Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e20383334.roa
File:                     3130392e3131302e3137312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          oBRte8DHJFWOB12nRnSO9OlQglIH41UCkGO1hO+4wQE=
Subject key identifier:   A3:DD:AE:7A:21:3B:CE:A3:71:93:97:B6:B2:8A:F3:E6:CA:73:5C:7A
Certificate issuer:       /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial:       65116DD240886DFFD8DDF2AB33685C3329AB8E5C
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e20383334.roa
Signing time:             Wed 26 Mar 2025 00:02:02 +0000
ROA not before:           Tue 25 Mar 2025 23:57:02 +0000
ROA not after:            Wed 25 Mar 2026 00:02:02 +0000
asID:                     834
IP address blocks:        109.110.171.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:11:6d:d2:40:88:6d:ff:d8:dd:f2:ab:33:68:5c:33:29:ab:8e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
        Validity
            Not Before: Mar 25 23:57:02 2025 GMT
            Not After : Mar 25 00:02:02 2026 GMT
        Subject: CN=A3DDAE7A213BCEA3719397B6B28AF3E6CA735C7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:be:3b:6b:c3:8e:dc:2e:1c:6f:16:3b:ed:4d:
                    cb:0d:e1:b1:61:e1:78:32:9e:e7:a9:bc:3a:3f:ae:
                    b0:6f:53:dc:34:fc:0f:21:23:f8:ed:2c:d0:9e:76:
                    75:98:b0:58:02:60:9b:f9:39:12:36:04:35:5a:a9:
                    f7:be:bb:3a:ce:bc:d3:e1:01:33:4f:dc:e1:86:d3:
                    a1:66:0e:58:07:25:ea:54:9f:34:93:c1:cd:ad:7e:
                    2c:5c:43:07:94:2c:4a:ce:95:3a:e3:a1:5b:b2:c1:
                    10:f9:71:1c:5c:10:e8:63:da:d7:77:62:9f:ec:65:
                    b5:f2:f8:48:00:c9:12:0b:ca:ed:c0:63:6b:5e:88:
                    1f:e8:37:47:9e:ed:e6:a8:92:e3:31:01:b6:f7:1f:
                    75:48:2d:2d:26:72:5e:71:1e:e5:21:2f:2a:d0:be:
                    e8:ec:cf:2b:1a:69:69:59:f4:05:3c:08:a2:fe:17:
                    a0:05:94:15:36:17:fc:81:7c:30:01:b1:67:3b:03:
                    3c:14:2a:e9:04:d5:99:54:88:83:bf:6b:e0:0c:5b:
                    62:05:25:e6:4b:64:b9:0e:e9:52:12:65:c8:28:a5:
                    b3:cb:a9:60:fd:49:4e:75:dc:e6:9f:4c:b3:99:75:
                    ec:3d:d9:0e:bc:62:c6:35:50:ca:1b:55:60:f0:83:
                    d9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:DD:AE:7A:21:3B:CE:A3:71:93:97:B6:B2:8A:F3:E6:CA:73:5C:7A
            X509v3 Authority Key Identifier:
                keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.110.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:bf:c9:9a:50:b6:2c:19:16:c3:59:be:3a:85:1c:18:2c:08:
         55:95:7b:4d:db:70:1a:04:20:05:de:f6:0a:fb:7f:d2:1a:97:
         b9:9c:ee:2b:66:38:bd:08:b5:3c:d9:3e:4c:fc:3c:cf:e5:3a:
         8d:a1:0a:c9:17:ae:c3:2f:5d:56:d0:8d:0c:32:ab:20:32:66:
         15:11:cc:8b:0a:2a:ed:f9:cd:12:4d:29:61:44:71:cb:4e:56:
         65:b8:90:09:6f:60:f5:6e:e2:0e:bc:11:3b:35:6b:6f:ef:87:
         21:92:d3:fc:57:b0:4e:3c:61:b5:12:1d:69:77:4d:aa:e1:27:
         9b:21:5b:de:d2:6b:3e:de:58:aa:8b:42:0f:6d:42:41:e8:04:
         7e:14:63:57:50:b2:eb:2f:fe:f4:a4:a9:8c:9e:8f:89:0d:6a:
         ea:af:00:72:c2:f0:1f:27:d4:26:19:a6:1c:0e:ac:73:5a:cb:
         de:ad:10:1b:b4:45:42:50:b6:51:41:cd:5a:2e:ad:08:04:1d:
         78:78:2e:68:cd:3b:ce:2a:46:13:cd:6e:03:68:19:24:e9:30:
         8c:17:27:84:0e:9f:57:04:34:84:b9:cc:d0:5e:73:e1:51:bb:
         9f:a5:36:7d:69:b5:6a:f5:3d:0d:b2:16:89:f0:cd:5c:31:73:
         a6:84:97:96
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUZRFt0kCIbf/Y3fKrM2hcMymrjlwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNTAzMjUyMzU3MDJaFw0yNjAzMjUwMDAyMDJaMDMxMTAvBgNV
BAMTKEEzRERBRTdBMjEzQkNFQTM3MTkzOTdCNkIyOEFGM0U2Q0E3MzVDN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0vjtrw47cLhxvFjvtTcsN4bFh
4XgynuepvDo/rrBvU9w0/A8hI/jtLNCednWYsFgCYJv5ORI2BDVaqfe+uzrOvNPh
ATNP3OGG06FmDlgHJepUnzSTwc2tfixcQweULErOlTrjoVuywRD5cRxcEOhj2td3
Yp/sZbXy+EgAyRILyu3AY2teiB/oN0ee7eaokuMxAbb3H3VILS0mcl5xHuUhLyrQ
vujszysaaWlZ9AU8CKL+F6AFlBU2F/yBfDABsWc7AzwUKukE1ZlUiIO/a+AMW2IF
JeZLZLkO6VISZcgopbPLqWD9SU513OafTLOZdew92Q68YsY1UMobVWDwg9nrAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUo92ueiE7zqNxk5e2sorz5spzXHowHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx
MzczMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG1u
qzANBgkqhkiG9w0BAQsFAAOCAQEANb/JmlC2LBkWw1m+OoUcGCwIVZV7TdtwGgQg
Bd72Cvt/0hqXuZzuK2Y4vQi1PNk+TPw8z+U6jaEKyReuwy9dVtCNDDKrIDJmFRHM
iwoq7fnNEk0pYURxy05WZbiQCW9g9W7iDrwROzVrb++HIZLT/FewTjxhtRIdaXdN
quEnmyFb3tJrPt5YqotCD21CQegEfhRjV1Cy6y/+9KSpjJ6PiQ1q6q8AcsLwHyfU
JhmmHA6sc1rL3q0QG7RFQlC2UUHNWi6tCAQdeHguaM07zipGE81uA2gZJOkwjBcn
hA6fVwQ0hLnM0F5z4VG7n6U2fWm1avU9DbIWifDNXDFzpoSXlg==
-----END CERTIFICATE-----