Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/326131343a373538303a6432303a3a2f34342d3438203d3e20313939333130.roa
File:                     326131343a373538303a6432303a3a2f34342d3438203d3e20313939333130.roa (raw, json)
Hash identifier:          MgcoEmS08l4kBvePsItue5HuyPIuQGylETDDY3NTtWk=
Subject key identifier:   A6:34:64:97:5F:0F:C0:16:EE:0F:B4:E3:DC:92:79:4F:70:E4:F7:1D
Certificate issuer:       /CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB
Certificate serial:       6C2A91AA531B53F48893F01738DAF57A92A9E676
Authority key identifier: 13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/326131343a373538303a6432303a3a2f34342d3438203d3e20313939333130.roa
Signing time:             Sun 23 Mar 2025 04:44:21 +0000
ROA not before:           Sun 23 Mar 2025 04:39:21 +0000
ROA not after:            Sun 22 Mar 2026 04:44:21 +0000
asID:                     199310
IP address blocks:        2a14:7580:d20::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:2a:91:aa:53:1b:53:f4:88:93:f0:17:38:da:f5:7a:92:a9:e6:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB
        Validity
            Not Before: Mar 23 04:39:21 2025 GMT
            Not After : Mar 22 04:44:21 2026 GMT
        Subject: CN=A63464975F0FC016EE0FB4E3DC92794F70E4F71D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c6:fd:37:3a:1d:b0:c9:5c:49:65:88:85:d0:
                    85:79:af:5f:0f:c0:89:af:18:78:4c:f7:05:7c:03:
                    99:2a:d2:b2:50:af:ed:d6:48:e2:b9:f2:bf:92:36:
                    7e:c2:f1:24:5c:63:d8:3c:ca:5c:b9:0f:6b:ae:59:
                    9c:8e:75:76:19:a9:7f:1d:76:9a:50:be:43:15:7c:
                    d5:45:40:ae:f2:b1:09:99:c0:24:90:50:c0:05:b4:
                    fb:11:b0:9e:40:12:67:58:0a:5d:94:fd:ed:d9:82:
                    d8:21:c5:ad:9c:4e:b8:af:16:57:fd:bf:67:0f:53:
                    8e:1e:cf:36:45:5b:bb:c9:8b:aa:8e:4c:ea:7e:55:
                    f8:f9:33:e1:54:72:72:6a:da:be:09:0c:35:9c:10:
                    fb:4d:67:d6:70:06:06:ce:65:37:88:fa:50:e4:5a:
                    07:fa:bf:ad:e5:05:35:41:2d:96:a8:92:4e:79:e0:
                    3e:62:56:f2:a2:c6:f4:eb:81:5a:2f:a0:77:7f:6a:
                    4a:81:75:85:10:1e:23:b4:aa:97:a6:5a:94:fd:72:
                    03:f9:eb:66:dd:d0:ec:a1:ca:67:cc:1d:a3:66:c8:
                    a5:cd:26:33:6d:00:4d:04:08:a0:90:b7:13:53:82:
                    c8:44:e1:6d:b7:34:45:4f:e3:41:10:5a:d8:45:d0:
                    80:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:34:64:97:5F:0F:C0:16:EE:0F:B4:E3:DC:92:79:4F:70:E4:F7:1D
            X509v3 Authority Key Identifier:
                keyid:13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/326131343a373538303a6432303a3a2f34342d3438203d3e20313939333130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:d20::/44

    Signature Algorithm: sha256WithRSAEncryption
         66:41:2b:b6:ab:4c:51:88:ea:81:68:a6:70:96:4a:81:75:52:
         1e:00:93:89:8c:06:ce:d5:38:64:c7:d9:35:12:e9:c4:32:81:
         d2:e3:c6:20:b3:fc:07:5d:80:47:df:2e:cd:31:24:94:eb:a0:
         7e:d9:fb:20:d6:53:cf:5e:6c:22:e6:63:f1:8e:e4:33:c8:90:
         fd:7a:10:5b:5d:f3:c2:cb:e2:2b:34:4b:ac:76:97:4a:16:6b:
         52:a5:ca:dd:ed:9c:96:6b:39:b0:88:35:33:8a:80:63:68:58:
         fc:b2:3c:db:3d:c6:dc:e5:7c:7a:12:76:09:a8:88:36:c1:37:
         96:60:69:9b:e7:3e:a2:c3:3b:af:ff:a6:af:ab:72:4c:1b:51:
         7f:9e:ca:85:ca:f6:f8:d1:a3:99:98:fc:c6:5b:89:0c:23:63:
         fa:5b:65:29:06:a9:8b:4c:4a:0f:59:91:66:cd:06:c8:e1:02:
         28:54:bf:71:16:20:e6:a9:e1:92:28:70:59:43:01:56:0c:d5:
         9b:ec:a4:20:9d:0f:55:51:2b:6b:aa:c7:33:0a:bf:a9:d9:bf:
         71:58:a0:b7:ed:2f:6e:ae:c2:14:be:94:4a:b4:92:3f:32:3c:
         b6:6e:60:33:b8:0a:54:11:ae:b8:0d:77:17:42:d0:8f:de:fa:
         43:6b:a2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----