Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/326130373a353463373a353430303a3a2f33382d3338203d3e20323136343535.roa
File:                     326130373a353463373a353430303a3a2f33382d3338203d3e20323136343535.roa (raw, json)
Hash identifier:          WgAgPO7m2PRtW/hhLgCh/LUbstT+o0+84QgZ+UQ8JTY=
Subject key identifier:   61:DD:2A:63:F4:A8:58:17:94:6B:1A:F2:93:F0:3B:B2:2E:89:46:47
Certificate issuer:       /CN=A816FDA8ADEC8085A8A348E698709DE583B219B5
Certificate serial:       6CF69999556D5F9636E4F139C77F688B50250C8F
Authority key identifier: A8:16:FD:A8:AD:EC:80:85:A8:A3:48:E6:98:70:9D:E5:83:B2:19:B5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/326130373a353463373a353430303a3a2f33382d3338203d3e20323136343535.roa
Signing time:             Sat 26 Oct 2024 12:40:40 +0000
ROA not before:           Sat 26 Oct 2024 12:35:40 +0000
ROA not after:            Sat 25 Oct 2025 12:40:40 +0000
asID:                     216455
IP address blocks:        2a07:54c7:5400::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f6:99:99:55:6d:5f:96:36:e4:f1:39:c7:7f:68:8b:50:25:0c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A816FDA8ADEC8085A8A348E698709DE583B219B5
        Validity
            Not Before: Oct 26 12:35:40 2024 GMT
            Not After : Oct 25 12:40:40 2025 GMT
        Subject: CN=61DD2A63F4A85817946B1AF293F03BB22E894647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ee:1b:a5:96:07:f1:bd:06:4d:b2:98:a5:ea:
                    55:1c:75:dc:00:d9:9f:65:db:a7:4f:26:d3:1d:74:
                    df:62:dc:89:19:fe:ff:95:34:d0:8c:74:47:2e:58:
                    4d:ea:67:fd:65:e1:be:53:f1:61:77:d5:9b:8d:19:
                    d0:8e:bd:90:44:b7:d8:09:28:42:14:3b:6e:7a:88:
                    9d:c3:e5:29:95:a9:93:cc:84:c6:1a:bb:57:30:f9:
                    d3:03:b6:53:88:66:58:7c:7a:5c:84:a3:f4:2a:45:
                    5f:fb:3e:09:b6:69:27:f3:88:08:fe:cd:a7:99:0e:
                    22:83:2e:d0:51:7b:37:dd:a0:e9:91:d4:39:d7:e1:
                    c5:37:bc:e7:29:70:98:fb:15:fa:58:df:aa:4d:4b:
                    40:46:48:f9:58:78:fb:ba:62:54:7c:15:23:26:04:
                    e1:ff:3a:0d:a6:1a:ee:db:91:9f:f8:11:a1:6e:e0:
                    dc:8f:e2:a5:d6:4a:cd:d7:87:58:c5:48:94:72:59:
                    43:74:e8:46:08:3b:f4:da:0a:c7:8e:31:01:85:83:
                    7e:44:a1:15:37:88:3d:cb:55:25:34:07:00:76:02:
                    74:ec:52:e2:0f:7c:2c:58:73:a0:76:d1:2a:6f:9e:
                    56:d1:e7:3c:81:f8:db:e4:c8:1b:ce:25:d5:d6:0d:
                    63:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:DD:2A:63:F4:A8:58:17:94:6B:1A:F2:93:F0:3B:B2:2E:89:46:47
            X509v3 Authority Key Identifier:
                keyid:A8:16:FD:A8:AD:EC:80:85:A8:A3:48:E6:98:70:9D:E5:83:B2:19:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/326130373a353463373a353430303a3a2f33382d3338203d3e20323136343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c7:5400::/38

    Signature Algorithm: sha256WithRSAEncryption
         0f:d2:22:09:99:88:53:46:8e:77:28:3e:b5:ee:51:c9:b7:2c:
         22:07:2c:c1:bb:d0:d8:b6:f8:ed:07:a3:5d:3b:1a:9a:1b:4d:
         8b:a5:fe:a4:50:c8:25:0f:c0:ef:40:44:19:97:a1:81:0b:ae:
         e9:8f:35:81:9f:9b:7d:47:c1:5b:ab:36:73:8f:f7:07:9d:fc:
         90:4e:08:bf:e0:e4:86:93:dc:d8:4a:fd:8d:7f:85:41:f0:83:
         38:6a:a8:8f:25:fd:18:67:6b:56:aa:5a:eb:62:23:94:08:25:
         92:9d:6b:68:95:c0:d1:e6:2a:1f:a2:ae:11:cc:78:16:14:f7:
         e3:08:db:3e:56:76:10:d4:54:a6:81:d3:17:44:3d:93:ba:61:
         f2:3d:e0:97:9c:ad:f0:6a:8f:5b:cd:50:b8:df:23:b2:93:02:
         80:01:34:e3:fa:8c:81:b5:fa:91:c2:fd:26:14:4c:af:65:7e:
         5d:cf:7d:2e:34:51:40:a7:b7:bb:95:2e:f0:6f:8e:b3:f5:58:
         9d:3c:ef:9c:77:9d:7b:34:5e:77:1a:2c:48:c6:68:27:f0:ab:
         6e:f1:47:de:94:5b:3f:0c:ca:46:50:81:8a:7e:ba:77:8e:a7:
         60:92:e6:dc:47:c9:d2:21:59:6c:ea:64:d6:09:c6:a8:e5:9d:
         72:cc:0a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----