Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a62613a3a2f34372d3438203d3e20323132343730.roa
File:                     326130623a346530373a62613a3a2f34372d3438203d3e20323132343730.roa (raw, json)
Hash identifier:          iRVvO7zFQ44joE8+yzA/oanu8SQTX7qTizwXiuFw7WY=
Subject key identifier:   24:7B:8F:A0:3B:8F:B3:8A:C1:D9:44:1C:34:D5:82:04:8D:87:1E:06
Certificate issuer:       /CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
Certificate serial:       3462351C38397C870CCA1D0C9635F32D250BBD50
Authority key identifier: D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a62613a3a2f34372d3438203d3e20323132343730.roa
Signing time:             Mon 31 Mar 2025 13:08:11 +0000
ROA not before:           Mon 31 Mar 2025 13:03:11 +0000
ROA not after:            Mon 30 Mar 2026 13:08:11 +0000
asID:                     212470
IP address blocks:        2a0b:4e07:ba::/47 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:62:35:1c:38:39:7c:87:0c:ca:1d:0c:96:35:f3:2d:25:0b:bd:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
        Validity
            Not Before: Mar 31 13:03:11 2025 GMT
            Not After : Mar 30 13:08:11 2026 GMT
        Subject: CN=247B8FA03B8FB38AC1D9441C34D582048D871E06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e1:e0:46:49:87:1e:63:a3:fc:8a:98:f0:5e:
                    eb:95:8c:1a:c0:37:de:fd:20:94:5d:4b:cd:72:f5:
                    32:06:63:64:8c:77:f1:d0:1d:a3:e6:9e:58:4f:0d:
                    35:f0:fe:99:52:90:22:58:6f:45:8a:51:e2:2a:3e:
                    07:99:28:37:e8:de:03:6b:7c:bd:74:26:17:b1:34:
                    82:9c:dd:7f:0e:51:8d:13:91:d1:39:94:c4:dd:0f:
                    13:4a:2b:8a:20:78:8b:39:95:c9:cf:b1:db:0a:5b:
                    e2:69:c1:3e:e4:f5:48:96:f4:d3:68:6c:a2:48:3e:
                    b1:55:76:cc:8a:d8:8e:33:ca:ac:74:9d:c5:32:b5:
                    5a:80:79:50:89:49:b0:c3:b0:e8:f1:f4:df:e5:92:
                    43:a8:50:f5:bd:50:38:3f:de:32:17:b9:4d:ab:06:
                    ca:2a:a9:aa:19:21:fb:2d:ee:72:16:1a:4f:8e:62:
                    fe:d1:25:d4:05:05:15:e8:e3:f1:a1:c6:33:55:42:
                    30:da:56:cd:03:a3:da:c7:09:ec:28:b7:68:45:c8:
                    db:ab:bf:a9:da:c1:12:e8:59:67:06:68:d0:af:ee:
                    00:f9:fa:32:d6:f4:5f:53:2c:95:bf:8b:a5:a5:7b:
                    10:44:7c:eb:be:1d:58:13:00:76:af:48:e1:38:fe:
                    28:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:7B:8F:A0:3B:8F:B3:8A:C1:D9:44:1C:34:D5:82:04:8D:87:1E:06
            X509v3 Authority Key Identifier:
                keyid:D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a62613a3a2f34372d3438203d3e20323132343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:ba::/47

    Signature Algorithm: sha256WithRSAEncryption
         99:d6:08:59:b3:4e:1e:53:10:c3:17:5c:c4:8d:5e:72:b6:21:
         60:c1:7a:10:27:5d:d8:9c:c0:b2:01:48:df:31:1d:23:1e:bf:
         c3:36:01:e8:35:3e:9f:6b:b3:a7:bb:fd:d5:04:9e:65:61:c9:
         1d:c4:80:60:d9:94:1b:da:c8:ec:b8:0a:ba:f7:9d:70:d2:e7:
         aa:12:54:ed:e6:c3:f3:0b:07:40:f8:03:b9:e6:ba:19:6a:e9:
         27:65:21:ac:97:e2:6e:44:7a:69:ef:27:74:6c:5e:4f:57:c2:
         a4:28:82:f5:83:d1:a5:62:5b:a0:44:a8:30:2f:a3:14:c3:85:
         47:19:05:d7:ac:4b:95:6f:b5:08:c9:12:6a:fc:eb:e9:53:9a:
         76:ab:e4:0b:c3:cb:7b:2b:53:74:1a:a6:9e:57:85:df:44:fd:
         58:c6:c2:8b:da:c9:32:4e:68:7c:b1:cc:a2:16:59:57:3b:fa:
         9e:2e:e7:4f:31:d2:f1:df:b3:a5:1c:08:d4:6b:a1:44:ab:9d:
         77:7b:22:40:0e:23:51:7b:49:ef:b3:b8:f9:a9:86:cf:9c:45:
         91:18:40:05:fa:e1:fc:ba:1a:ca:8d:91:d0:b0:04:45:40:d1:
         0c:46:f6:fe:88:d5:c7:fa:e9:1f:5e:dc:b5:cd:f7:87:25:c1:
         37:b5:64:fb
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgIUNGI1HDg5fIcMyh0MljXzLSULvVAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDE4MjA3NDY2QUIwQTdEN0QxRUYzQzdDRDAyRTgwQkVE
NTgzNDBCQzAeFw0yNTAzMzExMzAzMTFaFw0yNjAzMzAxMzA4MTFaMDMxMTAvBgNV
BAMTKDI0N0I4RkEwM0I4RkIzOEFDMUQ5NDQxQzM0RDU4MjA0OEQ4NzFFMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT4eBGSYceY6P8ipjwXuuVjBrA
N979IJRdS81y9TIGY2SMd/HQHaPmnlhPDTXw/plSkCJYb0WKUeIqPgeZKDfo3gNr
fL10JhexNIKc3X8OUY0TkdE5lMTdDxNKK4ogeIs5lcnPsdsKW+JpwT7k9UiW9NNo
bKJIPrFVdsyK2I4zyqx0ncUytVqAeVCJSbDDsOjx9N/lkkOoUPW9UDg/3jIXuU2r
BsoqqaoZIfst7nIWGk+OYv7RJdQFBRXo4/GhxjNVQjDaVs0Do9rHCewot2hFyNur
v6nawRLoWWcGaNCv7gD5+jLW9F9TLJW/i6WlexBEfOu+HVgTAHavSOE4/ij1AgMB
AAGjggKBMIICfTAdBgNVHQ4EFgQUJHuPoDuPs4rB2UQcNNWCBI2HHgYwHwYDVR0j
BBgwFoAU0YIHRmqwp9fR7zx80C6AvtWDQLwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGM3MDQwMWMtN2Y0MS00YTZiLTk0MzQtY2M4MGRjYTA5
M2U2LzIvRDE4MjA3NDY2QUIwQTdEN0QxRUYzQzdDRDAyRTgwQkVENTgzNDBCQy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83M2I4ZWMwMS04YmE1LTQ3
OWYtYTIyOS0wYWI3MGU0ODE1YmIvMC9EMTgyMDc0NjZBQjBBN0Q3RDFFRjNDN0NE
MDJFODBCRUQ1ODM0MEJDLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUF
BzALhoGTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8wYzcwNDAxYy03ZjQxLTRhNmItOTQzNC1jYzgwZGNhMDkzZTYvMi8zMjYxMzA2
MjNhMzQ2NTMwMzczYTYyNjEzYTNhMmYzNDM3MmQzNDM4MjAzZDNlMjAzMjMxMzIz
NDM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB
Af8EEzARMA8EAgACMAkDBwEqC04HALowDQYJKoZIhvcNAQELBQADggEBAJnWCFmz
Th5TEMMXXMSNXnK2IWDBehAnXdicwLIBSN8xHSMev8M2Aeg1Pp9rs6e7/dUEnmVh
yR3EgGDZlBvayOy4Crr3nXDS56oSVO3mw/MLB0D4A7nmuhlq6SdlIayX4m5Eemnv
J3RsXk9XwqQogvWD0aViW6BEqDAvoxTDhUcZBdesS5VvtQjJEmr86+lTmnar5AvD
y3srU3Qapp5Xhd9E/VjGwovayTJOaHyxzKIWWVc7+p4u508x0vHfs6UcCNRroUSr
nXd7IkAOI1F7Se+zuPmphs+cRZEYQAX64fy6GsqNkdCwBEVA0QxG9v6I1cf66R9e
3LXN94clwTe1ZPs=
-----END CERTIFICATE-----