Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/326130623a346530373a333030303a3a2f34322d3438203d3e20323134323233.roa
File:                     326130623a346530373a333030303a3a2f34322d3438203d3e20323134323233.roa (raw, json)
Hash identifier:          hkr8tr23LWJncuic0vVk/BlVAlSMLnEmV6C4PHUtj98=
Subject key identifier:   06:51:CC:56:5B:16:34:77:9B:91:46:4A:6B:74:BD:56:01:5D:1F:F6
Certificate issuer:       /CN=E8C9690FAC27EA3A350216F536D777F5F3E6DC0F
Certificate serial:       33B6C48F9B8E972C47889B4F8ACE403FE21C5EE7
Authority key identifier: E8:C9:69:0F:AC:27:EA:3A:35:02:16:F5:36:D7:77:F5:F3:E6:DC:0F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/E8C9690FAC27EA3A350216F536D777F5F3E6DC0F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/326130623a346530373a333030303a3a2f34322d3438203d3e20323134323233.roa
Signing time:             Sun 15 Dec 2024 18:02:34 +0000
ROA not before:           Sun 15 Dec 2024 17:57:34 +0000
ROA not after:            Sun 14 Dec 2025 18:02:34 +0000
asID:                     214223
IP address blocks:        2a0b:4e07:3000::/42 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b6:c4:8f:9b:8e:97:2c:47:88:9b:4f:8a:ce:40:3f:e2:1c:5e:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8C9690FAC27EA3A350216F536D777F5F3E6DC0F
        Validity
            Not Before: Dec 15 17:57:34 2024 GMT
            Not After : Dec 14 18:02:34 2025 GMT
        Subject: CN=0651CC565B1634779B91464A6B74BD56015D1FF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:69:50:8d:d1:99:7b:7d:23:f7:e4:f2:ee:35:
                    55:51:a4:92:40:16:60:c0:54:67:66:23:d5:fb:a6:
                    1d:42:1c:f5:9a:b7:86:87:69:59:9c:81:a7:ee:16:
                    27:3d:3b:6c:2b:c1:82:69:0b:8d:54:42:c6:45:87:
                    92:ff:6f:59:83:c6:b6:0e:01:27:38:2c:03:ee:c4:
                    c5:06:f3:88:b3:6a:d5:26:03:b4:99:05:90:fe:3d:
                    cb:88:51:49:cc:d9:a0:c6:00:34:6a:d2:ec:7f:60:
                    a4:75:a3:8b:a6:0b:af:d6:5a:40:65:d4:cc:c3:52:
                    dc:50:10:d0:f0:69:84:c1:41:fc:c0:a5:3b:e0:8e:
                    d8:e4:37:74:e9:ae:e9:fc:07:b0:37:a5:d7:cd:a4:
                    44:10:52:be:61:72:1e:11:f7:c5:52:72:be:61:8f:
                    a3:0e:e5:e0:78:4a:cc:28:16:5b:be:f4:59:29:6c:
                    7f:5e:8b:82:27:8b:51:45:b5:94:18:3f:0d:48:8e:
                    de:a6:3c:c9:3a:2b:3b:56:0c:d0:08:d8:1e:17:65:
                    77:5a:31:34:52:31:22:9f:b1:ce:59:13:fe:54:df:
                    aa:8e:cc:67:51:ad:b1:bf:88:5f:4d:64:49:5f:b6:
                    64:b6:f5:e6:f0:d0:c9:ec:76:e1:7d:bd:a9:5e:43:
                    28:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:51:CC:56:5B:16:34:77:9B:91:46:4A:6B:74:BD:56:01:5D:1F:F6
            X509v3 Authority Key Identifier:
                keyid:E8:C9:69:0F:AC:27:EA:3A:35:02:16:F5:36:D7:77:F5:F3:E6:DC:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/E8C9690FAC27EA3A350216F536D777F5F3E6DC0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/E8C9690FAC27EA3A350216F536D777F5F3E6DC0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/326130623a346530373a333030303a3a2f34322d3438203d3e20323134323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:3000::/42

    Signature Algorithm: sha256WithRSAEncryption
         af:d3:2d:59:8d:2e:74:9e:9e:10:a4:33:80:51:5f:0e:7e:ed:
         ae:11:41:1f:11:f6:c3:7c:a0:80:bc:3d:85:26:f5:ce:3e:c3:
         fa:bb:9a:8b:68:38:ca:e6:c6:34:e0:b7:55:24:78:75:f6:33:
         2c:35:ea:45:69:04:cc:cf:bc:b6:bb:dd:ca:b8:82:32:28:7c:
         0f:85:ae:e2:09:b0:16:83:90:88:8a:6c:49:d7:49:51:b9:8d:
         6f:e3:97:7c:a7:6c:e2:ed:de:b5:1c:bb:93:e0:8f:c5:82:d3:
         1a:f7:12:48:ac:52:13:be:ad:f5:d0:20:ce:c0:11:f4:fa:66:
         47:f6:34:fa:b3:e4:38:d1:29:b7:93:25:ff:3f:b0:a4:e0:4e:
         b7:ac:56:20:4d:d4:ed:b2:9a:91:59:ac:07:21:ac:0d:ba:3b:
         5a:f7:28:0f:d0:2c:c1:f7:df:40:11:f2:ad:9c:a4:df:c1:bf:
         2a:2b:8a:5b:38:54:e1:01:32:a8:3d:a0:2c:24:8f:3f:05:cd:
         81:21:ac:31:4d:65:10:ad:4a:93:c4:2d:70:fc:78:14:35:77:
         c0:4a:a9:a2:39:e4:cb:2c:86:07:a2:19:7e:c5:cb:3a:97:9c:
         92:ad:cd:cf:50:c5:29:10:d3:34:32:2b:f9:77:85:cb:c5:b0:
         1d:c5:b7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----