Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a343030303a3a2f33362d3336203d3e20323133343238.roa
File:                     326131343a373538303a343030303a3a2f33362d3336203d3e20323133343238.roa (raw, json)
Hash identifier:          f38GGJwA8aLs49rknYyp3/ozCmX5eTGnavOZGUBAqUw=
Subject key identifier:   58:1D:75:0D:9E:68:EB:3C:B0:F8:7C:66:E1:A9:3F:94:1A:EF:8F:00
Certificate issuer:       /CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4
Certificate serial:       3B827637209902DEB81C390A889121873620D6A4
Authority key identifier: F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a343030303a3a2f33362d3336203d3e20323133343238.roa
Signing time:             Sun 09 Mar 2025 05:14:59 +0000
ROA not before:           Sun 09 Mar 2025 05:09:59 +0000
ROA not after:            Sun 08 Mar 2026 05:14:59 +0000
asID:                     213428
IP address blocks:        2a14:7580:4000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:82:76:37:20:99:02:de:b8:1c:39:0a:88:91:21:87:36:20:d6:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4
        Validity
            Not Before: Mar  9 05:09:59 2025 GMT
            Not After : Mar  8 05:14:59 2026 GMT
        Subject: CN=581D750D9E68EB3CB0F87C66E1A93F941AEF8F00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ea:58:cf:7e:65:86:c0:b0:62:f0:b8:49:61:
                    78:10:13:46:e3:20:70:5a:89:86:c1:eb:09:12:6c:
                    49:df:31:12:f0:10:db:e4:a2:e2:6d:22:30:c9:f0:
                    98:fa:05:bb:a3:83:48:ac:93:c3:3c:71:87:92:e6:
                    ec:06:8d:94:e7:c3:c0:de:7d:6e:ff:bd:1d:7a:ef:
                    40:d7:99:3d:dc:44:bf:ad:b0:17:21:f4:87:9d:31:
                    fe:bb:ec:46:6a:ac:d3:61:02:61:c5:07:01:4c:e3:
                    b7:80:fc:7c:42:24:e1:8c:a6:5d:e8:4c:69:0e:f9:
                    c0:00:29:e7:01:74:b4:d9:04:4e:69:ec:99:5a:a7:
                    08:0f:23:d0:4f:c9:3e:99:15:e9:50:f3:12:e4:5c:
                    db:18:38:3c:16:88:e9:a9:78:8e:50:23:b4:7f:4b:
                    de:05:eb:e3:b5:67:f6:ef:cb:5b:56:91:8b:c7:06:
                    cf:b9:1d:82:fa:29:17:e3:94:7a:19:ab:5c:92:f2:
                    4d:6d:d9:fa:d6:7a:b1:5a:e1:52:a5:70:0a:77:62:
                    04:ae:ad:68:13:f0:1c:88:09:76:7b:78:cb:1a:3f:
                    0b:ae:60:39:00:c1:3e:11:e7:91:1f:29:00:b8:63:
                    95:83:db:0c:b1:8c:84:4c:3e:60:25:79:0d:5a:a4:
                    1a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1D:75:0D:9E:68:EB:3C:B0:F8:7C:66:E1:A9:3F:94:1A:EF:8F:00
            X509v3 Authority Key Identifier:
                keyid:F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a343030303a3a2f33362d3336203d3e20323133343238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b5:4e:7a:7d:bc:d5:af:c7:ba:3e:13:f0:0f:d6:6e:cb:b8:7d:
         1d:a9:fc:98:e2:80:29:66:9f:a9:d6:db:3b:b1:92:b0:49:a0:
         03:10:dd:c2:db:2c:a0:ac:41:0f:11:f6:de:5a:d7:78:09:ae:
         d8:20:f8:df:e3:16:be:dc:89:c9:61:0d:5d:c1:d2:b7:f8:19:
         63:a0:51:b1:78:4f:ad:48:8c:08:25:e0:44:2c:c5:23:d8:ed:
         47:23:90:38:ed:2a:1f:21:ed:1c:95:9f:94:c4:86:47:07:0d:
         3b:f0:f0:9b:af:4e:f7:e1:cf:a9:5e:fd:16:b1:69:37:7a:a5:
         b0:d0:18:0c:cf:62:ae:24:dd:d4:60:3c:84:e5:e1:79:28:ca:
         90:ce:0d:45:f2:20:a8:0a:7d:3e:8b:10:b8:fe:99:d8:8f:b6:
         a2:ae:3d:42:b7:f5:fd:f8:81:4b:ad:d6:09:a3:13:19:96:2a:
         41:c9:d4:67:5a:74:11:89:3a:ba:58:55:2e:24:9e:ca:3f:5a:
         16:e3:a4:4e:cc:54:ea:c4:cd:84:60:28:1c:cb:f9:c1:de:c0:
         80:9f:9f:f1:0b:7f:92:41:0b:b8:0e:22:17:d2:35:48:59:3f:
         d6:d2:a2:86:59:9d:a2:a2:5c:f3:23:7a:e8:fb:91:8b:b0:e6:
         f2:a8:13:69
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIUO4J2NyCZAt64HDkKiJEhhzYg1qQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENG
OTM5RjRGNDAeFw0yNTAzMDkwNTA5NTlaFw0yNjAzMDgwNTE0NTlaMDMxMTAvBgNV
BAMTKDU4MUQ3NTBEOUU2OEVCM0NCMEY4N0M2NkUxQTkzRjk0MUFFRjhGMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu6ljPfmWGwLBi8LhJYXgQE0bj
IHBaiYbB6wkSbEnfMRLwENvkouJtIjDJ8Jj6Bbujg0isk8M8cYeS5uwGjZTnw8De
fW7/vR1670DXmT3cRL+tsBch9IedMf677EZqrNNhAmHFBwFM47eA/HxCJOGMpl3o
TGkO+cAAKecBdLTZBE5p7JlapwgPI9BPyT6ZFelQ8xLkXNsYODwWiOmpeI5QI7R/
S94F6+O1Z/bvy1tWkYvHBs+5HYL6KRfjlHoZq1yS8k1t2frWerFa4VKlcAp3YgSu
rWgT8ByICXZ7eMsaPwuuYDkAwT4R55EfKQC4Y5WD2wyxjIRMPmAleQ1apBrTAgMB
AAGjggKEMIICgDAdBgNVHQ4EFgQUWB11DZ5o6zyw+Hxm4ak/lBrvjwAwHwYDVR0j
BBgwFoAU9ABy/9wPGxWmnlvHmi9YjPk59PQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4
Zjc3LzAvRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENGOTM5RjRGNC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNDAwNzJGRkRDMEYxQjE1QTY5RTVCQzc5
QTJGNTg4Q0Y5MzlGNEY0LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8xOWFhOWRhNy1mMWU0LTRkOTgtYmY5NS05ZmRmY2Y0NDhmNzcvMC8zMjYxMzEz
NDNhMzczNTM4MzAzYTM0MzAzMDMwM2EzYTJmMzMzNjJkMzMzNjIwM2QzZTIwMzIz
MTMzMzQzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYEKhR1gEAwDQYJKoZIhvcNAQELBQADggEBALVO
en281a/Huj4T8A/Wbsu4fR2p/JjigClmn6nW2zuxkrBJoAMQ3cLbLKCsQQ8R9t5a
13gJrtgg+N/jFr7ciclhDV3B0rf4GWOgUbF4T61IjAgl4EQsxSPY7UcjkDjtKh8h
7RyVn5TEhkcHDTvw8JuvTvfhz6le/RaxaTd6pbDQGAzPYq4k3dRgPITl4XkoypDO
DUXyIKgKfT6LELj+mdiPtqKuPUK39f34gUut1gmjExmWKkHJ1GdadBGJOrpYVS4k
nso/WhbjpE7MVOrEzYRgKBzL+cHewICfn/ELf5JBC7gOIhfSNUhZP9bSooZZnaKi
XPMjeuj7kYuw5vKoE2k=
-----END CERTIFICATE-----