Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/2/326130613a363034343a633131303a3a2f34382d3438203d3e20323134323233.roa
File:                     326130613a363034343a633131303a3a2f34382d3438203d3e20323134323233.roa (raw, json)
Hash identifier:          xD5NJiXnL5lwJzvoK9ot41eteZ5CQ+UpAdesDXuBcxg=
Subject key identifier:   03:01:56:79:60:BA:87:BF:3F:CB:7E:0A:D8:24:63:F9:14:8F:B8:55
Certificate issuer:       /CN=4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6
Certificate serial:       24778DDB652AE596D23CC12243FFEB4257296512
Authority key identifier: 4D:E3:64:B9:A3:AF:54:1F:AC:1C:0C:0F:A7:08:FF:7E:8E:80:24:B6
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/2/326130613a363034343a633131303a3a2f34382d3438203d3e20323134323233.roa
Signing time:             Sun 26 Jan 2025 12:24:09 +0000
ROA not before:           Sun 26 Jan 2025 12:19:09 +0000
ROA not after:            Sun 25 Jan 2026 12:24:09 +0000
asID:                     214223
IP address blocks:        2a0a:6044:c110::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:77:8d:db:65:2a:e5:96:d2:3c:c1:22:43:ff:eb:42:57:29:65:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6
        Validity
            Not Before: Jan 26 12:19:09 2025 GMT
            Not After : Jan 25 12:24:09 2026 GMT
        Subject: CN=0301567960BA87BF3FCB7E0AD82463F9148FB855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c2:f6:0d:a0:86:23:c1:e4:4e:74:81:57:72:
                    fc:34:c2:a5:3a:35:ad:7c:79:c1:8a:a0:27:de:d8:
                    50:e6:59:ef:be:1f:69:e8:9d:d8:ca:2e:ec:35:c7:
                    b4:30:56:85:e8:2a:5c:92:fd:f2:50:41:77:8e:8e:
                    85:4e:9a:61:91:c8:bd:59:87:bb:41:ce:d6:1c:7d:
                    9f:30:e5:4b:e8:71:67:7b:b4:e0:38:e0:bb:06:fa:
                    49:f5:42:cb:cf:0b:bb:8c:9e:15:9e:ed:df:18:4d:
                    73:a5:9a:c2:8d:76:2f:f1:d1:7f:4b:c3:72:6d:f5:
                    54:20:ab:7e:54:2d:83:23:12:a3:62:62:7b:f7:85:
                    54:1f:d0:c3:98:50:ed:86:f8:3b:44:ad:f0:e7:95:
                    28:be:c3:d6:38:ec:ef:42:9f:28:a7:27:fc:39:dc:
                    3f:fa:0b:a1:4b:69:07:20:b8:eb:e5:6b:1d:43:b1:
                    a2:c1:39:a6:c6:7f:79:90:20:c0:34:84:76:e8:e5:
                    b0:5b:29:49:3c:24:dc:35:b0:5f:35:8f:72:82:ef:
                    bd:ea:05:9d:b9:1b:6f:97:2d:54:1c:d1:12:6a:ae:
                    57:ce:fb:f1:54:50:27:14:f9:4f:68:ba:5e:9f:bc:
                    b9:c2:b9:87:6a:91:20:c4:b3:0e:4f:7c:41:4d:79:
                    4d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:01:56:79:60:BA:87:BF:3F:CB:7E:0A:D8:24:63:F9:14:8F:B8:55
            X509v3 Authority Key Identifier:
                keyid:4D:E3:64:B9:A3:AF:54:1F:AC:1C:0C:0F:A7:08:FF:7E:8E:80:24:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/2/4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/2/326130613a363034343a633131303a3a2f34382d3438203d3e20323134323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:c110::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:f4:7a:a6:fa:22:22:c1:91:96:10:c8:6d:c3:de:95:fc:31:
         e9:89:f5:2c:67:10:91:32:28:49:8c:53:2b:4c:06:a2:9b:1a:
         9e:1f:24:86:d8:b2:cc:22:04:82:c2:ab:10:91:b0:c2:92:cb:
         f0:81:fa:58:6b:b1:f7:9d:09:f1:ad:9a:e5:d5:67:07:79:26:
         d9:2b:5b:3a:4a:6e:ff:30:03:aa:b2:ae:d4:fa:b2:5c:d3:bd:
         d8:a5:6e:64:32:ef:ed:34:ec:67:c1:d5:35:bf:9c:c4:66:d7:
         47:a5:b2:ec:d4:cb:3a:05:37:8c:54:e8:4e:7d:d8:9b:95:28:
         b5:de:19:d4:75:3a:3c:2e:71:e8:bd:c7:14:6e:3b:36:b8:a7:
         28:b9:64:a6:cf:63:18:9e:33:40:41:44:35:57:cb:ae:60:39:
         19:b8:39:e2:34:9a:4f:d0:a2:fd:fa:00:d9:0c:c8:21:a7:03:
         a4:a5:9e:86:b5:9f:c6:98:80:57:86:6f:6d:16:c9:6c:79:77:
         98:87:3f:32:4a:a0:34:0e:80:a2:ee:84:db:5f:d8:03:b8:7e:
         2a:e5:7a:fb:01:b0:f3:52:96:0f:5e:a1:8a:22:b0:80:62:61:
         40:15:3c:cb:53:9f:b9:22:6a:d0:72:d2:df:34:0a:9b:9e:21:
         11:b5:5d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----