Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/326130363a313238313a373032303a3a2f34382d3438203d3e20323135313434.roa
File:                     326130363a313238313a373032303a3a2f34382d3438203d3e20323135313434.roa (raw, json)
Hash identifier:          +0kHQpuTESgdMHr9bDetPXMshIIHCo38CJppRhqymzE=
Subject key identifier:   68:23:9F:AC:F1:75:27:73:AB:F3:CC:8A:6B:84:B8:3A:3B:AE:D6:F2
Certificate issuer:       /CN=E472D821C14C9E0738F632D7A74DF516C446A5E2
Certificate serial:       0F29501BC2CDDD7FED31F76099A75611C38EBD3C
Authority key identifier: E4:72:D8:21:C1:4C:9E:07:38:F6:32:D7:A7:4D:F5:16:C4:46:A5:E2
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/326130363a313238313a373032303a3a2f34382d3438203d3e20323135313434.roa
Signing time:             Tue 17 Dec 2024 10:37:21 +0000
ROA not before:           Tue 17 Dec 2024 10:32:21 +0000
ROA not after:            Tue 16 Dec 2025 10:37:21 +0000
asID:                     215144
IP address blocks:        2a06:1281:7020::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:29:50:1b:c2:cd:dd:7f:ed:31:f7:60:99:a7:56:11:c3:8e:bd:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E472D821C14C9E0738F632D7A74DF516C446A5E2
        Validity
            Not Before: Dec 17 10:32:21 2024 GMT
            Not After : Dec 16 10:37:21 2025 GMT
        Subject: CN=68239FACF1752773ABF3CC8A6B84B83A3BAED6F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:7f:9f:51:23:3d:ca:8d:d8:1f:c6:d2:29:0b:
                    90:52:a5:ac:4e:26:e8:cd:26:15:d2:b1:c5:8d:6d:
                    4a:57:30:ec:98:69:e3:4d:ff:ed:8f:f4:3f:d1:60:
                    9b:99:40:d4:5f:86:f5:f2:5f:b3:ed:5a:f6:fe:d2:
                    8d:cc:f8:ac:87:37:c5:4a:1e:08:90:d2:23:11:71:
                    80:a0:56:03:9d:63:73:c1:ba:68:8f:c7:24:b8:c7:
                    c2:ad:c1:fe:d4:50:9c:37:8c:6a:82:96:14:8a:62:
                    aa:d1:49:bc:7a:a1:4e:ff:ca:cc:ee:3f:d6:fa:dd:
                    04:b7:df:68:58:f3:1e:4f:22:ba:b3:63:35:b5:53:
                    99:d9:cb:8e:9b:8d:09:87:d3:36:4d:ad:1a:c7:e7:
                    25:de:48:f7:29:05:bc:67:24:29:64:4a:3b:e2:19:
                    35:5d:66:50:6b:31:ae:a4:19:1b:5d:c1:52:14:f7:
                    5b:6c:fb:c2:57:94:e0:6b:50:54:ec:2c:64:b8:8b:
                    38:1d:f6:a3:35:12:1f:a6:02:a5:a5:5b:c9:e9:8c:
                    15:7f:79:37:f4:1f:9d:7f:3e:d1:b0:5d:ae:e4:02:
                    f9:ea:ed:c3:2d:51:f6:ba:0e:4c:24:b0:b6:f5:29:
                    13:69:b8:38:6f:5b:85:26:1e:8f:1d:be:2b:5f:a2:
                    c1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:23:9F:AC:F1:75:27:73:AB:F3:CC:8A:6B:84:B8:3A:3B:AE:D6:F2
            X509v3 Authority Key Identifier:
                keyid:E4:72:D8:21:C1:4C:9E:07:38:F6:32:D7:A7:4D:F5:16:C4:46:A5:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/326130363a313238313a373032303a3a2f34382d3438203d3e20323135313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1281:7020::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:08:a7:88:28:40:e2:db:31:3a:55:b9:b7:3f:e7:be:45:f6:
         c3:08:93:13:1f:e5:94:45:53:02:42:0a:78:f5:e3:b3:a7:9e:
         11:92:cc:33:32:03:f9:1a:ed:63:d7:74:16:86:4e:14:fd:0a:
         f2:f4:ed:d3:10:77:71:8e:29:5b:c2:19:25:c6:ea:9c:dc:8d:
         74:37:a3:33:6d:ce:2b:13:b1:3a:19:46:5e:2c:85:41:38:3a:
         36:e8:f4:78:fe:66:7a:08:2a:56:e5:8f:c9:16:6f:4d:bc:7a:
         c8:f7:8e:77:e2:f0:25:66:98:5b:a4:13:15:f6:59:e1:66:da:
         87:81:96:da:d8:31:13:d1:75:ff:8f:73:84:c5:ef:60:96:16:
         d5:d6:1f:d5:b7:2b:eb:70:6e:0c:c6:c2:6d:c4:59:46:05:5e:
         71:35:32:57:4a:25:34:2f:97:59:34:b6:0f:e5:a2:3e:0e:68:
         d4:97:96:8c:73:bd:9e:4d:19:41:28:ef:c9:ad:9e:0e:af:17:
         c3:55:10:85:83:2e:03:45:21:a7:fc:65:59:26:af:03:66:e9:
         f4:a7:d0:14:97:86:43:54:3b:28:79:b9:66:40:a4:90:63:cc:
         ce:b6:af:b5:83:a1:9f:83:d3:37:12:d5:ae:33:60:b8:67:e4:
         54:fa:5a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----