Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa
File:                     326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa (raw, json)
Hash identifier:          UbNylh5P6nuf5cNR2u+/87y22yS7yGAzdkJKrmcwv2M=
Subject key identifier:   A7:A0:2D:B5:71:56:5A:DD:7C:7E:E2:15:E1:F8:0A:76:AE:DC:4A:0A
Certificate issuer:       /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9
Certificate serial:       20B64B29F0852CA1CBFD98EFB23E927CF235E55F
Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa
Signing time:             Wed 06 Mar 2024 01:17:12 +0000
ROA not before:           Wed 06 Mar 2024 01:12:12 +0000
ROA not after:            Wed 05 Mar 2025 01:17:12 +0000
asID:                     215617
IP address blocks:        2a0f:85c1:363::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:b6:4b:29:f0:85:2c:a1:cb:fd:98:ef:b2:3e:92:7c:f2:35:e5:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9
        Validity
            Not Before: Mar  6 01:12:12 2024 GMT
            Not After : Mar  5 01:17:12 2025 GMT
        Subject: CN=A7A02DB571565ADD7C7EE215E1F80A76AEDC4A0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:60:15:74:ed:5d:cc:63:28:1b:b6:ed:33:9a:
                    da:77:d2:b4:95:68:a8:e9:79:39:03:e8:a6:5e:3f:
                    e7:5d:0e:8b:40:48:01:a6:5b:97:cc:95:19:ec:94:
                    63:39:ff:35:fc:58:ce:10:e3:e6:d2:87:c8:b5:6e:
                    7d:ad:ef:5d:67:72:64:d9:61:40:0a:46:d2:ba:46:
                    55:eb:2e:7b:fa:26:cf:d2:2f:53:d0:a6:41:cf:92:
                    28:70:53:2d:8a:84:28:ff:3f:6a:25:20:df:ef:23:
                    97:f1:51:c8:2d:d0:cf:da:39:24:d2:3a:f9:b6:2e:
                    9f:84:02:02:70:ec:c3:a2:e9:c7:5e:18:63:c1:8f:
                    7d:4f:1d:64:22:29:08:0e:87:8c:16:91:6d:27:83:
                    b0:19:a4:a2:11:a8:c1:05:d3:d5:fb:6d:bd:35:02:
                    64:7c:b0:32:85:25:62:0d:3c:ba:60:c4:5a:56:32:
                    38:72:e3:6e:94:cb:3a:32:51:65:aa:87:30:5c:71:
                    f3:d5:82:35:dc:38:02:49:3f:03:6f:f4:c5:9a:fc:
                    16:93:34:9d:12:fa:9c:75:9f:4e:41:ed:f1:2f:52:
                    3e:17:23:2a:bc:74:5b:78:8f:46:4e:e5:e2:37:11:
                    b8:91:e3:d0:d9:5b:c9:f4:6b:07:b1:3b:c0:b9:4c:
                    af:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A0:2D:B5:71:56:5A:DD:7C:7E:E2:15:E1:F8:0A:76:AE:DC:4A:0A
            X509v3 Authority Key Identifier:
                keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:363::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:c8:fd:f4:c9:d6:f7:a1:13:6a:3f:55:d6:66:95:91:bb:a1:
         f7:2e:ea:33:25:db:b7:b3:c0:ac:8a:98:ee:2b:e9:8a:5d:7e:
         c0:9f:67:26:27:84:09:d6:9f:40:65:fc:7f:5b:0f:5c:99:2e:
         8a:ac:29:99:6b:db:b3:5c:a4:c8:2a:9a:a4:e0:fe:b7:04:29:
         be:81:c6:ca:24:18:03:5f:35:6b:c8:1d:11:63:d1:27:84:40:
         5d:62:6d:82:6d:b9:d1:56:2c:83:f4:d7:88:c5:29:0f:01:1f:
         62:2d:04:c8:5b:0c:57:60:7b:a4:e9:00:03:72:1d:54:d4:b1:
         73:4b:ce:9e:e8:04:22:f8:82:a6:27:df:37:c8:5b:a4:96:45:
         09:a8:59:cb:58:ca:0e:d2:2d:0b:f8:91:ee:84:55:31:1e:1b:
         9f:40:16:61:30:ed:8b:3b:6d:98:ed:97:39:b9:94:14:29:82:
         57:aa:0a:87:52:92:8b:5c:ca:0f:b8:57:b0:55:6c:31:3a:76:
         56:79:a3:7a:48:b0:18:55:bd:19:6b:97:57:b4:63:83:6d:29:
         7d:33:b5:73:00:2b:22:c8:7f:e8:99:fc:4b:30:fa:26:bb:23:
         c2:6a:f1:bc:dd:80:00:9d:f2:be:66:e6:0a:b6:c9:bd:b1:de:
         b8:68:6e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----