Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0872dcd4-849f-4d27-8196-de0f58f5fd4b/0/326130623a346530343a333333333a3a2f34382d3438203d3e20323135373531.roa
File:                     326130623a346530343a333333333a3a2f34382d3438203d3e20323135373531.roa (raw, json)
Hash identifier:          ic5Kf6Y8EovrnwAk1sIyDydmw6XPagHpuBi5SFKaP8k=
Subject key identifier:   24:0A:5C:F4:15:74:BD:B5:31:89:7C:01:DF:4F:C9:9F:EE:FA:CE:8D
Certificate issuer:       /CN=29635ae28cc2e6acda15b1fe03c401f79bbe33a3
Certificate serial:       183C4CAA0137D8DD60F6613B4BB5650167B8AA77
Authority key identifier: 29:63:5A:E2:8C:C2:E6:AC:DA:15:B1:FE:03:C4:01:F7:9B:BE:33:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWNa4ozC5qzaFbH-A8QB95u-M6M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0872dcd4-849f-4d27-8196-de0f58f5fd4b/0/326130623a346530343a333333333a3a2f34382d3438203d3e20323135373531.roa
Signing time:             Mon 22 Jul 2024 11:04:51 +0000
ROA not before:           Mon 22 Jul 2024 10:59:51 +0000
ROA not after:            Mon 21 Jul 2025 11:04:51 +0000
asID:                     215751
IP address blocks:        2a0b:4e04:3333::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:3c:4c:aa:01:37:d8:dd:60:f6:61:3b:4b:b5:65:01:67:b8:aa:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29635ae28cc2e6acda15b1fe03c401f79bbe33a3
        Validity
            Not Before: Jul 22 10:59:51 2024 GMT
            Not After : Jul 21 11:04:51 2025 GMT
        Subject: CN=240A5CF41574BDB531897C01DF4FC99FEEFACE8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:90:e8:d5:8f:d2:75:76:0a:46:d7:89:b1:b4:
                    c7:00:91:dc:55:f3:12:d3:c5:0a:ac:7d:b6:98:e3:
                    e7:3f:d0:00:b8:0a:22:5a:64:76:fa:1d:48:b6:51:
                    5a:91:e9:8e:0c:e7:0f:8c:26:cf:2d:b2:c5:9a:69:
                    45:5a:2c:91:dd:34:e6:92:da:cb:26:a8:d8:1a:21:
                    2a:95:b3:0e:87:55:fd:17:8a:00:fb:27:79:81:e4:
                    f7:91:35:4c:7e:85:01:3c:8b:58:45:e1:84:b4:51:
                    e4:89:39:b2:72:6a:7a:01:9d:ef:d3:bb:03:e1:28:
                    6a:ad:e7:b7:b6:2a:b9:43:6c:23:23:3d:08:cf:b7:
                    94:99:69:4b:68:70:97:5e:23:e4:d8:ed:48:d3:08:
                    39:c2:74:dc:d3:1b:cf:a4:85:28:98:1d:8c:8d:fc:
                    e6:86:7b:d0:a9:70:8d:f7:ae:cd:09:5c:62:1b:c1:
                    13:96:97:f5:e4:b9:b1:b6:0d:4c:fb:37:03:56:f8:
                    30:86:bf:aa:d7:a3:c9:fa:b3:b0:f1:52:0f:3e:f2:
                    22:9a:7c:41:30:f0:01:0c:b1:1a:25:23:18:f5:df:
                    f9:e2:61:d5:04:fe:00:90:d0:6f:81:0d:85:af:61:
                    d1:b4:0b:b8:c5:47:56:04:5a:b7:28:50:7d:d6:fd:
                    7c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0A:5C:F4:15:74:BD:B5:31:89:7C:01:DF:4F:C9:9F:EE:FA:CE:8D
            X509v3 Authority Key Identifier:
                keyid:29:63:5A:E2:8C:C2:E6:AC:DA:15:B1:FE:03:C4:01:F7:9B:BE:33:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0872dcd4-849f-4d27-8196-de0f58f5fd4b/0/29635AE28CC2E6ACDA15B1FE03C401F79BBE33A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWNa4ozC5qzaFbH-A8QB95u-M6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0872dcd4-849f-4d27-8196-de0f58f5fd4b/0/326130623a346530343a333333333a3a2f34382d3438203d3e20323135373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e04:3333::/48

    Signature Algorithm: sha256WithRSAEncryption
         bb:2a:12:dc:af:07:ba:0f:6f:6e:8e:d5:5f:a8:88:65:bf:25:
         30:93:95:2e:2f:44:93:6a:23:f6:ab:45:63:97:98:8f:b9:2d:
         74:33:f4:2b:69:07:d4:d4:c0:ca:46:94:5c:ef:3b:b2:02:e9:
         0c:f7:8a:56:4c:4b:a7:03:f5:dc:05:05:85:c1:43:43:7b:c4:
         7a:36:c8:5c:55:78:72:a9:49:99:f4:5b:1c:7c:5c:a4:75:b9:
         24:46:49:fc:b5:fa:08:7e:08:22:90:53:f5:68:46:16:d9:d2:
         58:73:0f:48:18:21:2b:36:03:26:4c:ca:02:49:38:8e:44:e3:
         04:10:d8:da:d3:30:e9:aa:90:70:83:67:05:ca:10:6a:14:ea:
         fc:cd:70:b3:fb:a0:94:eb:74:7b:5a:37:04:2f:a3:fc:9b:ad:
         82:f4:42:7f:93:fa:97:82:24:0b:fc:fc:f4:e9:d3:15:39:f3:
         33:48:0c:ae:91:35:19:3a:23:23:7f:9b:55:ee:e2:34:60:c0:
         89:2a:c7:95:f4:2d:83:53:59:8a:52:fb:96:14:db:e4:24:01:
         03:06:3f:33:63:e3:f1:62:71:21:1f:17:07:ac:ef:b9:16:f3:
         32:cf:a0:4b:00:f5:ad:4e:13:5b:3d:1d:b6:32:5d:c0:d2:88:
         0e:4c:13:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----