Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/48/326130373a343663303a3a2f32392d3438203d3e2038383838.roa
File:                     326130373a343663303a3a2f32392d3438203d3e2038383838.roa (raw, json)
Hash identifier:          ChI8G4A9Cl4ta4z8Lw0J+kUZPlZo/bHRHUnanOzqga8=
Subject key identifier:   79:1C:8F:3E:7B:E6:50:C1:00:FD:E7:7A:92:F2:68:70:69:4B:71:71
Certificate issuer:       /CN=a115100e0cc80f5b5017bc86187b071fb1cce200
Certificate serial:       7776A70ECEECB723D76CF5B0C3DC550CB3E01562
Authority key identifier: A1:15:10:0E:0C:C8:0F:5B:50:17:BC:86:18:7B:07:1F:B1:CC:E2:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oRUQDgzID1tQF7yGGHsHH7HM4gA.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/48/326130373a343663303a3a2f32392d3438203d3e2038383838.roa
Signing time:             Thu 12 Oct 2023 16:10:33 +0000
ROA not before:           Thu 12 Oct 2023 16:05:33 +0000
ROA not after:            Thu 10 Oct 2024 16:10:33 +0000
asID:                     8888
IP address blocks:        2a07:46c0::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:76:a7:0e:ce:ec:b7:23:d7:6c:f5:b0:c3:dc:55:0c:b3:e0:15:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a115100e0cc80f5b5017bc86187b071fb1cce200
        Validity
            Not Before: Oct 12 16:05:33 2023 GMT
            Not After : Oct 10 16:10:33 2024 GMT
        Subject: CN=791C8F3E7BE650C100FDE77A92F26870694B7171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e3:a2:c6:ae:cf:65:64:f7:27:79:d2:ea:11:
                    d1:af:c9:dc:0e:95:b5:73:af:78:13:ee:88:a5:f5:
                    06:65:f8:4c:d3:55:8a:35:74:b7:f9:ad:a9:81:1e:
                    4a:6a:86:18:1b:73:5f:90:c5:5e:06:a1:c8:b5:92:
                    b6:e6:25:4b:2f:24:22:95:00:ed:6a:58:67:3d:21:
                    aa:4e:0c:01:d5:cd:eb:ff:a7:dc:5a:a3:6a:be:4c:
                    84:26:aa:77:2d:c7:a6:3f:db:1f:f6:d8:13:22:d5:
                    05:44:ff:82:ec:72:71:d0:40:e5:ba:a7:7a:d2:c8:
                    b7:92:d6:c4:3a:fa:7f:9f:63:d6:b6:75:01:02:8c:
                    42:d6:91:bd:66:11:76:6f:63:d4:90:c3:bc:95:d0:
                    3f:36:ff:ef:8f:06:8f:1d:47:6c:fe:38:59:67:a0:
                    a1:ac:5c:fe:36:68:87:ff:cc:26:67:fd:3e:a8:ee:
                    df:6b:4a:57:9a:b3:ce:4d:53:59:86:b0:41:97:d5:
                    79:a3:6a:5a:39:2b:7f:e5:cf:04:16:55:e8:6f:ff:
                    db:38:23:58:a0:57:29:3a:82:35:f3:b8:30:00:50:
                    69:da:34:be:ca:95:9d:f8:26:47:b9:8f:1d:f0:54:
                    03:97:f0:0f:66:9c:71:c1:40:a8:27:c3:ca:d8:32:
                    c4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:1C:8F:3E:7B:E6:50:C1:00:FD:E7:7A:92:F2:68:70:69:4B:71:71
            X509v3 Authority Key Identifier:
                keyid:A1:15:10:0E:0C:C8:0F:5B:50:17:BC:86:18:7B:07:1F:B1:CC:E2:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/48/A115100E0CC80F5B5017BC86187B071FB1CCE200.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRUQDgzID1tQF7yGGHsHH7HM4gA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/48/326130373a343663303a3a2f32392d3438203d3e2038383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:46c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         10:24:e4:fd:26:a2:e5:48:91:72:56:fa:a5:0f:c1:59:2e:e0:
         d7:20:13:1f:a3:3e:c0:b8:bf:39:a4:a0:b1:4a:37:51:8d:ea:
         ff:fe:74:be:2f:dd:80:17:0e:20:5a:00:98:3a:ea:ef:fd:e3:
         1e:e0:6e:bf:5b:e6:62:f3:e4:96:c6:d0:1a:4b:88:e9:83:38:
         a3:c0:1f:b9:7a:47:96:21:b2:12:98:00:f5:82:22:59:8e:eb:
         a1:42:25:0f:9e:9d:78:4e:e0:a8:2f:ac:5c:41:2b:8c:63:00:
         cd:0d:f2:69:d3:b4:7e:a1:dc:6e:42:84:4c:12:a5:97:b4:b3:
         6c:67:2a:a1:8d:c6:d6:a9:5c:ec:18:5d:e8:8a:0e:be:69:3f:
         a8:60:fd:75:02:48:2b:a0:8d:07:a5:51:f1:77:5d:1a:58:f4:
         01:b3:e1:1c:d8:dc:a7:13:07:6a:f9:12:fe:b0:c6:30:4d:81:
         05:18:5a:67:8e:60:e6:f8:08:a1:fd:25:90:f0:01:58:ea:88:
         e0:05:6f:d4:b9:a5:fe:53:d3:c3:35:53:7e:00:43:18:fb:e6:
         c5:e2:8d:d8:7e:e7:b3:5a:0f:97:fa:83:bd:01:df:62:75:c6:
         ed:9e:a6:98:77:f6:fe:f9:c2:db:5f:73:4b:5b:b0:af:84:00:
         82:84:d5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----