Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0872dcd4-849f-4d27-8196-de0f58f5fd4b/0/326130623a346530343a626565663a3a2f34382d3438203d3e20323135373531.roa
File:                     326130623a346530343a626565663a3a2f34382d3438203d3e20323135373531.roa (raw, json)
Hash identifier:          szfq7DJuzvfDVdskCwTf3JD3dPqzR/UchbmeGqI278I=
Subject key identifier:   4E:01:E0:61:A3:CD:FE:13:5B:48:3F:5C:53:A3:C4:A4:2E:77:C0:87
Certificate issuer:       /CN=29635ae28cc2e6acda15b1fe03c401f79bbe33a3
Certificate serial:       79347CB71AEFDBE63D1B158216CFBDBE7F4E54A7
Authority key identifier: 29:63:5A:E2:8C:C2:E6:AC:DA:15:B1:FE:03:C4:01:F7:9B:BE:33:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWNa4ozC5qzaFbH-A8QB95u-M6M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0872dcd4-849f-4d27-8196-de0f58f5fd4b/0/326130623a346530343a626565663a3a2f34382d3438203d3e20323135373531.roa
Signing time:             Mon 22 Jul 2024 11:04:54 +0000
ROA not before:           Mon 22 Jul 2024 10:59:54 +0000
ROA not after:            Mon 21 Jul 2025 11:04:54 +0000
asID:                     215751
IP address blocks:        2a0b:4e04:beef::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:34:7c:b7:1a:ef:db:e6:3d:1b:15:82:16:cf:bd:be:7f:4e:54:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29635ae28cc2e6acda15b1fe03c401f79bbe33a3
        Validity
            Not Before: Jul 22 10:59:54 2024 GMT
            Not After : Jul 21 11:04:54 2025 GMT
        Subject: CN=4E01E061A3CDFE135B483F5C53A3C4A42E77C087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:86:33:07:29:72:f6:23:a4:05:77:91:63:9e:
                    dc:bf:62:c1:9d:80:55:fe:0d:60:03:48:dc:46:cf:
                    3c:57:1c:6c:3d:1e:72:8b:c4:cb:92:d4:c7:68:2d:
                    4b:d2:5b:73:91:da:b3:73:42:5d:48:3a:8d:64:0c:
                    0d:63:74:ee:8a:06:37:56:b7:3b:9d:a0:3e:af:76:
                    b8:92:3b:56:ff:14:da:91:b1:5a:d1:33:44:e5:45:
                    71:c0:e8:05:aa:9a:55:09:33:a7:1c:eb:9c:09:d3:
                    92:d4:18:4f:f2:30:e4:53:c6:54:38:2d:e1:39:23:
                    0a:41:ef:30:bd:97:b4:b6:7b:d8:86:73:c0:c8:9b:
                    80:22:5c:68:8e:50:d9:dc:d4:88:46:01:e5:16:06:
                    f3:c8:9f:fb:b9:f6:9f:bd:c8:ee:b8:18:b8:97:4c:
                    31:7f:de:19:83:3c:9b:81:ce:fd:5a:80:8b:88:4f:
                    93:eb:cb:30:3c:8a:fe:bc:d4:73:9b:de:21:b1:2e:
                    ec:cd:59:6c:ab:bc:6d:1f:0b:36:9d:a9:15:51:4a:
                    12:30:59:4e:4c:46:b5:98:4a:13:c0:f5:db:1b:35:
                    f1:9d:3f:72:39:c7:a6:f9:ed:5b:1d:ad:56:82:fa:
                    bf:8c:c6:7c:0e:61:26:1b:ff:ce:01:19:75:f8:ef:
                    a0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:01:E0:61:A3:CD:FE:13:5B:48:3F:5C:53:A3:C4:A4:2E:77:C0:87
            X509v3 Authority Key Identifier:
                keyid:29:63:5A:E2:8C:C2:E6:AC:DA:15:B1:FE:03:C4:01:F7:9B:BE:33:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0872dcd4-849f-4d27-8196-de0f58f5fd4b/0/29635AE28CC2E6ACDA15B1FE03C401F79BBE33A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWNa4ozC5qzaFbH-A8QB95u-M6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0872dcd4-849f-4d27-8196-de0f58f5fd4b/0/326130623a346530343a626565663a3a2f34382d3438203d3e20323135373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e04:beef::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:f7:28:b4:90:ce:99:9a:d6:b6:dc:9b:54:f6:51:d8:64:70:
         85:66:e2:ae:35:c7:6f:3b:38:46:06:23:74:f4:23:36:b5:44:
         b9:b0:ba:ae:35:de:72:16:36:8b:d8:86:dd:76:36:96:bf:6b:
         ab:2f:bc:7d:73:53:9b:b4:1f:5a:66:1d:f7:ed:0d:16:3d:92:
         7f:d1:31:71:0c:ef:74:da:e9:e4:90:3d:6f:44:3c:a3:5a:a8:
         06:d6:c5:2a:81:f7:9b:13:bc:a7:d6:42:8c:e2:1c:06:c7:d8:
         3d:90:a7:0f:5b:8d:71:44:0d:75:d3:a6:a0:7f:77:30:a8:71:
         70:b7:2d:8e:f9:aa:16:23:dc:8d:34:65:92:7a:a2:48:ad:88:
         56:ac:27:33:d4:29:e7:b0:a9:1d:54:74:cc:cb:d0:68:ae:0e:
         ba:03:4c:ef:8f:94:8c:92:36:bc:19:cc:b2:d9:46:62:6e:97:
         f4:81:8b:e7:c7:23:56:67:3d:64:3b:8c:8b:75:2a:55:06:bf:
         d9:fe:3e:86:aa:88:47:97:95:85:60:0b:df:1e:78:d7:02:2c:
         a0:6d:2a:83:7e:6e:4b:4e:91:56:e6:d0:0f:61:35:8f:5f:b4:
         4c:59:c9:8a:63:e2:62:1b:96:5c:dd:ef:fa:27:df:8d:54:13:
         c9:04:64:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----