Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a3630363a3a2f34382d3438203d3e20323134353433.roa
File:                     326130623a346530373a3630363a3a2f34382d3438203d3e20323134353433.roa (raw, json)
Hash identifier:          VhzWiHObB78pJPwsoz9Qw9Lx+9tVx49F/Fzwwf0HUB0=
Subject key identifier:   30:1F:E4:05:12:9B:38:5C:6F:5D:93:F8:AC:6A:23:FF:5C:8C:BD:BB
Certificate issuer:       /CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
Certificate serial:       308962AC326A9118B4F64EB12F89497D40E83763
Authority key identifier: D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a3630363a3a2f34382d3438203d3e20323134353433.roa
Signing time:             Tue 25 Mar 2025 10:57:16 +0000
ROA not before:           Tue 25 Mar 2025 10:52:16 +0000
ROA not after:            Tue 24 Mar 2026 10:57:16 +0000
asID:                     214543
IP address blocks:        2a0b:4e07:606::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:89:62:ac:32:6a:91:18:b4:f6:4e:b1:2f:89:49:7d:40:e8:37:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
        Validity
            Not Before: Mar 25 10:52:16 2025 GMT
            Not After : Mar 24 10:57:16 2026 GMT
        Subject: CN=301FE405129B385C6F5D93F8AC6A23FF5C8CBDBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:81:25:fa:3e:12:15:f3:45:40:4b:fc:a8:77:
                    1e:f7:09:62:6e:e6:3b:60:c0:a5:12:29:7f:d3:84:
                    76:b2:a4:2a:c7:ca:89:98:fb:c2:aa:30:5d:ce:5d:
                    f1:db:a5:f2:7e:f2:d8:40:76:33:91:d2:0e:4f:98:
                    93:b5:67:1f:35:57:31:28:4b:d3:a7:e1:10:82:cb:
                    ea:e8:3a:78:53:d4:dc:90:90:cb:d0:c0:70:88:82:
                    fd:d3:a9:be:cf:35:54:6f:d0:f2:fe:0d:ac:3f:23:
                    3d:44:43:15:cc:13:61:24:8b:42:cb:02:d3:13:c7:
                    28:1b:7b:44:92:1b:1e:29:e2:f9:be:00:e2:24:51:
                    30:c6:10:c9:ef:f3:b2:12:89:6a:9d:b1:95:40:df:
                    ad:09:32:d0:46:35:b6:6e:68:00:20:86:c4:db:d4:
                    85:60:24:aa:4d:7c:ef:5c:e5:95:4b:d4:d8:f6:75:
                    a4:5c:a8:c2:f5:97:d3:4c:4a:94:69:fe:aa:f8:ac:
                    e0:c4:55:13:d2:90:78:6b:26:12:87:30:9c:87:e1:
                    4f:06:f4:8a:cc:f6:90:10:94:7f:3d:6c:6a:c0:5d:
                    db:21:2f:6c:67:9a:79:fd:d7:37:0a:03:b2:d5:05:
                    39:af:88:01:b0:a3:40:25:ad:17:ee:3f:2e:6f:9e:
                    c6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1F:E4:05:12:9B:38:5C:6F:5D:93:F8:AC:6A:23:FF:5C:8C:BD:BB
            X509v3 Authority Key Identifier:
                keyid:D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a3630363a3a2f34382d3438203d3e20323134353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:606::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:27:84:a1:63:6d:c8:0f:27:b6:2d:40:f7:57:31:c3:22:2a:
         e3:28:0b:7f:fa:77:1c:81:dc:c4:0d:29:d2:67:48:f1:22:48:
         cc:71:e1:b1:c4:83:22:90:c3:31:6e:b1:85:39:8f:ac:05:a4:
         9f:17:f3:c2:90:ab:27:46:4b:7a:1a:21:23:dc:a1:dd:a9:e9:
         1f:81:9e:89:0d:2d:a4:f5:0c:ac:2b:7e:80:44:44:01:2b:83:
         a1:5f:0c:54:22:4c:9a:b5:6b:4c:e8:67:a7:28:a7:2a:4a:e6:
         d8:b8:79:f1:81:27:7e:57:6e:c9:33:97:f9:ce:c9:a3:5b:1f:
         f3:cc:82:2e:d0:a6:15:84:28:45:76:ac:8d:fc:a5:3f:c4:24:
         b8:d7:2d:8c:4d:d2:f4:f0:b2:b4:dd:78:8f:98:51:09:89:d7:
         be:a7:a5:69:58:29:8f:f2:16:74:9d:78:c7:b9:76:6f:ba:42:
         53:8c:a0:8b:c1:32:d8:e2:44:94:9f:1e:5d:69:22:c9:e7:4f:
         dc:8d:df:39:8d:70:d4:1d:88:a5:bf:98:2f:bc:7d:ae:15:2a:
         d2:af:b3:03:aa:56:4e:c0:10:c3:fb:d6:ad:9a:23:90:95:45:
         0b:91:28:cc:3b:67:98:75:7f:1c:90:46:73:2f:27:c4:3f:8e:
         35:f7:e5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----