Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/326130623a346530373a336330313a3a2f34382d3438203d3e20323134323233.roa
File:                     326130623a346530373a336330313a3a2f34382d3438203d3e20323134323233.roa (raw, json)
Hash identifier:          PzFPeEwN1IQ2CDT5ic9zRxqj9puaoYe/noYN7wUn3nc=
Subject key identifier:   14:03:55:0B:98:42:2A:F5:0C:52:47:D3:9B:48:7B:94:94:EA:B4:93
Certificate issuer:       /CN=E8C9690FAC27EA3A350216F536D777F5F3E6DC0F
Certificate serial:       7454BD71CC20158E5234991F929B47544E1A079F
Authority key identifier: E8:C9:69:0F:AC:27:EA:3A:35:02:16:F5:36:D7:77:F5:F3:E6:DC:0F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/E8C9690FAC27EA3A350216F536D777F5F3E6DC0F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/326130623a346530373a336330313a3a2f34382d3438203d3e20323134323233.roa
Signing time:             Mon 27 Jan 2025 20:07:12 +0000
ROA not before:           Mon 27 Jan 2025 20:02:12 +0000
ROA not after:            Mon 26 Jan 2026 20:07:12 +0000
asID:                     214223
IP address blocks:        2a0b:4e07:3c01::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:54:bd:71:cc:20:15:8e:52:34:99:1f:92:9b:47:54:4e:1a:07:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8C9690FAC27EA3A350216F536D777F5F3E6DC0F
        Validity
            Not Before: Jan 27 20:02:12 2025 GMT
            Not After : Jan 26 20:07:12 2026 GMT
        Subject: CN=1403550B98422AF50C5247D39B487B9494EAB493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c7:31:61:ac:7b:1b:fd:1e:12:60:5b:33:73:
                    0a:51:3f:e4:02:b2:93:ce:b7:52:10:56:3e:1d:ec:
                    24:65:88:12:da:6d:ad:09:38:c0:08:94:9e:dd:93:
                    2e:3f:64:4d:91:42:ba:74:c5:b2:18:e2:cf:e3:3f:
                    b4:a4:bf:04:49:19:74:e9:3b:eb:37:61:00:70:2b:
                    d3:3f:87:13:0f:16:7e:0e:65:46:a5:1a:ca:99:76:
                    2c:e8:6d:1f:4d:a7:17:e9:b5:61:dd:29:bb:ac:ac:
                    67:f9:ad:60:6c:fc:27:13:fd:e3:8a:ba:b6:08:dd:
                    f7:e0:92:df:21:2c:f0:c5:26:60:11:bd:7d:39:20:
                    5b:5a:83:42:4e:c2:da:51:c8:cd:ab:f9:db:47:0d:
                    11:df:92:46:39:61:03:3d:24:72:6e:a2:0a:09:a8:
                    32:bb:f4:8a:79:8b:49:12:04:f9:ab:13:df:a8:3c:
                    cd:61:d7:7d:f6:f3:a5:5c:b5:cb:64:1e:3b:1e:99:
                    6f:9f:92:e7:8a:cc:58:a6:17:c7:a6:9d:94:f0:6e:
                    35:71:e2:20:09:b3:19:13:98:1c:68:80:e9:39:5b:
                    0c:78:90:e8:a4:82:ff:2a:78:f6:57:5c:1e:95:3e:
                    64:be:5c:63:35:1c:b8:02:5d:3a:b1:3a:f2:c5:2b:
                    de:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:03:55:0B:98:42:2A:F5:0C:52:47:D3:9B:48:7B:94:94:EA:B4:93
            X509v3 Authority Key Identifier:
                keyid:E8:C9:69:0F:AC:27:EA:3A:35:02:16:F5:36:D7:77:F5:F3:E6:DC:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/E8C9690FAC27EA3A350216F536D777F5F3E6DC0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/E8C9690FAC27EA3A350216F536D777F5F3E6DC0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/326130623a346530373a336330313a3a2f34382d3438203d3e20323134323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:3c01::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:57:e9:8f:be:24:45:ec:ed:a8:d2:28:cf:2f:ef:a5:6d:ce:
         43:82:c1:6f:77:0a:c0:46:43:08:34:90:ff:cf:a9:80:36:11:
         7d:ce:3a:38:96:18:8d:13:ab:9d:cd:46:b7:e2:c0:60:cf:f5:
         f3:73:3a:41:0e:7d:48:1a:24:e5:4c:77:3c:fd:6f:19:90:c3:
         32:02:32:5f:23:8f:a0:6a:6f:d4:b3:c1:68:69:f0:8d:e2:77:
         b4:c4:36:27:eb:2c:7a:73:0c:f7:b5:be:18:9a:fb:de:ab:88:
         d8:90:86:b4:2a:09:98:9c:b1:62:f0:0f:e7:e7:71:8e:b5:6d:
         52:74:ac:01:46:84:f7:67:32:d8:27:b5:b1:0d:96:51:31:f1:
         e7:bb:2e:9f:c6:c6:4f:da:3a:69:f4:0a:c7:dd:2a:ff:1a:fb:
         99:fb:b2:73:68:5f:96:d4:e0:3a:32:7b:f7:11:a3:d7:23:31:
         08:00:b0:58:06:d5:11:c6:f0:2d:5f:dc:25:2c:c2:ca:42:88:
         05:ab:5b:76:23:16:fa:14:e3:91:8a:52:ef:42:48:87:50:1f:
         25:33:2c:7b:6b:01:48:45:07:ea:e5:98:e0:24:34:27:55:61:
         11:82:ec:e1:dd:1b:9c:4a:18:6f:1e:39:27:ec:da:6f:5c:f0:
         cd:d2:d7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----