Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77bb777d-568d-4417-99b7-6c397eed3c63.roa
File:                     77bb777d-568d-4417-99b7-6c397eed3c63.roa (raw, json)
Hash identifier:          WLTbqRU+pbpRTz1ZFRZ4qFQlhwz+Feh/qY13Guw48RA=
Subject key identifier:   55:A0:65:72:D8:8B:A8:93:BE:BF:BF:4E:55:25:49:CA:65:DF:34:62
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       1A03793F4AD28DF28C11D43596A119244BD84629
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77bb777d-568d-4417-99b7-6c397eed3c63.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf4:4880::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:03:79:3f:4a:d2:8d:f2:8c:11:d4:35:96:a1:19:24:4b:d8:46:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=8aa6f5e6f16a804e112272c07291ba977710abd8b7e20211c02c4422ed8f57ae, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:67:48:15:e4:27:73:39:92:33:29:14:db:53:
                    b4:88:c7:51:ce:7f:c9:fd:87:17:4a:66:86:11:3a:
                    f6:2b:e7:e5:aa:27:bd:a7:a8:8d:8b:15:42:d9:6a:
                    fb:83:7a:08:ee:19:41:6f:7f:dc:3b:07:56:6c:20:
                    ce:ac:32:a0:6d:ee:5d:b5:b4:f3:13:af:e3:3e:ca:
                    f9:c0:63:46:cb:20:00:18:39:54:e2:fd:60:b4:3e:
                    84:d6:02:28:cd:80:a0:7a:f2:49:96:4a:45:3d:63:
                    e4:a6:06:3d:4b:c8:28:81:29:25:2e:c5:c8:58:0b:
                    55:b6:04:e6:31:56:99:91:97:bd:58:f9:cb:02:c6:
                    dd:f3:d2:28:32:4e:b6:3d:20:33:c4:00:d0:b0:80:
                    91:cd:91:c3:c4:eb:27:88:e4:73:6b:c2:e3:a5:58:
                    c9:7c:10:72:eb:df:c5:ec:07:de:cc:bd:4c:4d:39:
                    16:bf:2b:f8:48:68:b5:b1:84:db:b5:62:e0:a4:df:
                    5f:75:32:9f:57:09:e0:8d:97:7d:20:ef:32:60:f6:
                    ab:38:e5:7a:9a:33:6e:d8:b8:a8:58:26:27:fb:c3:
                    84:a2:3a:52:37:c9:65:48:cb:eb:a5:c9:f9:94:0a:
                    55:94:6f:eb:7c:be:85:b0:12:9e:d2:93:f4:5e:1e:
                    6f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A0:65:72:D8:8B:A8:93:BE:BF:BF:4E:55:25:49:CA:65:DF:34:62
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77bb777d-568d-4417-99b7-6c397eed3c63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf4:4880::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:ac:3e:0e:8f:40:c8:60:55:d6:59:40:21:ec:af:e1:52:4a:
         3b:aa:0e:bc:7e:8d:70:47:9d:ed:66:fa:3b:99:82:4a:c9:c8:
         d8:67:a5:32:4f:cf:b2:72:5a:73:a0:aa:db:c8:26:c5:92:b6:
         ab:c4:50:10:dd:c7:bc:ae:df:1d:cb:57:8e:5f:6f:05:c0:19:
         90:30:84:79:ba:56:01:76:4f:1e:3c:ac:75:ce:de:03:74:5e:
         32:7a:1e:df:ab:ed:b8:e7:c5:06:11:9e:16:0a:ee:11:8c:33:
         aa:de:57:af:f5:24:55:fb:52:76:29:d0:e2:d0:db:86:60:77:
         47:9a:a2:a6:99:6a:61:42:a4:dc:b9:5e:c9:ee:a8:47:5e:73:
         bb:48:2e:5c:63:fc:f1:49:66:e1:6c:a2:95:ee:56:69:df:83:
         08:10:4a:37:2e:90:93:5d:bc:83:da:72:d1:73:03:c6:20:7a:
         25:e0:31:dd:1a:44:8d:74:ef:01:5c:1b:02:16:64:62:db:50:
         bd:8d:6e:b5:10:15:fb:5a:94:a0:65:d2:40:fb:a5:0f:ec:56:
         56:c2:7d:ba:62:a6:c5:d0:8a:aa:f6:da:0e:1a:6f:7e:ae:6a:
         a2:b3:12:a3:32:f2:db:78:6b:b6:ae:a5:ce:49:23:2e:84:50:
         c5:3d:71:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----