Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/326130623a346530373a333830303a3a2f34382d3438203d3e20323134323233.roa
File:                     326130623a346530373a333830303a3a2f34382d3438203d3e20323134323233.roa (raw, json)
Hash identifier:          KS8q4BXeDd91nqrS/doWayGzHd4AoI4O/PmxV9pnouM=
Subject key identifier:   6E:E2:C2:E2:7D:76:39:B0:53:53:71:36:20:27:FE:1F:E7:89:C1:57
Certificate issuer:       /CN=E8C9690FAC27EA3A350216F536D777F5F3E6DC0F
Certificate serial:       78445142E00812C63CA1147B959A9EFA8124B106
Authority key identifier: E8:C9:69:0F:AC:27:EA:3A:35:02:16:F5:36:D7:77:F5:F3:E6:DC:0F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/E8C9690FAC27EA3A350216F536D777F5F3E6DC0F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/326130623a346530373a333830303a3a2f34382d3438203d3e20323134323233.roa
Signing time:             Sat 25 Jan 2025 23:18:51 +0000
ROA not before:           Sat 25 Jan 2025 23:13:51 +0000
ROA not after:            Sat 24 Jan 2026 23:18:51 +0000
asID:                     214223
IP address blocks:        2a0b:4e07:3800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:44:51:42:e0:08:12:c6:3c:a1:14:7b:95:9a:9e:fa:81:24:b1:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8C9690FAC27EA3A350216F536D777F5F3E6DC0F
        Validity
            Not Before: Jan 25 23:13:51 2025 GMT
            Not After : Jan 24 23:18:51 2026 GMT
        Subject: CN=6EE2C2E27D7639B0535371362027FE1FE789C157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c5:98:f7:cb:c5:60:9e:f6:26:4c:04:cd:87:
                    aa:35:65:13:e9:56:ef:bf:4e:50:92:50:c7:31:00:
                    25:99:fa:19:41:ba:38:2d:13:18:f6:f5:6c:18:12:
                    5e:8a:55:45:95:8e:b1:e6:a7:aa:69:ab:01:25:6b:
                    fa:b4:ee:4b:4c:56:bc:bd:87:2c:7c:e8:5d:38:78:
                    e0:a7:ee:22:ee:35:b6:de:88:18:9a:ed:ab:bb:9c:
                    09:c5:f9:ef:3b:c3:71:4e:37:3c:ed:e0:fa:44:8a:
                    f3:44:5c:96:7c:c0:0b:df:aa:05:c9:c3:85:26:51:
                    23:33:9c:07:01:e0:4b:72:8f:15:89:1c:91:6d:5a:
                    e5:af:7e:f0:88:b8:f2:13:d7:5e:18:0c:5c:23:7a:
                    03:80:ac:5a:34:cc:83:9a:8e:de:2b:56:76:11:7c:
                    84:6b:75:80:5b:23:f1:52:e7:a9:92:e5:f6:0d:5b:
                    cc:7e:00:12:c0:01:76:8b:5b:53:68:b2:95:b7:80:
                    6f:26:e9:6f:66:13:9d:62:0c:07:9a:95:cc:91:87:
                    2f:1c:7b:3e:9f:c0:3e:80:35:ad:a2:6a:37:7f:31:
                    2b:b2:fd:02:d2:e5:4a:64:71:89:ad:89:e0:60:bb:
                    0f:a0:33:48:e5:34:7b:f9:4c:77:1f:79:91:48:57:
                    30:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E2:C2:E2:7D:76:39:B0:53:53:71:36:20:27:FE:1F:E7:89:C1:57
            X509v3 Authority Key Identifier:
                keyid:E8:C9:69:0F:AC:27:EA:3A:35:02:16:F5:36:D7:77:F5:F3:E6:DC:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/E8C9690FAC27EA3A350216F536D777F5F3E6DC0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/E8C9690FAC27EA3A350216F536D777F5F3E6DC0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/326130623a346530373a333830303a3a2f34382d3438203d3e20323134323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:3800::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:10:6a:b8:26:64:71:bc:d4:39:7c:d7:2d:67:6f:74:d2:1f:
         f6:a6:2a:20:05:4e:d3:57:fa:85:c0:07:98:65:2e:2b:8b:15:
         05:41:7c:e3:76:62:55:f2:4f:7c:b3:f6:d6:c9:c3:a5:d1:46:
         62:9c:4a:ba:46:42:c9:30:65:e4:48:ca:0e:c2:a8:be:d2:d8:
         36:24:9a:9f:f4:3b:7d:c8:83:11:30:82:b0:21:36:78:91:c9:
         4e:fe:98:be:52:33:8d:63:93:39:49:06:b8:0e:9d:a2:e1:e6:
         73:6e:c6:67:b1:38:28:81:1e:8f:58:96:db:b2:4a:48:63:ff:
         91:33:14:30:ff:3a:3a:ac:3b:da:bf:14:6d:6b:ca:6b:e1:c5:
         c9:28:5c:3d:41:de:a0:e5:a5:b3:9a:4d:39:64:27:f3:fd:1e:
         15:3d:d9:9f:7c:f8:9e:c6:d5:0e:c9:9d:e0:17:41:a5:93:56:
         06:53:04:b9:0e:2d:6d:63:ed:dd:f7:1c:81:46:45:56:aa:98:
         5b:22:cc:6a:5f:67:f9:ea:20:5c:47:9a:e3:8a:4e:95:3b:c3:
         e7:60:77:fc:72:6d:2a:26:9c:86:e4:64:c1:c8:08:19:fa:48:
         4b:d8:7c:b0:fd:bf:64:0a:63:a6:92:67:95:a0:11:b8:4c:25:
         4b:39:79:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----