Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/326130663a383563313a3339303a3a2f34382d3438203d3e20323034383434.roa
File:                     326130663a383563313a3339303a3a2f34382d3438203d3e20323034383434.roa (raw, json)
Hash identifier:          K4hkbHkiUdvhXEPzKZviXsShKnt+dusHFnLiuzrULGw=
Subject key identifier:   3C:37:6F:6E:57:16:32:F5:41:F4:92:EE:5E:37:D8:68:3D:DA:03:10
Certificate issuer:       /CN=A4A082EAE8EF48C7B407C40E742479EADD862089
Certificate serial:       29A3A574AA2A665841AAFEE72F62986AAEEEEE28
Authority key identifier: A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/326130663a383563313a3339303a3a2f34382d3438203d3e20323034383434.roa
Signing time:             Mon 25 Nov 2024 22:48:41 +0000
ROA not before:           Mon 25 Nov 2024 22:43:41 +0000
ROA not after:            Mon 24 Nov 2025 22:48:41 +0000
asID:                     204844
IP address blocks:        2a0f:85c1:390::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a3:a5:74:aa:2a:66:58:41:aa:fe:e7:2f:62:98:6a:ae:ee:ee:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4A082EAE8EF48C7B407C40E742479EADD862089
        Validity
            Not Before: Nov 25 22:43:41 2024 GMT
            Not After : Nov 24 22:48:41 2025 GMT
        Subject: CN=3C376F6E571632F541F492EE5E37D8683DDA0310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c3:1f:89:36:c9:57:00:05:ca:f2:e8:8b:b7:
                    aa:67:b0:74:6d:ca:53:5e:c2:50:b5:f1:fe:61:54:
                    c8:1e:25:e7:33:c7:35:89:f2:a2:7e:c6:0a:47:e2:
                    cb:70:d6:18:8c:35:79:ac:0d:5c:e4:38:8d:21:3f:
                    df:1c:b6:f6:86:20:55:f1:04:75:59:12:7a:f1:7c:
                    ba:f4:c0:a7:4b:20:79:05:26:df:95:4c:3f:cf:71:
                    69:44:72:dc:60:dd:8a:2b:87:de:25:c5:94:b9:e3:
                    75:88:c8:29:7c:2b:70:09:0b:0f:72:8a:44:c8:14:
                    54:b1:94:2e:33:e0:a0:c9:de:56:32:1b:51:e6:74:
                    26:3d:51:4f:1f:49:93:ba:23:c0:ca:14:79:81:0c:
                    bd:ba:b8:f0:c1:dd:3a:f5:f0:3f:a2:44:7e:0f:0b:
                    f8:f6:54:8a:ba:08:cf:05:69:c8:eb:e4:cf:86:fb:
                    96:69:da:8e:d7:60:58:6b:51:fd:f4:98:90:a5:c7:
                    8b:90:01:67:b0:db:6f:b8:db:ec:a8:8e:36:b1:06:
                    e4:9a:31:39:ef:69:99:d6:8c:2f:9a:bc:e9:77:93:
                    ea:68:62:ba:db:b1:30:b3:50:84:14:ee:4b:c7:a5:
                    40:ab:54:99:90:77:f5:b6:ca:8e:ff:3f:b2:96:38:
                    5f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:37:6F:6E:57:16:32:F5:41:F4:92:EE:5E:37:D8:68:3D:DA:03:10
            X509v3 Authority Key Identifier:
                keyid:A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/326130663a383563313a3339303a3a2f34382d3438203d3e20323034383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:390::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:86:77:55:60:7b:d9:b5:05:73:42:44:19:86:ab:c5:37:74:
         5b:e0:3c:1f:de:db:c3:bb:8c:bf:d4:1d:0a:db:ab:52:77:1f:
         de:2d:1a:59:ad:e8:0c:84:63:2b:33:62:40:cb:0b:2c:46:3b:
         8d:dc:95:4e:59:9a:78:a6:27:18:3c:42:b6:ac:af:ce:7f:64:
         f5:86:d7:60:9d:80:ba:32:df:ea:0a:0b:d9:da:60:d0:7f:89:
         45:62:ab:36:95:5d:5e:10:c4:2a:7b:b5:56:09:62:a0:22:89:
         8d:ac:eb:ca:23:37:93:8f:70:d8:64:eb:5f:88:f1:59:f1:b8:
         0b:10:2f:52:ff:4c:3f:7c:a4:11:c4:96:ef:7c:38:5b:8d:cc:
         c0:86:64:df:6d:74:9d:37:59:de:f9:0d:13:7f:f1:70:a7:d9:
         60:b1:3a:18:2b:b3:d4:67:f9:1e:e0:96:01:42:d7:0d:79:b9:
         90:fe:c3:74:1b:82:3e:9e:b5:5f:a4:b5:5c:e1:d5:09:3f:04:
         4f:97:a4:08:2d:36:05:cc:6a:1a:a8:82:3b:4e:f3:e4:8f:a0:
         b8:8a:c0:52:2d:56:e1:6e:88:4c:92:69:7e:96:fa:5c:a8:2a:
         d2:da:82:7b:ab:fb:38:7f:e8:a5:d9:e2:5a:00:89:46:e8:d8:
         0d:dc:59:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----