Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a373030303a3a2f33372d3438203d3e20323033303632.roa
File:                     326130623a346530373a373030303a3a2f33372d3438203d3e20323033303632.roa (raw, json)
Hash identifier:          Wl1W2/T1c/0uPuJn+THepZN5k5xZnv6Jr8zsl6Yr+yc=
Subject key identifier:   E2:51:29:9F:23:8A:CE:9D:57:86:A4:D9:F0:DA:25:BB:4F:97:79:D4
Certificate issuer:       /CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
Certificate serial:       1BF23CC6A8590C573C334E90BEB55D4FF654DFF0
Authority key identifier: D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a373030303a3a2f33372d3438203d3e20323033303632.roa
Signing time:             Sun 23 Mar 2025 20:40:26 +0000
ROA not before:           Sun 23 Mar 2025 20:35:26 +0000
ROA not after:            Sun 22 Mar 2026 20:40:26 +0000
asID:                     203062
IP address blocks:        2a0b:4e07:7000::/37 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f2:3c:c6:a8:59:0c:57:3c:33:4e:90:be:b5:5d:4f:f6:54:df:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
        Validity
            Not Before: Mar 23 20:35:26 2025 GMT
            Not After : Mar 22 20:40:26 2026 GMT
        Subject: CN=E251299F238ACE9D5786A4D9F0DA25BB4F9779D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6b:e2:cd:9f:a4:1b:42:34:8a:3e:c8:08:9a:
                    23:b7:bf:e9:ef:86:fc:ef:b8:7d:68:1b:b5:4e:08:
                    4b:ed:49:3c:56:11:76:f9:1d:42:8d:81:dc:00:be:
                    e3:18:ea:d6:09:ad:18:70:6c:fc:c1:7e:5d:1e:71:
                    29:e9:b3:51:04:41:df:71:f0:de:31:72:45:5e:6c:
                    23:70:45:df:a7:8a:9b:9c:56:58:f5:cf:d6:0c:ec:
                    d7:4e:5a:e5:03:06:6b:2f:26:4c:65:2f:e7:20:25:
                    27:3d:d1:a9:84:84:d2:ff:56:d0:a0:77:c9:85:1f:
                    ad:33:6c:10:ee:55:3b:6e:dc:82:45:75:35:1d:38:
                    2b:3b:21:45:0b:24:81:82:af:ac:bb:fa:f0:e4:04:
                    4e:c6:8f:ef:7f:19:ed:89:17:fa:5d:7f:82:97:ba:
                    fe:7a:c5:f9:63:ba:2b:0a:11:07:4a:ce:33:4d:2d:
                    e7:b5:17:b9:c3:ba:8c:f0:6e:db:bd:c0:e5:e4:46:
                    69:10:76:bd:0a:98:cc:fb:97:51:9b:53:7e:ed:ae:
                    b8:93:03:c2:76:70:0b:d2:75:ff:09:81:30:39:6c:
                    f5:0c:10:8e:d8:e0:f1:35:24:d6:7f:bc:81:d6:b0:
                    e4:fe:3b:3a:ca:6c:42:80:a7:48:30:af:47:34:87:
                    1d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:51:29:9F:23:8A:CE:9D:57:86:A4:D9:F0:DA:25:BB:4F:97:79:D4
            X509v3 Authority Key Identifier:
                keyid:D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a373030303a3a2f33372d3438203d3e20323033303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:7000::/37

    Signature Algorithm: sha256WithRSAEncryption
         00:e0:58:bf:99:19:ae:8e:d5:d1:42:1c:48:76:b3:19:0d:e2:
         28:0e:15:f6:4a:43:9e:5b:a7:cf:23:14:d1:cf:06:54:f6:76:
         b2:69:74:b5:dd:31:79:1e:bf:81:89:5e:ec:4d:8d:d3:b0:ee:
         41:b5:9f:87:dd:b2:d9:2e:b2:f4:79:b6:a8:0b:b6:fa:c5:93:
         9a:25:f0:aa:a2:9d:01:c0:a6:89:10:af:84:fb:fa:8e:5d:6c:
         0f:27:59:aa:b7:b1:37:1e:c1:89:9b:76:a8:7a:d7:86:41:a1:
         ab:c7:73:90:06:ec:cd:1b:eb:96:d3:e4:d1:89:71:cd:41:46:
         2f:d4:1a:90:e5:ea:13:fa:76:a6:e1:04:8b:e4:b1:ec:49:72:
         c2:01:b1:dd:bd:d8:99:ee:e5:fd:2b:a4:bb:24:d2:55:43:cb:
         8b:0b:56:98:b7:16:34:fc:cb:cf:38:1c:54:37:a7:f7:2e:b9:
         03:65:61:19:ed:ba:d6:75:e1:2e:9c:38:62:95:55:e5:b9:53:
         d8:35:fd:03:c8:11:50:ce:21:cd:d6:f8:93:aa:46:15:af:1c:
         35:ce:ba:6a:ce:3b:47:5b:6b:80:18:70:90:68:b5:a6:98:eb:
         7a:5a:48:ef:ff:4e:13:f4:b9:15:b9:3c:25:9f:95:6d:48:5c:
         d0:7f:32:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----