Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/323030313a3637383a6434343a3a2f34382d3438203d3e20323133323739.roa
File:                     323030313a3637383a6434343a3a2f34382d3438203d3e20323133323739.roa (raw, json)
Hash identifier:          a2d6hAclWrhx6h6+ACHw0iSYteM3AlSblaeDKRH8jzc=
Subject key identifier:   70:78:A8:EA:66:6B:3F:6C:F4:C1:F3:FB:3B:1A:11:C8:7B:73:53:CF
Certificate issuer:       /CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e
Certificate serial:       30C8F0AB618A9375A2095C7483BA24119243C8AF
Authority key identifier: 2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/323030313a3637383a6434343a3a2f34382d3438203d3e20323133323739.roa
Signing time:             Mon 03 Feb 2025 10:35:44 +0000
ROA not before:           Mon 03 Feb 2025 10:30:44 +0000
ROA not after:            Mon 02 Feb 2026 10:35:44 +0000
asID:                     213279
IP address blocks:        2001:678:d44::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c8:f0:ab:61:8a:93:75:a2:09:5c:74:83:ba:24:11:92:43:c8:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e
        Validity
            Not Before: Feb  3 10:30:44 2025 GMT
            Not After : Feb  2 10:35:44 2026 GMT
        Subject: CN=7078A8EA666B3F6CF4C1F3FB3B1A11C87B7353CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:86:fa:ab:8e:50:98:b5:8d:ab:87:90:56:fc:
                    a4:63:85:ed:3b:df:7d:c1:81:46:0f:e7:f9:27:39:
                    5e:8f:8e:2c:5a:48:9e:18:be:1e:1d:81:11:60:a2:
                    2f:3c:97:af:2a:04:b8:2a:0f:6f:77:1d:65:c8:97:
                    8b:bc:f5:31:16:8c:2d:38:ab:38:6b:4b:b9:ef:c8:
                    da:2f:28:47:e7:cd:98:43:51:3a:43:ac:36:de:c2:
                    50:98:01:52:30:2c:2a:57:bf:23:e5:74:6e:f2:97:
                    25:16:d1:fc:f2:be:08:24:db:a4:d2:31:e0:29:47:
                    ff:6e:95:f0:2f:67:fb:21:a6:2b:dd:f0:a8:40:9b:
                    9b:61:40:db:41:76:bb:90:7b:06:48:ff:37:55:b4:
                    4d:1c:9c:70:ad:b8:02:7b:fd:ca:e3:fa:ed:36:a8:
                    9b:22:0b:dd:e6:26:dd:4d:6e:a8:aa:77:5e:36:9e:
                    41:37:e2:e3:ea:a2:14:5c:3e:84:1d:b4:dd:0f:ee:
                    b4:63:2a:9e:90:11:aa:92:da:cf:6f:4d:f5:97:4f:
                    dd:5f:ad:48:03:fa:a6:a6:d9:2c:22:78:31:08:02:
                    69:20:8f:02:33:36:13:35:9a:2e:2a:7a:f7:bf:06:
                    a8:9f:58:e4:06:8a:7b:c7:52:8c:b8:9a:2f:46:41:
                    8f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:78:A8:EA:66:6B:3F:6C:F4:C1:F3:FB:3B:1A:11:C8:7B:73:53:CF
            X509v3 Authority Key Identifier:
                keyid:2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/323030313a3637383a6434343a3a2f34382d3438203d3e20323133323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:d44::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:cc:34:65:d4:39:d3:9e:ab:34:c8:8b:67:d8:54:1e:57:1d:
         15:2c:f2:a7:ed:00:25:71:0d:7e:0a:b2:0e:79:47:4e:5f:12:
         61:5d:a7:9e:79:d9:40:02:c6:c2:ce:f3:68:67:0d:b3:20:a1:
         71:cf:00:2b:e9:41:24:0d:21:bb:80:44:46:c3:a2:65:d7:d6:
         d3:19:ea:c0:83:5c:f5:38:81:7f:d2:0a:39:fc:1d:1d:c1:05:
         d3:92:fb:dd:fd:70:25:4e:f3:cc:88:55:cb:0a:42:ea:f6:e2:
         a5:4e:c2:ba:c6:48:8d:a5:68:72:ba:3d:8a:0c:53:c9:74:f8:
         1b:65:22:02:b9:ec:16:d7:ce:0c:f0:f4:ee:92:1b:98:89:07:
         37:c6:57:aa:40:67:6d:63:73:48:dd:16:c2:4c:5b:a9:9c:98:
         81:a8:6b:a3:d7:1f:78:da:bf:90:87:6a:46:fa:e9:c5:6d:ab:
         0e:17:59:cd:93:69:47:a8:65:ba:9b:1e:6c:a3:fa:dc:2a:2c:
         9c:6d:fc:81:da:d6:b9:8b:e9:40:d8:8e:8a:82:41:ac:a1:3b:
         d1:75:dd:a6:d6:c7:60:51:f4:c0:5e:ca:7e:21:0e:f1:01:bf:
         ec:59:bd:6b:ad:20:b6:6b:bf:cb:dd:c3:d8:45:1c:c9:dc:4e:
         df:65:9d:7f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUMMjwq2GKk3WiCVx0g7okEZJDyK8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMmMxMmYwYTA4MGYwMjFmMmJhMjViYzBjNmVhN2UwNmI2
N2FhZDA1ZTAeFw0yNTAyMDMxMDMwNDRaFw0yNjAyMDIxMDM1NDRaMDMxMTAvBgNV
BAMTKDcwNzhBOEVBNjY2QjNGNkNGNEMxRjNGQjNCMUExMUM4N0I3MzUzQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3hvqrjlCYtY2rh5BW/KRjhe07
333BgUYP5/knOV6PjixaSJ4Yvh4dgRFgoi88l68qBLgqD293HWXIl4u89TEWjC04
qzhrS7nvyNovKEfnzZhDUTpDrDbewlCYAVIwLCpXvyPldG7ylyUW0fzyvggk26TS
MeApR/9ulfAvZ/shpivd8KhAm5thQNtBdruQewZI/zdVtE0cnHCtuAJ7/crj+u02
qJsiC93mJt1Nbqiqd142nkE34uPqohRcPoQdtN0P7rRjKp6QEaqS2s9vTfWXT91f
rUgD+qam2SwieDEIAmkgjwIzNhM1mi4qeve/BqifWOQGinvHUoy4mi9GQY+BAgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQUcHio6mZrP2z0wfP7OxoRyHtzU88wHwYDVR0j
BBgwFoAULBLwoIDwIfK6JbwMbqfga2eq0F4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODA3MDYxNWYtZDI2ZC00MmUzLWExNDUtNWM3YjY3YjJi
NjRlLzAvMkMxMkYwQTA4MEYwMjFGMkJBMjVCQzBDNkVBN0UwNkI2N0FBRDA1RS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0xCTHdvSUR3SWZLNkpid01icWZnYTJl
cTBGNC5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODA3MDYxNWYt
ZDI2ZC00MmUzLWExNDUtNWM3YjY3YjJiNjRlLzAvMzIzMDMwMzEzYTM2MzczODNh
NjQzNDM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMTMzMzIzNzM5LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAIAEGeA1EMA0GCSqGSIb3DQEBCwUAA4IBAQAFzDRl1DnTnqs0yItn2FQe
Vx0VLPKn7QAlcQ1+CrIOeUdOXxJhXaeeedlAAsbCzvNoZw2zIKFxzwAr6UEkDSG7
gERGw6Jl19bTGerAg1z1OIF/0go5/B0dwQXTkvvd/XAlTvPMiFXLCkLq9uKlTsK6
xkiNpWhyuj2KDFPJdPgbZSICuewW184M8PTukhuYiQc3xleqQGdtY3NI3RbCTFup
nJiBqGuj1x942r+Qh2pG+unFbasOF1nNk2lHqGW6mx5so/rcKiycbfyB2ta5i+lA
2I6KgkGsoTvRdd2m1sdgUfTAXsp+IQ7xAb/sWb1rrSC2a7/L3cPYRRzJ3E7fZZ1/
-----END CERTIFICATE-----