Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/326130623a346530373a333430313a3a2f34382d3438203d3e20323134323233.roa
File:                     326130623a346530373a333430313a3a2f34382d3438203d3e20323134323233.roa (raw, json)
Hash identifier:          TnGxKSmeMUIYYx5EioYS/D24h+tU4tqJ3CLWSLT6poE=
Subject key identifier:   1B:4C:91:3A:90:6B:9D:7C:05:B9:34:6B:AC:61:0F:BD:60:94:E2:E9
Certificate issuer:       /CN=E8C9690FAC27EA3A350216F536D777F5F3E6DC0F
Certificate serial:       74457C0CDAA58908339638A65DE638E3716C9133
Authority key identifier: E8:C9:69:0F:AC:27:EA:3A:35:02:16:F5:36:D7:77:F5:F3:E6:DC:0F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/E8C9690FAC27EA3A350216F536D777F5F3E6DC0F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/326130623a346530373a333430313a3a2f34382d3438203d3e20323134323233.roa
Signing time:             Sun 26 Jan 2025 02:29:54 +0000
ROA not before:           Sun 26 Jan 2025 02:24:54 +0000
ROA not after:            Sun 25 Jan 2026 02:29:54 +0000
asID:                     214223
IP address blocks:        2a0b:4e07:3401::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:45:7c:0c:da:a5:89:08:33:96:38:a6:5d:e6:38:e3:71:6c:91:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8C9690FAC27EA3A350216F536D777F5F3E6DC0F
        Validity
            Not Before: Jan 26 02:24:54 2025 GMT
            Not After : Jan 25 02:29:54 2026 GMT
        Subject: CN=1B4C913A906B9D7C05B9346BAC610FBD6094E2E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ca:e7:b0:96:64:b8:81:98:19:70:f6:5c:f1:
                    e9:87:d6:23:ee:c8:64:df:0d:7c:e5:c0:b0:36:a1:
                    a7:5a:c1:23:68:28:bd:68:2b:2c:cb:27:ed:ec:26:
                    13:55:fd:f5:69:d7:16:14:42:5d:fe:19:b0:69:96:
                    d3:09:96:02:ac:15:8f:cf:e3:93:90:89:83:cf:e6:
                    eb:3e:13:3a:46:06:c0:cc:f7:36:d0:17:6c:63:fa:
                    2d:c7:88:24:14:2c:85:4d:ab:ba:71:95:cb:fc:90:
                    23:29:69:c9:de:21:50:00:a8:7f:31:5f:eb:df:20:
                    ce:19:cb:ed:f3:0f:c3:a3:e6:4e:35:0d:de:1e:90:
                    6b:ab:22:61:6b:c9:f1:42:2f:4b:83:6c:10:1a:e4:
                    cb:b2:29:bd:cc:cb:60:c8:0c:7e:37:9f:82:da:9d:
                    7a:5f:52:c0:b0:ae:3b:de:8f:5a:48:51:0d:78:8c:
                    ae:e9:c4:b1:97:d7:6f:36:a0:ac:4a:5d:70:b7:25:
                    0d:28:e6:75:38:d1:12:9f:aa:23:9b:86:d6:fd:06:
                    8c:a0:20:c0:45:2c:cc:bb:3a:ed:e7:ff:e5:7e:97:
                    65:30:73:41:30:0d:f2:8c:c3:86:85:ee:7c:1c:fc:
                    22:e3:2a:80:a0:24:e1:4d:1d:5b:5b:16:bb:a8:cd:
                    e6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4C:91:3A:90:6B:9D:7C:05:B9:34:6B:AC:61:0F:BD:60:94:E2:E9
            X509v3 Authority Key Identifier:
                keyid:E8:C9:69:0F:AC:27:EA:3A:35:02:16:F5:36:D7:77:F5:F3:E6:DC:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/E8C9690FAC27EA3A350216F536D777F5F3E6DC0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/E8C9690FAC27EA3A350216F536D777F5F3E6DC0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/326130623a346530373a333430313a3a2f34382d3438203d3e20323134323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:3401::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:03:34:c5:5c:a3:19:a1:44:6d:59:7d:25:62:02:8a:66:7f:
         4b:57:a2:11:85:e1:e6:26:4e:b8:db:8b:ac:a2:84:b1:9f:09:
         ae:75:52:92:32:d6:8f:00:f9:0e:17:35:bf:25:93:ca:58:75:
         2d:f6:d5:b8:7c:e0:b2:f5:93:00:e5:d4:2e:54:cc:ea:72:4a:
         5a:4f:8e:2b:61:b7:7d:a7:08:04:27:43:e5:59:74:03:44:21:
         b7:08:33:23:3c:7d:a1:c1:7e:54:ba:10:fd:f8:4d:b9:ef:82:
         31:2a:67:c4:b6:66:3c:50:c9:5e:12:73:b8:27:92:18:3e:40:
         b0:01:40:51:23:46:71:79:9c:1a:fd:d5:9b:93:48:8a:5e:84:
         73:f3:c6:1c:3b:4b:b3:4e:cd:22:11:6d:a1:82:22:e3:76:31:
         b6:ea:f5:75:83:43:91:8f:0b:15:05:81:3c:6d:08:e6:b0:ba:
         19:3c:58:80:6b:e4:09:74:fe:eb:96:f5:ff:74:d9:0e:48:f2:
         ea:86:93:ac:db:9c:59:c2:14:00:f2:17:99:da:5f:c5:bb:fe:
         6b:40:d9:bf:ec:58:fa:68:6b:cb:60:78:62:c9:e3:35:c1:00:
         33:b2:36:45:54:b3:36:ac:30:c8:f5:76:3d:d0:3c:8b:0b:f2:
         bc:6b:30:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----