Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/1/326130613a363034343a376230333a3a2f34382d3438203d3e20333937373330.roa
File:                     326130613a363034343a376230333a3a2f34382d3438203d3e20333937373330.roa (raw, json)
Hash identifier:          NBg9u8mnevOyYLrFiDXf/8nAs1XqUn/zHoeYANtjVTE=
Subject key identifier:   52:FE:13:8F:29:F0:B2:C4:E6:D8:66:6C:99:F1:56:A2:F4:EA:F1:00
Certificate issuer:       /CN=451E20DA90C6D597951FEC29DF3771EAC47643EE
Certificate serial:       33DCD1648F063ED1DC064562F7E5EEF2CF29A832
Authority key identifier: 45:1E:20:DA:90:C6:D5:97:95:1F:EC:29:DF:37:71:EA:C4:76:43:EE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/451E20DA90C6D597951FEC29DF3771EAC47643EE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/1/326130613a363034343a376230333a3a2f34382d3438203d3e20333937373330.roa
Signing time:             Mon 30 Dec 2024 16:45:40 +0000
ROA not before:           Mon 30 Dec 2024 16:40:40 +0000
ROA not after:            Mon 29 Dec 2025 16:45:40 +0000
asID:                     397730
IP address blocks:        2a0a:6044:7b03::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:dc:d1:64:8f:06:3e:d1:dc:06:45:62:f7:e5:ee:f2:cf:29:a8:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451E20DA90C6D597951FEC29DF3771EAC47643EE
        Validity
            Not Before: Dec 30 16:40:40 2024 GMT
            Not After : Dec 29 16:45:40 2025 GMT
        Subject: CN=52FE138F29F0B2C4E6D8666C99F156A2F4EAF100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:60:76:79:68:3e:28:3b:e9:f6:d8:2e:6f:d4:
                    ff:1c:37:e9:e3:41:5b:4b:8e:37:d8:d9:f2:68:db:
                    c2:e3:3a:c8:0c:ee:65:05:58:9b:da:ff:f4:7a:09:
                    33:3f:24:88:04:bb:e4:f8:55:77:69:db:77:6d:61:
                    df:a9:d5:7b:88:11:d8:7c:3f:7d:f7:e4:6e:a9:bc:
                    4f:25:a6:2f:3b:1a:80:f4:5f:d6:2e:63:8a:1d:d6:
                    2f:27:75:af:5e:04:56:f2:60:5e:60:a7:86:ec:57:
                    bd:02:ec:55:a0:c9:ea:56:25:bb:44:ff:61:e1:95:
                    f0:4a:09:28:52:d7:df:cc:a8:69:9c:3c:7e:90:fe:
                    2e:75:4c:83:52:77:c4:73:a6:2f:d9:a0:c8:3d:ee:
                    9b:c7:42:cb:19:71:1f:12:2c:ec:6b:e0:54:54:bf:
                    b5:2e:00:aa:3c:3e:de:e4:a0:94:3b:31:0f:af:4d:
                    5c:63:dc:3d:3f:12:06:e2:2d:a4:55:80:d2:eb:be:
                    45:0d:11:a3:6a:db:9a:7d:ce:58:c6:d4:70:25:e1:
                    62:0a:30:5c:0d:b8:b3:80:72:ba:72:cd:f6:d7:09:
                    97:75:e6:22:27:30:e6:a6:d3:20:aa:a2:42:47:4a:
                    89:c2:6c:52:8f:6e:cd:d5:09:8b:3a:cd:6c:81:05:
                    d3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FE:13:8F:29:F0:B2:C4:E6:D8:66:6C:99:F1:56:A2:F4:EA:F1:00
            X509v3 Authority Key Identifier:
                keyid:45:1E:20:DA:90:C6:D5:97:95:1F:EC:29:DF:37:71:EA:C4:76:43:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/1/451E20DA90C6D597951FEC29DF3771EAC47643EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/451E20DA90C6D597951FEC29DF3771EAC47643EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/1/326130613a363034343a376230333a3a2f34382d3438203d3e20333937373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7b03::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:38:25:11:79:79:5c:05:36:07:2b:f3:31:9d:ac:a4:bc:2b:
         ae:0f:01:05:73:1e:e8:d9:76:79:93:5e:a2:5f:df:be:ce:bc:
         87:46:8f:36:1c:c9:6c:ba:5d:f4:3c:23:88:b2:9d:dc:f8:97:
         c8:43:21:88:45:14:af:90:8b:8f:da:4c:b1:30:6c:78:db:3e:
         7c:29:61:76:be:ad:a6:8d:b0:8d:de:b7:99:d8:c7:21:62:45:
         f0:97:92:5c:6a:de:1f:a5:a8:1b:1c:2e:45:6a:ec:61:15:29:
         f2:20:9e:ae:0b:d4:b2:57:e7:b3:85:3a:98:b5:81:71:8e:04:
         8e:bf:a1:bb:f5:31:3b:40:cd:a2:11:cd:fd:07:e3:53:23:f3:
         6a:90:25:90:88:b5:41:4c:80:9a:1d:47:dd:d0:d1:6e:44:df:
         c2:15:f8:fd:96:4f:6f:5f:f5:fe:b5:e6:16:fc:14:c6:14:ef:
         16:9a:d3:20:c2:0e:a2:57:da:d8:aa:ac:97:90:86:3d:c3:e6:
         41:e2:44:eb:d0:16:dc:9e:83:77:d2:2b:69:f2:e8:8e:ad:1e:
         f5:c8:1c:64:5d:39:e1:a8:6b:48:3c:2b:c3:01:54:a5:6c:db:
         c7:7e:49:82:42:cf:20:de:a9:54:99:34:65:fb:7a:fd:60:13:
         48:aa:b6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----