Route Origin Authorization

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_6fe1c4540d0347798f6b381e72aaf43c/0/326131313a663263303a623130303a3a2f34302d3430203d3e20323132333539.roa
File:                     326131313a663263303a623130303a3a2f34302d3430203d3e20323132333539.roa (raw, json)
Hash identifier:          gDgpJJRRm+2Yvzk+rBg6TmnqFGxpltv+RV7kDdXSIyI=
Subject key identifier:   E7:16:3C:D6:60:D1:3F:BB:A8:41:E3:5F:C9:7E:93:15:89:71:EA:2A
Certificate issuer:       /CN=9EB8A31DC6107F41BF3F7A14A13D9F81AF4F0838
Certificate serial:       2CA36BBC9B6F9B731163C8AE97737C7C93D1A0C5
Authority key identifier: 9E:B8:A3:1D:C6:10:7F:41:BF:3F:7A:14:A1:3D:9F:81:AF:4F:08:38
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/9EB8A31DC6107F41BF3F7A14A13D9F81AF4F0838.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_6fe1c4540d0347798f6b381e72aaf43c/0/326131313a663263303a623130303a3a2f34302d3430203d3e20323132333539.roa
Signing time:             Sun 30 Jun 2024 16:32:24 +0000
ROA not before:           Sun 30 Jun 2024 16:27:24 +0000
ROA not after:            Sun 29 Jun 2025 16:32:24 +0000
asID:                     212359
IP address blocks:        2a11:f2c0:b100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a3:6b:bc:9b:6f:9b:73:11:63:c8:ae:97:73:7c:7c:93:d1:a0:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EB8A31DC6107F41BF3F7A14A13D9F81AF4F0838
        Validity
            Not Before: Jun 30 16:27:24 2024 GMT
            Not After : Jun 29 16:32:24 2025 GMT
        Subject: CN=E7163CD660D13FBBA841E35FC97E93158971EA2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6d:7f:e4:ae:ec:17:83:91:3b:3e:f9:aa:2d:
                    01:46:b3:7b:fe:0e:b2:0f:75:92:dc:33:ba:c3:b1:
                    60:16:c6:6c:29:65:4f:06:1b:4a:5c:92:7c:c4:df:
                    2a:fc:68:7c:bb:d0:97:ae:a3:5c:0f:61:bd:e7:1a:
                    7e:3a:2a:8e:72:4c:28:b8:0a:94:0d:73:bf:5d:09:
                    b1:7c:a1:80:02:4d:1d:60:6e:0b:58:46:a3:b7:0a:
                    1e:7b:e8:97:c0:78:66:b3:6d:d9:6d:e1:e7:7a:0e:
                    60:06:58:21:0b:69:ef:7f:07:3a:cb:e1:c1:8a:78:
                    e9:09:94:5a:d9:e6:9a:1a:39:0f:24:4c:67:24:99:
                    b0:ec:f5:1f:0e:1e:ce:e2:af:e4:84:61:4f:73:da:
                    15:3f:43:05:fd:7b:ad:6a:74:4c:40:68:2c:2a:53:
                    8b:5b:ee:27:3f:ed:9b:a0:d4:f2:eb:72:3d:01:9a:
                    8b:b5:5f:50:1a:e8:b7:61:9a:b8:5b:22:05:20:8f:
                    f0:ff:67:37:a0:22:ad:fb:cd:d2:ad:be:17:d5:7d:
                    dc:2f:bc:a1:5c:9f:96:0c:e0:d3:60:cb:07:a0:5f:
                    6f:4c:ea:b2:dd:f8:c4:69:9d:0f:53:d8:10:64:9f:
                    a7:4e:79:e0:82:50:1e:ca:c4:c6:49:09:ad:f2:58:
                    32:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:16:3C:D6:60:D1:3F:BB:A8:41:E3:5F:C9:7E:93:15:89:71:EA:2A
            X509v3 Authority Key Identifier:
                keyid:9E:B8:A3:1D:C6:10:7F:41:BF:3F:7A:14:A1:3D:9F:81:AF:4F:08:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_6fe1c4540d0347798f6b381e72aaf43c/0/9EB8A31DC6107F41BF3F7A14A13D9F81AF4F0838.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/9EB8A31DC6107F41BF3F7A14A13D9F81AF4F0838.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_6fe1c4540d0347798f6b381e72aaf43c/0/326131313a663263303a623130303a3a2f34302d3430203d3e20323132333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:b100::/40

    Signature Algorithm: sha256WithRSAEncryption
         1f:42:97:38:88:eb:6b:02:b2:c1:1f:82:51:51:60:46:96:97:
         8c:db:c9:7f:5b:69:f3:91:13:74:93:82:b3:0f:23:c7:9d:f4:
         64:c8:ce:e2:5c:0c:47:94:58:3d:e7:d1:1a:5e:e5:52:83:03:
         2e:f0:b8:09:ef:76:37:e9:aa:de:f3:57:70:c8:bc:e3:7a:81:
         3a:9c:fb:12:39:da:e9:88:94:c3:1a:29:46:1f:b4:64:e6:72:
         f1:78:1b:ff:1d:09:5f:d6:54:e9:c9:f5:60:71:59:69:6c:f2:
         f5:78:1c:c2:73:06:fa:43:78:5a:8a:71:df:1d:f1:61:ef:f0:
         8d:7c:b5:ff:c6:83:cc:6a:b7:d7:69:54:d4:76:62:38:c5:dc:
         f2:51:ee:b9:5d:7f:be:8f:41:ae:02:91:6a:75:6e:99:82:f2:
         f7:74:98:2e:f8:f6:f3:a8:e2:b5:2f:4e:3c:21:21:00:93:2c:
         83:60:6f:41:04:26:cd:65:22:5a:fb:72:ed:6c:1a:c9:b7:5e:
         a8:a8:1e:01:a5:a5:b0:76:73:94:3e:1c:08:ff:a9:a6:05:fa:
         fd:e9:59:f7:26:37:73:9f:3c:9e:3a:40:cd:d1:50:b8:4a:73:
         4c:2e:27:9e:e4:96:a6:f6:e1:bc:89:81:0d:08:9a:67:ea:29:
         c7:82:53:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----