Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0872dcd4-849f-4d27-8196-de0f58f5fd4b/0/326130623a346530343a3a2f34382d3438203d3e20323135373531.roa
File:                     326130623a346530343a3a2f34382d3438203d3e20323135373531.roa (raw, json)
Hash identifier:          /DYvFzT1KJzo7BXF0TBzruAl75l0WkZ2F6IKMg55Sek=
Subject key identifier:   7A:A3:39:7F:FE:E8:FE:AF:E3:7E:3F:70:EC:74:E9:25:7B:AD:83:B5
Certificate issuer:       /CN=29635ae28cc2e6acda15b1fe03c401f79bbe33a3
Certificate serial:       4B205F6639EBC4E2FE45EE63A1C7F5BEACA6A279
Authority key identifier: 29:63:5A:E2:8C:C2:E6:AC:DA:15:B1:FE:03:C4:01:F7:9B:BE:33:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWNa4ozC5qzaFbH-A8QB95u-M6M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0872dcd4-849f-4d27-8196-de0f58f5fd4b/0/326130623a346530343a3a2f34382d3438203d3e20323135373531.roa
Signing time:             Mon 22 Jul 2024 11:04:46 +0000
ROA not before:           Mon 22 Jul 2024 10:59:46 +0000
ROA not after:            Mon 21 Jul 2025 11:04:46 +0000
asID:                     215751
IP address blocks:        2a0b:4e04::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:20:5f:66:39:eb:c4:e2:fe:45:ee:63:a1:c7:f5:be:ac:a6:a2:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29635ae28cc2e6acda15b1fe03c401f79bbe33a3
        Validity
            Not Before: Jul 22 10:59:46 2024 GMT
            Not After : Jul 21 11:04:46 2025 GMT
        Subject: CN=7AA3397FFEE8FEAFE37E3F70EC74E9257BAD83B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2a:b6:eb:e9:27:56:d1:ae:c4:35:cb:85:3b:
                    ab:79:61:d8:dd:a8:92:63:9c:94:69:d9:56:35:34:
                    27:68:7c:b4:c2:59:6a:32:db:79:96:25:53:4e:d8:
                    e7:a2:d4:db:a0:de:c3:71:65:bf:83:28:57:bb:8d:
                    df:45:4d:b1:36:ff:11:22:2c:20:5a:0c:51:be:a5:
                    b3:c2:4d:3d:60:5c:1d:9b:2c:8f:5a:72:04:39:57:
                    fa:d8:f4:54:99:5d:05:47:11:46:8e:6b:21:77:20:
                    ba:96:c8:33:d3:4d:01:b1:5c:d2:0c:18:9e:3c:ed:
                    d2:19:14:b1:ea:51:36:24:8d:ac:f0:d6:c0:9a:6c:
                    85:f9:c0:23:2a:c0:97:e0:70:7e:ae:e8:dc:01:76:
                    4a:f7:0f:52:7c:3c:87:b0:2e:5c:9d:b9:a9:88:d6:
                    aa:f0:0c:bf:c5:2f:52:1e:b0:60:8a:0b:97:fb:f0:
                    fa:fd:61:4a:04:5a:9d:2f:52:21:11:98:03:88:86:
                    63:64:3f:93:66:db:68:95:40:d9:bf:2d:5b:a5:a0:
                    03:ea:05:37:a9:54:eb:34:ad:79:63:9e:66:67:22:
                    51:08:ce:36:58:c5:dd:6b:0d:a2:4b:4c:c0:e3:9a:
                    db:0f:f2:a3:ac:14:fc:67:97:99:a7:b6:fc:8e:f2:
                    15:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A3:39:7F:FE:E8:FE:AF:E3:7E:3F:70:EC:74:E9:25:7B:AD:83:B5
            X509v3 Authority Key Identifier:
                keyid:29:63:5A:E2:8C:C2:E6:AC:DA:15:B1:FE:03:C4:01:F7:9B:BE:33:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0872dcd4-849f-4d27-8196-de0f58f5fd4b/0/29635AE28CC2E6ACDA15B1FE03C401F79BBE33A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWNa4ozC5qzaFbH-A8QB95u-M6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0872dcd4-849f-4d27-8196-de0f58f5fd4b/0/326130623a346530343a3a2f34382d3438203d3e20323135373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e04::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:95:f0:f1:00:f3:33:a6:68:31:cd:5a:e2:94:48:69:5a:50:
         99:45:d4:0c:03:e6:6b:d7:aa:36:e7:0c:db:58:96:de:05:ee:
         f6:0d:b1:4d:30:79:e4:f4:53:f2:89:70:50:b4:51:44:a7:64:
         1b:87:71:c3:d0:9d:89:1a:58:1b:2f:13:d0:1d:a8:4d:ed:e5:
         84:32:c2:23:4b:d8:fe:f7:0f:e7:af:59:d4:db:b9:ac:9f:9d:
         c2:de:a1:3d:48:bb:4f:fd:57:91:84:e3:93:cf:c2:6e:f7:25:
         58:a0:bd:2c:96:b5:f5:a1:42:1d:28:4f:6c:4c:01:3c:85:dc:
         5e:b6:d7:41:06:85:9b:1b:8b:92:fd:42:87:9b:34:cc:07:78:
         f6:79:cc:6c:48:43:09:f6:64:31:85:c9:8a:73:c6:4c:f7:19:
         81:be:f2:1d:20:65:7c:bb:c5:2f:87:b5:94:fb:65:b5:45:de:
         e4:dd:4f:92:b0:de:80:37:6f:bc:46:2d:e0:5c:b5:a4:76:ae:
         49:70:cb:d2:64:0c:5f:42:94:8f:49:2e:fc:93:64:62:42:7d:
         f1:6c:55:09:88:ce:30:90:06:42:3e:c1:2a:b1:69:54:92:de:
         c6:1d:60:8d:da:d0:36:52:06:93:cc:12:2a:5d:62:a0:2f:4d:
         a6:c1:35:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----