Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/326130613a363034343a626336363a3a2f34382d3634203d3e20313939373633.roa
File:                     326130613a363034343a626336363a3a2f34382d3634203d3e20313939373633.roa (raw, json)
Hash identifier:          CPlC+BfZslaPUARPkpEP18cibo2RhLx5pOJz5HUKmqA=
Subject key identifier:   4D:55:3F:A3:B4:C9:83:8F:8A:4A:9E:C0:3E:0C:7E:16:94:69:CF:86
Certificate issuer:       /CN=DA8CB35812CA1FA3A1BD6D3869385072793EC50E
Certificate serial:       58B34FC42E250A694772A187057FF5B2601B095F
Authority key identifier: DA:8C:B3:58:12:CA:1F:A3:A1:BD:6D:38:69:38:50:72:79:3E:C5:0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/326130613a363034343a626336363a3a2f34382d3634203d3e20313939373633.roa
Signing time:             Fri 23 May 2025 20:57:07 +0000
ROA not before:           Fri 23 May 2025 20:52:07 +0000
ROA not after:            Fri 22 May 2026 20:57:07 +0000
asID:                     199763
IP address blocks:        2a0a:6044:bc66::/48 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b3:4f:c4:2e:25:0a:69:47:72:a1:87:05:7f:f5:b2:60:1b:09:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA8CB35812CA1FA3A1BD6D3869385072793EC50E
        Validity
            Not Before: May 23 20:52:07 2025 GMT
            Not After : May 22 20:57:07 2026 GMT
        Subject: CN=4D553FA3B4C9838F8A4A9EC03E0C7E169469CF86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3e:1b:88:5d:05:d7:af:d4:ca:ab:09:7e:11:
                    55:57:1d:9d:08:74:63:26:18:dc:a6:ca:42:22:60:
                    1a:c6:e9:3e:7e:68:87:55:1d:a7:dd:d0:8e:c1:02:
                    be:ef:5b:aa:9a:e4:20:cc:0b:20:eb:2d:71:92:33:
                    b9:44:b6:22:6e:45:78:a3:ad:e5:fc:6e:3b:a4:68:
                    26:8a:11:49:29:6e:56:1e:3e:8a:78:31:1e:54:1b:
                    bd:b5:69:7f:08:7e:ea:09:6d:ef:a8:2a:4e:d4:5e:
                    63:e6:eb:d3:22:82:43:87:3f:68:c0:0b:4f:ae:68:
                    91:bf:63:2d:0c:a4:cb:bf:b1:8a:49:7b:a1:0b:02:
                    b9:f3:1d:dc:ea:5b:b3:ba:44:a7:33:db:18:2d:15:
                    21:00:d8:ab:08:a0:d8:b6:22:6d:c7:a6:80:e6:5a:
                    88:6b:60:7a:b7:b3:83:14:af:ea:87:85:bd:cf:61:
                    98:42:46:80:21:0f:5d:8e:27:b5:f5:a6:2e:44:bb:
                    20:f1:42:19:ac:76:58:b7:30:1d:d3:99:53:e6:37:
                    31:9b:81:a2:f7:99:91:38:06:6e:cd:53:c3:f1:87:
                    35:3f:61:15:4f:0e:bb:c8:06:89:e5:cb:5d:39:f7:
                    6b:63:53:9a:07:74:9d:f0:7a:a3:b6:f5:db:12:46:
                    f8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:55:3F:A3:B4:C9:83:8F:8A:4A:9E:C0:3E:0C:7E:16:94:69:CF:86
            X509v3 Authority Key Identifier:
                keyid:DA:8C:B3:58:12:CA:1F:A3:A1:BD:6D:38:69:38:50:72:79:3E:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/326130613a363034343a626336363a3a2f34382d3634203d3e20313939373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:bc66::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:b3:90:b7:ae:50:40:37:83:40:70:bb:69:81:96:77:22:7a:
         e3:80:24:8f:f1:95:e2:ec:60:c2:7a:23:0b:4d:87:58:1a:93:
         48:45:97:cb:c5:11:ee:5b:a1:9b:27:b0:f6:7e:33:7f:40:79:
         00:00:da:5c:3e:45:35:ef:ba:8f:7c:fd:76:b6:72:1f:e4:42:
         ce:a3:8c:32:30:6e:7d:0a:1f:fd:88:86:bc:97:2e:cb:84:51:
         d0:51:12:dc:3c:fd:45:47:42:22:63:4c:86:7c:5a:34:b9:70:
         bb:cf:84:ec:27:99:bf:2e:98:f2:f3:5b:fb:a5:f0:66:aa:2b:
         a6:08:a7:3b:b8:f8:10:b7:1a:c9:2e:5b:ba:3e:61:35:bc:df:
         63:d1:06:d2:3a:88:69:6d:eb:1f:17:d7:60:e2:95:dd:4d:2e:
         25:eb:b9:46:12:60:3f:78:75:3f:cc:1c:6e:41:a4:cf:51:d2:
         c4:04:1b:7a:81:16:15:86:a5:3a:2d:76:10:08:6c:74:b8:e2:
         cf:23:65:c2:e5:44:72:62:5f:9b:af:5a:7f:88:d6:0b:5e:36:
         29:d1:63:68:5b:b7:71:38:c5:4a:b1:34:77:7b:85:bd:84:99:
         c4:58:87:5a:c9:22:d9:b1:f8:14:a1:08:37:c6:d2:ac:cc:69:
         1f:3e:aa:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----