0KqCSSvtjcy7rb4+Dgo0Ki5/DZ0yQB38JqWIf2sMhD5WNab4gv7TV
XXa+yaR7cjml843OgCQfehUOJIUV7V/0QQiIlzd2PWVDZEU33epQLXMxK59H4CrE
aCJgTlbEE69EY4ER4LpN2j5C1gCOouBciNgTLm/9g5xxSrXUEEeKd6se5JIrAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUL/dMdUoNcxHbe7mFryOBWlXLvjgwHwYDVR0j
BBgwFoAUXbDjYq+8kAKy1VIQLaEdp6NDbBwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmQxNGVlZDYtNDhiZi00MTY3LTgxYmItZjY3NWQ2ZjE5
YTNhLzEvNURCMEUzNjJBRkJDOTAwMkIyRDU1MjEwMkRBMTFEQTdBMzQzNkMxQy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC81REIwRTM2MkFGQkM5MDAyQjJENTUyMTAy
REExMURBN0EzNDM2QzFDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9mZDE0ZWVkNi00OGJmLTQxNjctODFiYi1mNjc1ZDZmMTlhM2EvMS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTYxNjMzNzM4M2EzYTJmMzQzNzJkMzQzNzIwM2QzZTIwMzIz
MTM0MzczNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcBKgpgRKx4MA0GCSqGSIb3DQEBCwUAA4IBAQCP
asE0/aFYdFeAEA3xeBLWhl0RWyRYFKNSu3r8WxsZTs0/Uw+XgcYBkirECK374sQ7
GbEtMJ93w/UVnRHBx9/tzPsDgakU14+uRFb0dIQ1K/upuJy+nHsrEEIQjFQTD8LI
hLB1o1VMn3cI1hxVD2mGBb9kjv0ORipB5WaDLieAffsJ486qUAZ0hx407siDyBbs
eoaLowGG7f5xL/SHAzqhdTJk9AQl9v6wwTpPWpROmVIJUtd0df/a3PJw9Irjd6x1
FYChtDNQuIubEs1DtmqPcyx7FeQK1oVj4JEat9F+OnkTGyyEmMWpmuWHeP6OrAPT
x1GyLJiWUaw0EialfziB
-----END CERTIFICATE-----