Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/2/326130373a353463373a333031313a3a2f34382d3438203d3e20313939363931.roa
File:                     326130373a353463373a333031313a3a2f34382d3438203d3e20313939363931.roa (raw, json)
Hash identifier:          dCpADE6m2CqUgj7dfAfb8mmuZdBlSEshKOh8Nbz3+ZA=
Subject key identifier:   EC:0A:2D:30:ED:6B:11:27:43:9D:5B:91:99:94:5D:E4:57:B4:D3:95
Certificate issuer:       /CN=ED7E642F8C5FB6C6E897FE906D788ADA542E8EED
Certificate serial:       183D7274D80C414978D88C9A92BC4C82F835529E
Authority key identifier: ED:7E:64:2F:8C:5F:B6:C6:E8:97:FE:90:6D:78:8A:DA:54:2E:8E:ED
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/ED7E642F8C5FB6C6E897FE906D788ADA542E8EED.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/2/326130373a353463373a333031313a3a2f34382d3438203d3e20313939363931.roa
Signing time:             Sat 14 Oct 2023 04:50:31 +0000
ROA not before:           Sat 14 Oct 2023 04:45:31 +0000
ROA not after:            Sat 12 Oct 2024 04:50:31 +0000
asID:                     199691
IP address blocks:        2a07:54c7:3011::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:3d:72:74:d8:0c:41:49:78:d8:8c:9a:92:bc:4c:82:f8:35:52:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED7E642F8C5FB6C6E897FE906D788ADA542E8EED
        Validity
            Not Before: Oct 14 04:45:31 2023 GMT
            Not After : Oct 12 04:50:31 2024 GMT
        Subject: CN=EC0A2D30ED6B1127439D5B9199945DE457B4D395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:52:a4:3b:08:05:23:3e:2a:3e:e9:19:13:63:
                    08:15:c2:39:e2:5d:6a:20:3a:3d:7b:14:41:db:2c:
                    ee:e6:12:76:81:2e:88:09:95:07:76:60:d4:fe:bb:
                    c4:2a:4b:ba:53:9e:b6:dc:7a:07:aa:f1:9c:d0:50:
                    9e:c8:78:67:c0:8c:1e:70:31:64:15:4f:1f:be:47:
                    f1:72:dd:37:fe:46:6e:42:f5:68:ae:da:49:47:91:
                    61:33:b7:fe:3e:a6:99:24:56:4a:cb:3e:d6:29:56:
                    ee:49:05:92:87:8a:48:b0:bc:aa:8c:a2:d9:e0:ed:
                    52:a2:ab:63:fb:3f:4c:98:c6:ab:37:a8:33:0b:42:
                    35:92:66:5b:7d:3a:98:42:51:4b:c9:08:cd:e5:6d:
                    52:56:a6:59:8b:0f:ce:1a:7d:90:d4:72:69:ca:d5:
                    27:c8:4d:6a:b6:ea:31:a2:24:bd:17:16:d4:a5:eb:
                    e0:90:4b:0d:71:1c:7e:71:01:15:81:4c:59:0c:a3:
                    ea:ae:01:5c:8b:b4:e0:b8:21:c4:96:61:46:5c:31:
                    c7:8a:bf:45:1a:7e:a1:2a:89:2c:78:fd:1e:6a:e0:
                    37:c1:6c:79:df:35:0f:99:f3:62:ce:df:81:d1:22:
                    28:db:a2:ad:70:2d:9b:38:14:13:81:f9:2e:f5:18:
                    8c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0A:2D:30:ED:6B:11:27:43:9D:5B:91:99:94:5D:E4:57:B4:D3:95
            X509v3 Authority Key Identifier:
                keyid:ED:7E:64:2F:8C:5F:B6:C6:E8:97:FE:90:6D:78:8A:DA:54:2E:8E:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/2/ED7E642F8C5FB6C6E897FE906D788ADA542E8EED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/ED7E642F8C5FB6C6E897FE906D788ADA542E8EED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/2/326130373a353463373a333031313a3a2f34382d3438203d3e20313939363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c7:3011::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:9a:27:92:0e:27:a9:a1:e8:4c:92:fa:de:2d:87:64:93:4d:
         19:9d:13:7d:15:1e:28:08:d3:4a:f1:2d:35:80:ef:d2:73:05:
         90:98:69:7d:ba:1e:29:b6:6a:04:da:a6:8e:26:fc:db:4d:3a:
         40:21:84:a2:88:18:a7:9a:29:c3:9d:31:19:8d:50:ad:07:4b:
         16:9b:dd:fa:33:cf:71:a4:24:7e:b2:f2:c1:16:9a:8b:e1:ee:
         6e:7f:bd:c8:f2:55:d8:6b:11:3f:78:e1:93:e1:fe:40:7e:c1:
         d1:b2:28:b9:56:ec:02:05:f5:c2:30:aa:a5:36:e4:03:23:72:
         cf:a5:f1:51:e5:ec:d0:fb:4e:ad:31:a7:db:73:6d:b1:2e:49:
         f5:47:84:bd:3b:1f:a1:aa:92:35:ee:ad:2c:b2:e3:3e:09:a1:
         19:e3:0a:6e:2b:16:2a:b8:c3:0f:a3:32:96:e5:59:2e:bb:5f:
         0b:bc:ff:ea:8b:b4:dc:e0:e2:d8:37:ea:06:e1:2a:4a:75:1e:
         82:e7:4b:fe:0d:c3:cd:ed:39:a4:9a:c8:e9:4f:09:7b:9d:c9:
         e7:4d:01:b2:69:b1:c6:c1:26:d5:e6:c3:53:07:3e:49:13:ee:
         05:b2:bd:db:92:81:fb:e7:79:17:23:28:eb:3f:fb:0d:5a:9d:
         15:d6:24:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----