Route Origin Authorization

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/326131313a663263303a666664653a3a2f34382d3438203d3e20323135303639.roa
File:                     326131313a663263303a666664653a3a2f34382d3438203d3e20323135303639.roa (raw, json)
Hash identifier:          ClVHvr7GojPar4zAMCD4eI2tBACybHPAaOLXDJDUg04=
Subject key identifier:   83:26:FC:3E:B4:41:EC:26:47:EB:F7:E5:03:94:6E:67:84:37:75:A8
Certificate issuer:       /CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578
Certificate serial:       1D7FDA68430CFE4BA754C7B975536BD1A020D4FF
Authority key identifier: 3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/326131313a663263303a666664653a3a2f34382d3438203d3e20323135303639.roa
Signing time:             Sun 07 Jul 2024 19:26:46 +0000
ROA not before:           Sun 07 Jul 2024 19:21:46 +0000
ROA not after:            Sun 06 Jul 2025 19:26:46 +0000
asID:                     215069
IP address blocks:        2a11:f2c0:ffde::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:7f:da:68:43:0c:fe:4b:a7:54:c7:b9:75:53:6b:d1:a0:20:d4:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578
        Validity
            Not Before: Jul  7 19:21:46 2024 GMT
            Not After : Jul  6 19:26:46 2025 GMT
        Subject: CN=8326FC3EB441EC2647EBF7E503946E67843775A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e6:f2:f5:a7:8f:66:92:37:db:d5:11:df:52:
                    62:a5:5c:5e:4e:5f:1b:18:c8:13:79:29:bc:b4:12:
                    3c:d1:81:b0:54:da:3e:ff:e8:2c:2f:f5:af:bb:c8:
                    90:9e:ed:6d:7f:82:20:42:c7:8e:2e:5f:03:eb:b8:
                    f2:14:d9:8a:a0:85:f3:1b:4a:06:b4:3c:52:1a:bb:
                    90:a5:b7:06:39:70:0c:53:11:3a:45:c5:ef:36:57:
                    3c:7a:f4:11:39:cc:b8:21:25:69:aa:d8:73:30:86:
                    c6:27:66:d0:31:61:e3:10:84:cb:21:0a:06:bd:bc:
                    e7:32:e9:5f:49:a6:f7:6a:71:7c:5f:e1:47:a4:c9:
                    83:64:ed:19:14:35:f8:a0:05:de:31:ed:10:2c:2a:
                    ba:5a:9a:bf:ab:09:e0:a8:a2:51:f1:0f:80:d1:6a:
                    58:19:d9:7f:1b:65:0e:51:6e:ce:fe:29:ad:11:a0:
                    bc:ec:2a:07:4c:c5:7c:18:bd:7e:8a:c6:b0:7b:8e:
                    62:bb:33:f1:29:ba:79:9c:f6:e4:99:f9:51:81:a9:
                    ac:6a:51:4e:62:c1:4e:13:f8:f4:bb:e7:af:3a:6b:
                    92:f6:df:41:b8:26:7f:c6:b1:2b:e0:19:1d:01:a5:
                    ed:00:2c:42:01:da:ea:fe:b5:0d:f5:66:2e:87:55:
                    d9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:26:FC:3E:B4:41:EC:26:47:EB:F7:E5:03:94:6E:67:84:37:75:A8
            X509v3 Authority Key Identifier:
                keyid:3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/326131313a663263303a666664653a3a2f34382d3438203d3e20323135303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:ffde::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:0b:f1:90:71:01:ba:3c:85:87:92:a6:e3:c7:00:9e:03:6f:
         c4:ea:b4:db:80:39:c7:00:8d:85:5a:a9:ed:18:1d:a7:4d:b5:
         67:5e:9d:1b:0a:a9:68:d5:12:85:52:ae:4f:3a:bc:ed:0e:6c:
         25:a3:33:4f:89:54:13:df:ae:75:d1:de:0c:6a:7b:3f:ac:5a:
         ef:81:c8:05:e3:82:d4:cc:2b:4e:51:4b:f6:1b:37:2d:f8:8d:
         6c:00:94:58:85:d0:8b:b6:9f:a1:6d:ef:a6:3a:7b:c5:c5:c5:
         95:6c:55:66:b0:49:87:35:bc:14:78:f0:d5:96:3f:ad:01:6b:
         88:06:f7:38:fb:87:b0:0c:33:7c:21:47:72:d3:4f:7f:5a:79:
         91:14:5c:b0:93:32:56:75:51:09:4d:bc:24:2a:40:88:95:83:
         13:93:24:e8:1d:c0:25:18:78:60:55:a8:1f:1f:95:6d:3f:36:
         b6:a1:92:fb:a8:c6:9d:19:84:59:7a:3a:ba:78:2a:26:03:eb:
         0c:85:80:93:49:9e:e6:2e:c2:af:a9:11:fc:d1:d4:1e:0b:32:
         ce:2c:34:c7:f1:a3:3b:68:4a:e4:83:77:2c:0c:65:b8:28:fb:
         64:70:82:e8:d4:21:6f:b6:6a:79:65:f2:dd:c9:b5:b9:8d:d8:
         e7:5e:8e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----