Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/3130332e3134392e3136382e302f32332d3233203d3e20323135323438.roa
File:                     3130332e3134392e3136382e302f32332d3233203d3e20323135323438.roa (raw, json)
Hash identifier:          jx6u+d/Skw1ntHsrqxbR9j0i0Ebwk6nG48Ef8PCLKJM=
Subject key identifier:   D8:69:D8:84:4D:2C:62:35:E3:10:6C:1A:5A:CB:3D:18:D0:3A:4F:F2
Certificate issuer:       /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial:       1562FF4C41FB97D6BDFC123497C8E53C673C2F76
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/3130332e3134392e3136382e302f32332d3233203d3e20323135323438.roa
Signing time:             Mon 31 Mar 2025 21:43:05 +0000
ROA not before:           Mon 31 Mar 2025 21:38:05 +0000
ROA not after:            Mon 30 Mar 2026 21:43:05 +0000
asID:                     215248
IP address blocks:        103.149.168.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:62:ff:4c:41:fb:97:d6:bd:fc:12:34:97:c8:e5:3c:67:3c:2f:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
        Validity
            Not Before: Mar 31 21:38:05 2025 GMT
            Not After : Mar 30 21:43:05 2026 GMT
        Subject: CN=D869D8844D2C6235E3106C1A5ACB3D18D03A4FF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:57:66:46:33:f8:aa:59:d4:08:cf:a0:c0:9a:
                    d4:3b:e8:ea:f1:d0:12:44:28:b7:84:e2:df:c9:e2:
                    da:30:17:f2:21:0d:56:f7:8c:1b:4a:fc:65:3c:ae:
                    09:4f:2b:c8:de:17:16:74:cc:6b:60:02:3e:fc:e2:
                    fe:29:33:cc:29:f0:7d:b3:98:08:70:ee:08:5e:28:
                    5b:2e:33:72:0a:94:f1:49:93:b3:d5:d6:28:ab:42:
                    0e:4e:e4:ca:54:e3:ae:72:b5:d9:9d:8b:8d:3f:a5:
                    c0:94:62:83:e2:44:a1:79:af:54:2c:0f:ca:23:83:
                    55:35:53:30:ca:73:68:5c:ff:79:22:6a:86:84:6a:
                    1e:9a:40:df:00:33:25:29:71:17:8e:9f:24:cb:ac:
                    98:46:db:71:4c:10:78:5b:6e:5f:91:03:64:d4:21:
                    f6:af:23:e1:37:4e:0b:f8:bf:01:d3:d8:02:15:09:
                    8f:e2:7e:69:19:53:5e:ac:c5:f8:36:98:67:7b:ce:
                    6a:3b:82:f1:d5:cc:6e:e9:e3:a6:79:d1:eb:a6:7e:
                    e2:7e:f5:d2:46:fb:dd:12:88:3e:c2:a9:84:1c:b7:
                    8f:04:78:ba:1b:c3:1f:3a:4c:6d:e4:56:ff:df:f9:
                    ef:ce:02:18:ed:1a:b0:27:18:40:47:1f:42:9b:ad:
                    e4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:69:D8:84:4D:2C:62:35:E3:10:6C:1A:5A:CB:3D:18:D0:3A:4F:F2
            X509v3 Authority Key Identifier:
                keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/3130332e3134392e3136382e302f32332d3233203d3e20323135323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:3a:d5:46:77:30:20:81:4e:9c:17:50:e3:a0:3c:f3:8d:76:
         df:f1:37:b1:44:49:75:19:c7:86:7b:d9:06:38:67:17:33:53:
         19:eb:8b:2c:33:57:ff:0f:09:4b:02:f2:12:ec:a6:f8:81:1f:
         ae:58:fc:f8:b3:9a:43:3c:9b:2c:72:0a:41:05:02:d9:35:56:
         0c:22:3d:56:19:8e:bf:14:a1:0c:1f:6c:c1:72:ed:dc:9b:64:
         33:f1:c2:bb:9d:cc:6b:e4:9b:1f:a7:0b:0f:05:d7:07:68:28:
         0c:16:ac:f8:a8:90:38:d5:30:f6:32:43:9c:c2:1f:9d:01:fe:
         69:85:38:57:e9:bb:cb:65:ed:8b:95:96:68:c8:87:c5:ca:9d:
         ad:e7:ce:15:fb:cc:6b:3a:00:4a:1e:f4:53:1d:ed:be:19:7e:
         cd:30:11:44:9e:78:82:b4:20:44:9d:20:31:f1:12:09:1c:04:
         72:11:d0:db:2a:59:b5:4a:a7:74:fc:c7:42:01:d0:22:32:2c:
         45:6f:32:44:64:94:e2:e5:e0:bb:ee:94:41:c5:72:9d:a6:0b:
         f1:b1:c1:5b:bc:95:6d:69:79:c7:10:af:69:4c:47:b8:ad:ac:
         45:e7:1c:ec:de:c7:57:16:1c:1b:af:c6:00:39:92:94:44:0d:
         2c:00:02:fd
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUFWL/TEH7l9a9/BI0l8jlPGc8L3YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWNkYzA0YmIyM2VhYTRjZWNjNzkxZGZlMDRiYjAyOGI3
ZTc5N2I2ODAeFw0yNTAzMzEyMTM4MDVaFw0yNjAzMzAyMTQzMDVaMDMxMTAvBgNV
BAMTKEQ4NjlEODg0NEQyQzYyMzVFMzEwNkMxQTVBQ0IzRDE4RDAzQTRGRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6V2ZGM/iqWdQIz6DAmtQ76Orx
0BJEKLeE4t/J4towF/IhDVb3jBtK/GU8rglPK8jeFxZ0zGtgAj784v4pM8wp8H2z
mAhw7gheKFsuM3IKlPFJk7PV1iirQg5O5MpU465ytdmdi40/pcCUYoPiRKF5r1Qs
D8ojg1U1UzDKc2hc/3kiaoaEah6aQN8AMyUpcReOnyTLrJhG23FMEHhbbl+RA2TU
IfavI+E3Tgv4vwHT2AIVCY/ifmkZU16sxfg2mGd7zmo7gvHVzG7p46Z50eumfuJ+
9dJG+90SiD7CqYQct48EeLobwx86TG3kVv/f+e/OAhjtGrAnGEBHH0KbreThAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU2GnYhE0sYjXjEGwaWss9GNA6T/IwHwYDVR0j
BBgwFoAUXNwEuyPqpM7MeR3+BLsCi355e2gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjli
N2M0LzAvNUNEQzA0QkIyM0VBQTRDRUNDNzkxREZFMDRCQjAyOEI3RTc5N0I2OC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hOd0V1eVBxcE03TWVSMy1CTHNDaTM1
NWUyZy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2QxOWRiMjAt
NDY1My00OGQ0LThmYzQtNTgwZDEzNjliN2M0LzAvMzEzMDMzMmUzMTM0MzkyZTMx
MzYzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzEzNTMyMzQzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAWeVqDANBgkqhkiG9w0BAQsFAAOCAQEAQTrVRncwIIFOnBdQ46A884123/E3
sURJdRnHhnvZBjhnFzNTGeuLLDNX/w8JSwLyEuym+IEfrlj8+LOaQzybLHIKQQUC
2TVWDCI9VhmOvxShDB9swXLt3JtkM/HCu53Ma+SbH6cLDwXXB2goDBas+KiQONUw
9jJDnMIfnQH+aYU4V+m7y2Xti5WWaMiHxcqdrefOFfvMazoASh70Ux3tvhl+zTAR
RJ54grQgRJ0gMfESCRwEchHQ2ypZtUqndPzHQgHQIjIsRW8yRGSU4uXgu+6UQcVy
naYL8bHBW7yVbWl5xxCvaUxHuK2sRecc7N7HVxYcG6/GADmSlEQNLAAC/Q==
-----END CERTIFICATE-----