Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/326130623a346530373a333830313a3a2f34382d3438203d3e20323134323233.roa
File:                     326130623a346530373a333830313a3a2f34382d3438203d3e20323134323233.roa (raw, json)
Hash identifier:          hHr5ybdhkeNZtIU3BzrJwsxdBeEBPLe3GBPGtM3fm3Q=
Subject key identifier:   C9:8D:0D:FC:5C:4F:5B:6E:2D:C6:87:23:07:F6:FA:42:06:29:60:5F
Certificate issuer:       /CN=E8C9690FAC27EA3A350216F536D777F5F3E6DC0F
Certificate serial:       1B5B36A5BC236378B0DBC528C5045F1BDE2C5363
Authority key identifier: E8:C9:69:0F:AC:27:EA:3A:35:02:16:F5:36:D7:77:F5:F3:E6:DC:0F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/E8C9690FAC27EA3A350216F536D777F5F3E6DC0F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/326130623a346530373a333830313a3a2f34382d3438203d3e20323134323233.roa
Signing time:             Sun 26 Jan 2025 02:30:49 +0000
ROA not before:           Sun 26 Jan 2025 02:25:49 +0000
ROA not after:            Sun 25 Jan 2026 02:30:49 +0000
asID:                     214223
IP address blocks:        2a0b:4e07:3801::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:5b:36:a5:bc:23:63:78:b0:db:c5:28:c5:04:5f:1b:de:2c:53:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8C9690FAC27EA3A350216F536D777F5F3E6DC0F
        Validity
            Not Before: Jan 26 02:25:49 2025 GMT
            Not After : Jan 25 02:30:49 2026 GMT
        Subject: CN=C98D0DFC5C4F5B6E2DC6872307F6FA420629605F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:99:ee:bc:66:b9:d2:2f:da:45:ac:6f:8e:65:
                    f9:cd:3d:31:07:b8:96:87:d8:ef:82:6d:6e:aa:ad:
                    92:31:df:45:42:dd:f2:77:4f:4f:04:27:a3:05:cc:
                    f0:1c:19:c7:c7:37:06:f2:d9:79:c0:3c:e6:f3:b7:
                    1f:c9:c3:c7:4c:08:39:45:8a:98:07:39:1e:ea:f7:
                    c5:82:14:65:9c:55:d4:2a:c7:15:a3:f7:ca:86:76:
                    fd:46:a2:63:cf:9c:b4:77:a7:b6:59:47:f4:88:a9:
                    91:65:23:75:98:98:91:f7:70:b8:1a:47:0f:4d:dc:
                    d9:fc:df:f0:41:af:b7:81:fc:97:57:53:ad:18:44:
                    d6:5c:e6:6f:b1:8f:9b:7a:08:f0:bc:e4:03:1d:a2:
                    2e:0a:a9:e3:4f:b6:f4:eb:3b:bb:4b:b4:9a:15:3d:
                    c5:0d:e5:68:98:df:71:43:c9:7c:1c:70:c0:13:47:
                    b4:e3:2c:2d:7a:fa:c2:7b:98:d2:40:fb:3a:89:2c:
                    b7:9d:01:d3:9b:53:b4:68:b3:bb:63:6a:49:3b:cd:
                    2c:59:e9:44:40:ab:fe:54:d7:81:57:11:74:8c:3b:
                    30:c7:d1:24:53:cf:5e:86:a5:bc:9a:cb:7b:80:86:
                    bc:12:d2:b3:63:9b:18:cc:99:0c:ac:09:ea:71:e3:
                    72:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:8D:0D:FC:5C:4F:5B:6E:2D:C6:87:23:07:F6:FA:42:06:29:60:5F
            X509v3 Authority Key Identifier:
                keyid:E8:C9:69:0F:AC:27:EA:3A:35:02:16:F5:36:D7:77:F5:F3:E6:DC:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/E8C9690FAC27EA3A350216F536D777F5F3E6DC0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/E8C9690FAC27EA3A350216F536D777F5F3E6DC0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/326130623a346530373a333830313a3a2f34382d3438203d3e20323134323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:3801::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:35:69:3a:15:33:88:34:c4:00:51:19:5e:0c:55:ac:54:f0:
         e1:71:e7:f0:f1:c8:5f:de:34:ab:5c:2e:cb:f8:5d:f7:03:ba:
         6d:11:73:8d:08:cf:7b:df:78:b5:28:66:1b:72:84:7d:13:c4:
         79:7a:8a:14:0d:65:f2:36:ed:1a:62:5f:d9:90:2e:08:36:87:
         a2:82:c5:a8:79:79:54:a5:14:5b:fd:78:3a:c8:fe:bc:65:9a:
         d3:f9:7b:08:00:6e:1b:b6:4c:a7:9c:e8:56:da:03:22:d3:2b:
         ab:1a:e4:79:15:4e:1c:d9:af:67:30:0b:90:aa:f9:21:39:ca:
         c3:29:31:a8:73:66:15:73:0f:e5:42:64:4b:70:4a:69:a1:33:
         32:89:1c:75:8e:64:b1:6a:21:3d:b9:91:0f:9e:2d:ed:83:94:
         a0:d2:61:dd:f2:e1:a7:ee:81:3c:d6:67:0c:ef:cb:03:ff:48:
         ff:34:e0:40:d7:67:8f:6e:0d:0c:0b:c7:75:c1:a9:c0:41:cf:
         03:63:d0:f0:c2:6e:ee:dd:b1:c3:05:30:c2:52:d4:92:70:ed:
         73:2e:04:61:28:03:b3:06:fd:78:e1:bb:08:d3:58:83:e8:e3:
         19:ae:1e:b2:21:0d:14:c2:b9:74:c0:df:db:ec:29:57:7b:57:
         2e:11:31:f7
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUG1s2pbwjY3iw28UoxQRfG94sU2MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRThDOTY5MEZBQzI3RUEzQTM1MDIxNkY1MzZENzc3RjVG
M0U2REMwRjAeFw0yNTAxMjYwMjI1NDlaFw0yNjAxMjUwMjMwNDlaMDMxMTAvBgNV
BAMTKEM5OEQwREZDNUM0RjVCNkUyREM2ODcyMzA3RjZGQTQyMDYyOTYwNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQme68ZrnSL9pFrG+OZfnNPTEH
uJaH2O+CbW6qrZIx30VC3fJ3T08EJ6MFzPAcGcfHNwby2XnAPObztx/Jw8dMCDlF
ipgHOR7q98WCFGWcVdQqxxWj98qGdv1GomPPnLR3p7ZZR/SIqZFlI3WYmJH3cLga
Rw9N3Nn83/BBr7eB/JdXU60YRNZc5m+xj5t6CPC85AMdoi4KqeNPtvTrO7tLtJoV
PcUN5WiY33FDyXwccMATR7TjLC16+sJ7mNJA+zqJLLedAdObU7Ros7tjakk7zSxZ
6URAq/5U14FXEXSMOzDH0SRTz16Gpbyay3uAhrwS0rNjmxjMmQysCepx43KvAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUyY0N/FxPW24txocjB/b6QgYpYF8wHwYDVR0j
BBgwFoAU6MlpD6wn6jo1Ahb1Ntd39fPm3A8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmYwZDRiNGUtOWY3NC00ZGY0LWJmNWUtMDkyOTA5NmRi
ZTA0LzEvRThDOTY5MEZBQzI3RUEzQTM1MDIxNkY1MzZENzc3RjVGM0U2REMwRi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wYzcwNDAxYy03ZjQxLTRh
NmItOTQzNC1jYzgwZGNhMDkzZTYvMi9FOEM5NjkwRkFDMjdFQTNBMzUwMjE2RjUz
NkQ3NzdGNUYzRTZEQzBGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8yZjBkNGI0ZS05Zjc0LTRkZjQtYmY1ZS0wOTI5MDk2ZGJlMDQvMS8zMjYxMzA2
MjNhMzQ2NTMwMzczYTMzMzgzMDMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM0MzIzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKgtOBzgBMA0GCSqGSIb3DQEBCwUAA4IBAQCg
NWk6FTOINMQAURleDFWsVPDhcefw8chf3jSrXC7L+F33A7ptEXONCM9733i1KGYb
coR9E8R5eooUDWXyNu0aYl/ZkC4INoeigsWoeXlUpRRb/Xg6yP68ZZrT+XsIAG4b
tkynnOhW2gMi0yurGuR5FU4c2a9nMAuQqvkhOcrDKTGoc2YVcw/lQmRLcEppoTMy
iRx1jmSxaiE9uZEPni3tg5Sg0mHd8uGn7oE81mcM78sD/0j/NOBA12ePbg0MC8d1
wanAQc8DY9Dwwm7u3bHDBTDCUtSScO1zLgRhKAOzBv144bsI01iD6OMZrh6yIQ0U
wrl0wN/b7ClXe1cuETH3
-----END CERTIFICATE-----