Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/2/326130613a363034343a616131303a3a2f34382d3438203d3e20323134323233.roa
File:                     326130613a363034343a616131303a3a2f34382d3438203d3e20323134323233.roa (raw, json)
Hash identifier:          Uf7sibhXbuGSKkyjvqGUtuCPbvF86SYm/FoSXvpK1hY=
Subject key identifier:   48:2E:ED:7C:37:6E:92:FD:27:51:F5:70:ED:41:5A:76:B8:7E:FC:5C
Certificate issuer:       /CN=4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6
Certificate serial:       3D06FDE386F1564C0002766C8B7B4D407D423973
Authority key identifier: 4D:E3:64:B9:A3:AF:54:1F:AC:1C:0C:0F:A7:08:FF:7E:8E:80:24:B6
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/2/326130613a363034343a616131303a3a2f34382d3438203d3e20323134323233.roa
Signing time:             Sun 26 Jan 2025 02:50:24 +0000
ROA not before:           Sun 26 Jan 2025 02:45:24 +0000
ROA not after:            Sun 25 Jan 2026 02:50:24 +0000
asID:                     214223
IP address blocks:        2a0a:6044:aa10::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:06:fd:e3:86:f1:56:4c:00:02:76:6c:8b:7b:4d:40:7d:42:39:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6
        Validity
            Not Before: Jan 26 02:45:24 2025 GMT
            Not After : Jan 25 02:50:24 2026 GMT
        Subject: CN=482EED7C376E92FD2751F570ED415A76B87EFC5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9f:cc:2d:70:c0:09:20:cc:48:73:70:0a:b6:
                    b6:ad:8a:4d:ad:8d:94:09:c9:a4:96:0f:ee:43:1b:
                    3a:ff:8d:65:51:83:09:14:c8:e8:c8:84:ea:ef:85:
                    e1:30:35:fa:49:27:a8:d2:ab:3a:db:ad:87:dd:d3:
                    ce:3d:14:4a:2c:94:8e:14:31:43:d5:10:9a:9a:61:
                    48:f8:34:f7:59:8d:94:40:74:a7:57:6b:1d:6f:c7:
                    cc:f7:2e:61:38:1d:97:54:f4:fb:2d:e0:0f:61:03:
                    0a:85:46:1b:db:e7:3c:76:93:58:c1:ea:8c:f9:01:
                    5e:da:c7:f8:6c:e0:65:4e:c1:89:90:07:35:82:0d:
                    24:81:dc:37:3a:0e:07:82:8c:7a:0e:f9:c9:b0:e3:
                    1b:69:bf:b9:36:b2:80:ba:ef:84:6f:5a:62:ff:13:
                    17:31:15:04:fa:da:7a:99:ed:7e:91:c5:70:6b:78:
                    61:92:fc:f1:81:d0:9d:f8:43:b2:0f:a2:04:d9:d7:
                    c0:0c:13:6c:8f:12:db:5f:a0:f5:64:96:65:8a:3e:
                    91:44:b3:3b:1a:e2:24:7e:23:d1:34:af:c4:b7:ca:
                    8f:53:da:c8:c7:3d:8e:ae:9d:9e:98:bc:9a:d3:eb:
                    3e:04:b6:e3:fa:1d:df:a3:6a:64:d8:a7:15:06:c3:
                    e5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:2E:ED:7C:37:6E:92:FD:27:51:F5:70:ED:41:5A:76:B8:7E:FC:5C
            X509v3 Authority Key Identifier:
                keyid:4D:E3:64:B9:A3:AF:54:1F:AC:1C:0C:0F:A7:08:FF:7E:8E:80:24:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/2/4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/2/326130613a363034343a616131303a3a2f34382d3438203d3e20323134323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:aa10::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:2e:9b:6c:f6:fc:a1:b8:a7:ac:47:d6:5b:5f:f8:13:44:0a:
         14:58:c2:0a:c9:bd:ba:4d:fb:5e:ba:93:ce:f4:dd:41:aa:e2:
         dc:c4:2e:02:c4:b6:be:cd:3d:fa:74:09:73:30:40:da:ea:14:
         3c:23:d6:09:73:f7:fe:06:bf:5e:a3:57:10:31:5b:79:e1:8e:
         d3:1d:3a:8d:97:30:b3:8e:cf:ef:a4:d4:ee:28:38:26:4a:53:
         d3:2e:a4:3f:66:79:3b:a8:d2:72:4e:1d:05:8b:38:1e:5f:4b:
         9c:2d:23:31:69:4e:be:b5:75:00:ca:dd:0b:68:01:e9:2b:8a:
         f4:4d:98:87:16:c6:2a:bb:58:b4:76:37:8a:14:2c:bf:c1:20:
         94:39:1a:a7:74:39:46:b0:ca:54:5e:12:e6:eb:b8:76:35:af:
         d7:ab:59:29:b9:ab:b4:79:82:2d:6e:b0:5c:40:0b:d3:b9:34:
         38:5c:55:04:6c:0c:55:43:6a:38:08:2f:c5:03:27:83:6f:ff:
         6b:fe:34:bb:e5:8a:92:e2:bb:93:f7:0e:38:ec:5d:e3:3f:15:
         51:14:6f:3f:bd:be:23:b8:04:93:f5:c6:b2:d3:9b:b2:30:cb:
         2a:c2:67:08:a4:83:a0:35:3c:3e:ec:f7:c4:a6:27:2d:14:0e:
         9f:e0:f1:0b
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUPQb944bxVkwAAnZsi3tNQH1COXMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERFMzY0QjlBM0FGNTQxRkFDMUMwQzBGQTcwOEZGN0U4
RTgwMjRCNjAeFw0yNTAxMjYwMjQ1MjRaFw0yNjAxMjUwMjUwMjRaMDMxMTAvBgNV
BAMTKDQ4MkVFRDdDMzc2RTkyRkQyNzUxRjU3MEVENDE1QTc2Qjg3RUZDNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVn8wtcMAJIMxIc3AKtratik2t
jZQJyaSWD+5DGzr/jWVRgwkUyOjIhOrvheEwNfpJJ6jSqzrbrYfd0849FEoslI4U
MUPVEJqaYUj4NPdZjZRAdKdXax1vx8z3LmE4HZdU9Pst4A9hAwqFRhvb5zx2k1jB
6oz5AV7ax/hs4GVOwYmQBzWCDSSB3Dc6DgeCjHoO+cmw4xtpv7k2soC674RvWmL/
ExcxFQT62nqZ7X6RxXBreGGS/PGB0J34Q7IPogTZ18AME2yPEttfoPVklmWKPpFE
szsa4iR+I9E0r8S3yo9T2sjHPY6unZ6YvJrT6z4EtuP6Hd+jamTYpxUGw+W1AgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUSC7tfDdukv0nUfVw7UFadrh+/FwwHwYDVR0j
BBgwFoAUTeNkuaOvVB+sHAwPpwj/fo6AJLYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmYwZDRiNGUtOWY3NC00ZGY0LWJmNWUtMDkyOTA5NmRi
ZTA0LzIvNERFMzY0QjlBM0FGNTQxRkFDMUMwQzBGQTcwOEZGN0U4RTgwMjRCNi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC80REUzNjRCOUEzQUY1NDFGQUMxQzBDMEZB
NzA4RkY3RThFODAyNEI2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8yZjBkNGI0ZS05Zjc0LTRkZjQtYmY1ZS0wOTI5MDk2ZGJlMDQvMi8zMjYxMzA2
MTNhMzYzMDM0MzQzYTYxNjEzMTMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM0MzIzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRKoQMA0GCSqGSIb3DQEBCwUAA4IBAQCT
Lpts9vyhuKesR9ZbX/gTRAoUWMIKyb26TfteupPO9N1BquLcxC4CxLa+zT36dAlz
MEDa6hQ8I9YJc/f+Br9eo1cQMVt54Y7THTqNlzCzjs/vpNTuKDgmSlPTLqQ/Znk7
qNJyTh0FizgeX0ucLSMxaU6+tXUAyt0LaAHpK4r0TZiHFsYqu1i0djeKFCy/wSCU
ORqndDlGsMpUXhLm67h2Na/Xq1kpuau0eYItbrBcQAvTuTQ4XFUEbAxVQ2o4CC/F
AyeDb/9r/jS75YqS4ruT9w447F3jPxVRFG8/vb4juAST9cay05uyMMsqwmcIpIOg
NTw+7PfEpictFA6f4PEL
-----END CERTIFICATE-----