Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/326130613a363034343a626366663a3a2f34382d3634203d3e20313939373633.roa
File:                     326130613a363034343a626366663a3a2f34382d3634203d3e20313939373633.roa (raw, json)
Hash identifier:          7YCpwymksWPwg5ziGzmWS9FgFbgvTAl7aySk1Jpj/x4=
Subject key identifier:   BC:82:32:D3:CA:99:A6:2D:77:AE:82:34:86:73:F9:9F:EA:F1:5E:66
Certificate issuer:       /CN=DA8CB35812CA1FA3A1BD6D3869385072793EC50E
Certificate serial:       16932056ED26FD570F676B9412F03A17A3E6FBEA
Authority key identifier: DA:8C:B3:58:12:CA:1F:A3:A1:BD:6D:38:69:38:50:72:79:3E:C5:0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/326130613a363034343a626366663a3a2f34382d3634203d3e20313939373633.roa
Signing time:             Tue 18 Mar 2025 16:43:18 +0000
ROA not before:           Tue 18 Mar 2025 16:38:18 +0000
ROA not after:            Tue 17 Mar 2026 16:43:18 +0000
asID:                     199763
IP address blocks:        2a0a:6044:bcff::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:93:20:56:ed:26:fd:57:0f:67:6b:94:12:f0:3a:17:a3:e6:fb:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA8CB35812CA1FA3A1BD6D3869385072793EC50E
        Validity
            Not Before: Mar 18 16:38:18 2025 GMT
            Not After : Mar 17 16:43:18 2026 GMT
        Subject: CN=BC8232D3CA99A62D77AE82348673F99FEAF15E66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f0:0e:78:17:db:0d:76:95:85:c6:56:2b:2b:
                    50:de:56:5d:1c:04:9a:90:2e:fa:28:50:3b:6c:fc:
                    97:36:8a:94:e1:bc:18:3f:36:2a:db:c0:85:ba:b5:
                    f9:75:2a:27:e8:ee:b8:93:95:9f:13:20:9a:f0:46:
                    f4:c0:eb:66:63:a3:1e:44:e8:84:d4:a6:d7:05:a9:
                    66:28:64:5e:8d:66:eb:93:55:2f:52:59:36:3a:7d:
                    e4:30:a3:29:b8:9a:f1:9d:8e:89:b6:88:c5:ca:23:
                    0b:2a:50:4e:7f:00:71:04:8e:ad:fc:70:7b:b7:85:
                    61:b9:6d:01:22:a3:2b:64:6e:e8:33:e6:78:e9:f8:
                    55:ed:d1:9c:86:f9:53:11:97:25:5d:f3:a9:8e:39:
                    db:9c:5f:51:a6:4d:3b:d3:60:18:64:68:72:df:cc:
                    13:b5:79:6c:b9:27:46:65:ab:c5:4a:f2:5c:d2:6f:
                    48:2e:c3:18:68:3d:10:90:a4:0b:7b:ee:d1:ed:be:
                    c0:88:bb:bf:b0:23:25:c5:b6:4a:6b:c0:4a:be:d7:
                    cc:16:45:fe:cf:1d:3c:48:5a:5c:6d:40:da:b5:f4:
                    9c:47:56:c0:15:6f:64:c7:ba:67:f5:e7:d0:5c:b5:
                    37:47:fa:9a:71:99:bf:ac:61:08:6f:06:f9:4f:e0:
                    48:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:82:32:D3:CA:99:A6:2D:77:AE:82:34:86:73:F9:9F:EA:F1:5E:66
            X509v3 Authority Key Identifier:
                keyid:DA:8C:B3:58:12:CA:1F:A3:A1:BD:6D:38:69:38:50:72:79:3E:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/326130613a363034343a626366663a3a2f34382d3634203d3e20313939373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:bcff::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:5d:84:1c:d2:0e:49:df:ea:68:ed:fa:ab:79:21:5a:d9:62:
         9b:18:ef:1c:84:a7:5f:93:93:b8:d7:b6:f1:19:13:79:35:30:
         24:d1:6e:c1:f9:b5:cc:c1:84:12:d8:a0:29:60:d8:51:1b:dc:
         a2:4d:bf:8c:bd:36:7c:c8:0c:d9:7d:78:ef:02:03:0a:e0:10:
         be:1a:57:39:2a:42:fd:89:d2:c3:cf:ed:4b:c1:97:13:f6:94:
         a9:ed:b0:07:b2:44:f0:d7:ed:65:70:a1:14:05:76:d2:8c:f3:
         5b:c0:66:1e:12:b5:77:7e:44:a2:65:94:30:2e:c0:96:ff:0e:
         33:2c:ed:13:fd:45:b4:30:ad:d5:37:38:59:b7:c4:e1:23:62:
         ca:f8:2a:9c:58:6e:0c:f4:7d:5f:7d:0c:8e:70:c7:ad:00:76:
         cf:ca:24:d2:13:43:95:d5:b0:47:b1:db:68:8e:89:44:49:43:
         67:0e:c2:d9:b3:fb:fc:67:f6:79:62:1b:06:7b:f7:65:9c:ef:
         b5:26:20:be:dc:22:e6:10:19:86:64:93:7e:27:ef:83:4c:6f:
         3f:75:5f:94:28:78:46:80:4d:d5:8e:0d:61:98:73:91:3e:e6:
         25:cc:39:6d:a7:1d:a8:a2:f1:f4:3e:da:f3:2b:2c:6e:4d:59:
         fc:f3:52:cc
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUFpMgVu0m/VcPZ2uUEvA6F6Pm++owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE4Q0IzNTgxMkNBMUZBM0ExQkQ2RDM4NjkzODUwNzI3
OTNFQzUwRTAeFw0yNTAzMTgxNjM4MThaFw0yNjAzMTcxNjQzMThaMDMxMTAvBgNV
BAMTKEJDODIzMkQzQ0E5OUE2MkQ3N0FFODIzNDg2NzNGOTlGRUFGMTVFNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn8A54F9sNdpWFxlYrK1DeVl0c
BJqQLvooUDts/Jc2ipThvBg/NirbwIW6tfl1Kifo7riTlZ8TIJrwRvTA62Zjox5E
6ITUptcFqWYoZF6NZuuTVS9SWTY6feQwoym4mvGdjom2iMXKIwsqUE5/AHEEjq38
cHu3hWG5bQEioytkbugz5njp+FXt0ZyG+VMRlyVd86mOOducX1GmTTvTYBhkaHLf
zBO1eWy5J0Zlq8VK8lzSb0guwxhoPRCQpAt77tHtvsCIu7+wIyXFtkprwEq+18wW
Rf7PHTxIWlxtQNq19JxHVsAVb2THumf159BctTdH+ppxmb+sYQhvBvlP4EiTAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUvIIy08qZpi13roI0hnP5n+rxXmYwHwYDVR0j
BBgwFoAU2oyzWBLKH6OhvW04aThQcnk+xQ4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmM4ZDE5ZDAtZDIyMS00NDQ4LTgxMWEtMGUxNjExYTQ2
NDQyLzEvREE4Q0IzNTgxMkNBMUZBM0ExQkQ2RDM4NjkzODUwNzI3OTNFQzUwRS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5
ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy9EQThDQjM1ODEyQ0ExRkEzQTFCRDZEMzg2
OTM4NTA3Mjc5M0VDNTBFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9mYzhkMTlkMC1kMjIxLTQ0NDgtODExYS0wZTE2MTFhNDY0NDIvMS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTYyNjM2NjY2M2EzYTJmMzQzODJkMzYzNDIwM2QzZTIwMzEz
OTM5MzczNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRLz/MA0GCSqGSIb3DQEBCwUAA4IBAQCA
XYQc0g5J3+po7fqreSFa2WKbGO8chKdfk5O417bxGRN5NTAk0W7B+bXMwYQS2KAp
YNhRG9yiTb+MvTZ8yAzZfXjvAgMK4BC+Glc5KkL9idLDz+1LwZcT9pSp7bAHskTw
1+1lcKEUBXbSjPNbwGYeErV3fkSiZZQwLsCW/w4zLO0T/UW0MK3VNzhZt8ThI2LK
+CqcWG4M9H1ffQyOcMetAHbPyiTSE0OV1bBHsdtojolESUNnDsLZs/v8Z/Z5YhsG
e/dlnO+1JiC+3CLmEBmGZJN+J++DTG8/dV+UKHhGgE3Vjg1hmHORPuYlzDltpx2o
ovH0PtrzKyxuTVn881LM
-----END CERTIFICATE-----