Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213001.roa
File:                     AS213001.roa (raw, json)
Hash identifier:          Q3lV6rGgrubsHlOfrZ2DNfgixK4zX5wN0/J+pmr94ys=
Subject key identifier:   DF:2D:70:C0:77:DD:D6:B0:45:B2:2E:5B:44:23:26:B6:40:5C:F5:D4
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       37FA2CB309E7B060693CCBD6F02A9FA25DA8797B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213001.roa
Signing time:             Tue 18 Mar 2025 16:16:02 +0000
ROA not before:           Tue 18 Mar 2025 16:11:02 +0000
ROA not after:            Tue 17 Mar 2026 16:16:02 +0000
asID:                     213001
IP address blocks:        82.27.90.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:fa:2c:b3:09:e7:b0:60:69:3c:cb:d6:f0:2a:9f:a2:5d:a8:79:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Mar 18 16:11:02 2025 GMT
            Not After : Mar 17 16:16:02 2026 GMT
        Subject: CN=DF2D70C077DDD6B045B22E5B442326B6405CF5D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:87:00:5d:ff:7b:95:2c:13:1e:22:38:fb:85:
                    7b:06:11:12:27:9b:3e:5f:dd:f0:42:fd:5f:ec:7c:
                    1b:ef:cd:87:47:a4:52:0c:8b:62:00:f5:f3:02:ee:
                    bf:50:8e:2b:06:2a:7b:b6:5e:fd:7e:cc:f8:46:ff:
                    37:fe:fc:31:f4:34:a0:9f:8e:8f:c8:8d:0c:c4:bc:
                    6a:1d:d0:68:91:a2:94:7b:78:1d:de:bd:a5:ec:cc:
                    a7:59:57:64:b7:6e:58:7b:ff:60:c9:1e:c4:50:da:
                    06:8e:d5:17:df:ba:f7:37:5f:63:39:6a:42:8a:15:
                    9e:f2:76:dc:85:b7:05:71:da:c1:1f:7b:83:82:47:
                    ba:ac:dd:bd:1e:c4:53:7d:00:e5:bd:69:46:c6:79:
                    42:6d:70:fe:53:4e:2b:3d:ec:60:fa:c3:06:1e:c1:
                    f2:7a:86:f0:75:43:43:5b:07:50:2f:4f:35:42:de:
                    ea:d5:5c:a6:0b:3d:11:aa:f4:56:3e:d6:51:04:6c:
                    bd:46:dd:f4:34:6c:44:6b:38:25:92:6d:74:69:ed:
                    d4:12:f0:8d:73:43:fe:0b:64:01:56:19:c9:e1:c5:
                    3a:67:d4:6f:f1:03:a8:48:66:d3:e5:8a:ad:2f:6d:
                    a3:45:ed:ba:0b:62:3a:21:1d:51:74:64:f8:bc:ea:
                    c2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:2D:70:C0:77:DD:D6:B0:45:B2:2E:5B:44:23:26:B6:40:5C:F5:D4
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213001.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.27.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:f8:ad:10:0e:24:09:fe:ce:41:98:83:ac:fe:c0:61:d3:a9:
         28:54:90:53:7f:02:08:81:63:b9:02:15:07:b7:ed:ef:c1:8c:
         51:a6:9d:a0:95:f1:dd:ec:b3:6f:a4:ca:c5:97:42:46:70:9b:
         2d:c8:c1:12:8b:65:5a:b6:a5:9f:4e:c2:31:a3:e9:fc:56:55:
         ee:da:5a:9f:04:91:2b:0e:6d:76:75:9c:1d:c5:a3:f5:47:cb:
         42:db:3b:42:33:88:46:11:6c:c7:68:21:19:4a:86:4c:94:a6:
         0d:18:8d:ea:7f:91:66:b4:68:e0:db:8a:31:18:08:7f:2d:f4:
         58:00:6c:fd:e2:9f:dc:07:29:5e:f1:50:f0:e3:4c:85:f8:d6:
         b2:6f:27:da:5d:9a:ad:ab:bd:e8:22:ff:64:f8:24:de:33:26:
         02:31:73:ac:cf:09:ec:bb:39:61:d7:0a:39:16:ec:4b:67:fb:
         9b:43:ca:eb:b5:83:a8:df:f0:eb:ad:00:ff:95:9b:6f:5b:a8:
         d1:ab:03:3e:c8:3d:cf:57:a8:17:24:d5:dc:34:cd:86:7e:c1:
         39:ad:2a:df:eb:38:fa:ff:7d:94:8e:6c:91:57:53:99:46:09:
         07:37:13:34:b3:3e:a0:84:df:ff:cc:16:9d:08:b0:f0:51:ed:
         c5:8e:3f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----