Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/326131323a646434373a383032633a3a2f34362d3438203d3e20323033303639.roa
File:                     326131323a646434373a383032633a3a2f34362d3438203d3e20323033303639.roa (raw, json)
Hash identifier:          SpFD7pXqPw/IerpxSoXn4nE0KgZNsHNjYg1HX8psBsI=
Subject key identifier:   AE:EE:5B:71:20:30:73:A4:B9:B6:E9:C3:56:B4:6A:48:02:37:30:EB
Certificate issuer:       /CN=34E6AAC74193FE34C57CB5F562608EE1E50DAD51
Certificate serial:       4F7FE02635D84B732D66BA745DBF9564EBF9FAA8
Authority key identifier: 34:E6:AA:C7:41:93:FE:34:C5:7C:B5:F5:62:60:8E:E1:E5:0D:AD:51
Authority info access:    rsync://rpki.co/repo/AS945/1/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/326131323a646434373a383032633a3a2f34362d3438203d3e20323033303639.roa
Signing time:             Tue 12 Mar 2024 01:46:50 +0000
ROA not before:           Tue 12 Mar 2024 01:41:50 +0000
ROA not after:            Tue 11 Mar 2025 01:46:50 +0000
asID:                     203069
IP address blocks:        2a12:dd47:802c::/46 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:7f:e0:26:35:d8:4b:73:2d:66:ba:74:5d:bf:95:64:eb:f9:fa:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34E6AAC74193FE34C57CB5F562608EE1E50DAD51
        Validity
            Not Before: Mar 12 01:41:50 2024 GMT
            Not After : Mar 11 01:46:50 2025 GMT
        Subject: CN=AEEE5B71203073A4B9B6E9C356B46A48023730EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ea:a3:19:bf:42:db:00:c8:37:2f:f4:46:2a:
                    22:f6:ea:81:44:de:42:c5:46:90:ff:37:98:24:41:
                    2f:20:2c:cc:56:51:97:b6:7b:55:c3:71:0e:d0:c6:
                    fd:58:d3:95:88:21:5c:f7:77:11:43:fc:22:5a:b8:
                    2d:45:1a:5b:7d:46:ed:48:62:e2:bc:9a:64:c2:47:
                    1e:34:e6:6e:d6:fd:38:b1:90:4b:94:06:ae:4b:e6:
                    9a:ae:7c:25:d2:c6:88:67:b1:12:1a:cc:50:3d:d9:
                    83:92:7f:61:ca:b5:42:33:ae:cd:f2:1b:23:16:7c:
                    56:34:97:28:23:3e:8a:5f:72:92:cd:09:14:76:e5:
                    38:b0:3f:5e:4c:5a:ca:0f:7d:54:89:95:6c:4a:36:
                    d8:41:e4:84:ae:08:c4:89:ad:ff:71:a5:2c:c1:eb:
                    ff:96:6e:46:a9:a1:ef:38:20:a1:a0:86:ec:a0:82:
                    54:14:bd:cc:88:23:41:12:2e:05:56:99:b0:7f:2d:
                    74:21:70:37:a1:14:da:1f:fb:2e:0a:5c:69:74:fd:
                    a6:cb:9a:cf:c3:1b:b4:a4:04:a0:31:bc:67:84:52:
                    8b:d6:22:e0:82:cb:a4:cf:5b:f4:f4:af:ff:3e:ca:
                    de:7c:d8:4a:57:a4:0d:5f:e7:a0:34:28:e0:a6:de:
                    b2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:EE:5B:71:20:30:73:A4:B9:B6:E9:C3:56:B4:6A:48:02:37:30:EB
            X509v3 Authority Key Identifier:
                keyid:34:E6:AA:C7:41:93:FE:34:C5:7C:B5:F5:62:60:8E:E1:E5:0D:AD:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/326131323a646434373a383032633a3a2f34362d3438203d3e20323033303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:802c::/46

    Signature Algorithm: sha256WithRSAEncryption
         27:37:2b:0b:c6:f0:6f:43:67:08:6f:28:25:08:f9:23:9e:67:
         a9:15:13:29:1e:4b:c4:73:d6:d6:cd:0b:d6:bc:b5:8b:a1:c5:
         fd:5a:45:72:b8:2c:c5:cd:15:66:1d:96:8e:06:d8:76:29:01:
         2a:e8:83:44:95:2a:5a:1e:8b:02:db:0e:85:a5:ea:d4:23:2b:
         3e:78:9a:3e:44:04:bd:b4:53:4d:68:3b:8a:1f:f7:e2:d4:3f:
         63:78:30:4b:82:e2:ef:0a:3f:41:f7:27:0d:5b:06:e8:2b:a6:
         fb:e9:26:c3:e6:b7:b7:db:18:44:ec:1a:65:71:a8:ff:19:a9:
         c6:f2:60:c3:02:55:a7:61:94:e2:72:b1:68:f2:01:57:9c:7a:
         72:1e:3f:93:c8:e7:1e:f3:0a:46:94:27:68:a5:e0:7c:f2:00:
         bf:3e:7e:17:50:fa:24:86:66:0d:78:65:12:0f:71:b6:02:ec:
         8c:67:51:46:25:be:0b:fe:95:9c:ca:e1:88:77:d7:47:ef:85:
         3c:e9:75:14:1c:b9:e7:91:a8:79:c7:2f:87:01:97:0d:bd:43:
         64:8a:fa:2f:97:39:f0:e0:1e:e0:43:88:8a:67:c4:bb:f0:c6:
         4c:f0:14:c6:9a:69:6f:d9:d3:1f:d1:2a:03:62:a6:c1:e6:33:
         93:bd:37:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----