Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a37393a3a2f34382d3438203d3e20323133353332.roa
File:                     326130623a346530373a37393a3a2f34382d3438203d3e20323133353332.roa (raw, json)
Hash identifier:          w283i9le0OcKH6838wgyFOO+Io/wKCrUbk+eUJqkSk4=
Subject key identifier:   F2:AA:74:D4:3E:98:9F:53:7E:F6:BB:17:9E:C7:C3:67:54:7A:CF:FC
Certificate issuer:       /CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
Certificate serial:       0E0D2DB064163EBFA1682D0812030A0683F3AA75
Authority key identifier: D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a37393a3a2f34382d3438203d3e20323133353332.roa
Signing time:             Fri 24 Jan 2025 09:32:43 +0000
ROA not before:           Fri 24 Jan 2025 09:27:43 +0000
ROA not after:            Fri 23 Jan 2026 09:32:43 +0000
asID:                     213532
IP address blocks:        2a0b:4e07:79::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:0d:2d:b0:64:16:3e:bf:a1:68:2d:08:12:03:0a:06:83:f3:aa:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
        Validity
            Not Before: Jan 24 09:27:43 2025 GMT
            Not After : Jan 23 09:32:43 2026 GMT
        Subject: CN=F2AA74D43E989F537EF6BB179EC7C367547ACFFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:86:c1:f6:b8:45:13:62:5c:79:93:5f:39:48:
                    05:cb:08:8d:89:6e:ff:21:a8:37:9b:6c:00:7b:31:
                    84:4b:45:32:6f:83:28:91:52:95:d7:45:76:3e:bd:
                    c3:05:86:ce:2c:09:16:6b:e0:65:89:30:cf:24:1f:
                    76:7c:de:e0:6a:ef:47:66:e8:e3:c2:80:b9:8e:6e:
                    8d:44:31:f8:fc:21:6b:ea:4c:8d:d5:34:09:02:de:
                    9f:14:c5:a6:47:6b:b9:8b:99:d4:4a:1d:22:98:69:
                    b2:a2:c2:91:47:00:81:0c:bc:b2:66:0b:d1:bd:15:
                    ca:31:65:02:ae:0f:25:e6:78:e6:59:ce:47:24:3f:
                    57:96:b1:d9:93:ac:67:1b:26:f8:a5:a2:1c:f6:5f:
                    df:a6:f8:d0:71:63:ea:b9:82:0c:98:4a:49:7c:7a:
                    78:64:ae:19:df:91:10:26:94:56:bd:3e:0d:c9:44:
                    cb:f6:60:08:74:a3:ef:6a:d5:4a:f7:4a:1a:a3:22:
                    9f:cb:3e:91:1e:fa:85:5d:96:1d:e6:34:47:3f:8c:
                    1f:a2:4c:d2:6d:99:4d:b8:18:0b:c3:b0:38:9b:ac:
                    24:bd:76:66:2d:38:4e:c9:72:2f:ca:c6:9c:64:96:
                    5d:60:e3:16:2f:a9:f1:6f:29:d6:4d:42:87:8e:7f:
                    c4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AA:74:D4:3E:98:9F:53:7E:F6:BB:17:9E:C7:C3:67:54:7A:CF:FC
            X509v3 Authority Key Identifier:
                keyid:D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a37393a3a2f34382d3438203d3e20323133353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:79::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:fd:fd:74:b7:68:48:a2:34:ae:e3:5c:c1:60:df:dc:a9:34:
         30:39:b3:34:60:37:fc:da:a5:2e:3c:ee:64:fe:32:42:62:54:
         7f:38:64:3d:31:58:12:db:10:97:92:70:cd:21:43:6e:f6:71:
         6b:29:1c:ef:55:e7:ab:a4:e3:7e:7b:9b:dd:d0:36:f1:58:26:
         e0:c5:73:41:03:c6:4f:4f:34:99:07:16:3b:c7:6d:97:e4:02:
         fc:b3:26:b0:8a:7c:e2:dd:f0:c3:0f:4c:34:cd:7d:01:5e:7f:
         4c:fa:e1:62:7e:61:e9:4c:37:10:11:98:c4:66:ea:ba:17:d0:
         f8:41:8b:c9:6a:04:64:1e:88:14:86:40:62:76:43:8b:aa:a1:
         49:83:6c:f4:b7:24:8c:81:6a:d3:60:58:ba:37:cc:fe:cb:1b:
         73:4f:ea:bd:c1:69:53:6f:9b:cb:92:52:1e:95:2c:3e:06:dd:
         13:2f:4b:5e:d5:a2:f0:8d:f9:8f:17:46:42:c6:96:af:f4:19:
         35:d3:b7:6d:16:84:07:73:12:81:82:72:7f:a4:54:39:8e:17:
         9b:27:cc:cf:3f:71:2a:b9:11:9f:47:01:83:6c:fa:8a:0d:e1:
         cb:19:dd:3d:b2:4b:70:20:02:d4:fe:05:e7:56:69:07:34:d5:
         6e:0d:c2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----