Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa
File:                     326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa (raw, json)
Hash identifier:          3t/0qmEuc7HUJ6jbuOuPnmd3ve4/XpcLhj4VdVBS4pk=
Subject key identifier:   0D:E8:47:F5:6E:CA:5F:4A:26:08:41:6B:FA:A5:4E:64:73:81:77:27
Certificate issuer:       /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Certificate serial:       3AB63E962BDA679A2C2874405D240844EE9A4F4B
Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa
Signing time:             Mon 27 Jan 2025 12:32:22 +0000
ROA not before:           Mon 27 Jan 2025 12:27:22 +0000
ROA not after:            Mon 26 Jan 2026 12:32:22 +0000
asID:                     135659
IP address blocks:        2a14:7581:4650::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:b6:3e:96:2b:da:67:9a:2c:28:74:40:5d:24:08:44:ee:9a:4f:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
        Validity
            Not Before: Jan 27 12:27:22 2025 GMT
            Not After : Jan 26 12:32:22 2026 GMT
        Subject: CN=0DE847F56ECA5F4A2608416BFAA54E6473817727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:45:54:0a:52:73:8c:ee:18:b8:49:79:16:a2:
                    55:8a:b7:f9:cb:5c:c8:57:d9:0f:59:89:41:be:d1:
                    40:d1:cc:84:7d:36:34:3c:d2:7f:8d:bf:a3:7e:c2:
                    b0:ce:d3:b2:74:ae:c5:bd:e7:31:f4:cc:92:4a:70:
                    de:07:70:02:1c:20:17:c4:e8:cc:d3:d8:b0:8e:46:
                    f9:bb:87:1f:7e:c1:d3:2d:93:18:d2:ae:89:0f:fe:
                    41:72:56:b7:9e:93:84:85:cb:9d:d4:1f:bf:a4:e6:
                    33:c7:f1:3d:90:bf:3d:4e:2b:f6:74:bc:c9:e3:ec:
                    60:8c:d9:0a:6e:a0:2c:2a:16:a9:2a:38:75:a5:7e:
                    2a:8c:76:03:56:26:cc:76:56:be:6f:23:5f:88:b5:
                    ab:1b:66:93:16:4a:c2:53:af:08:c4:16:70:e2:b1:
                    50:e4:31:f4:7e:70:ce:06:f5:23:95:07:93:77:4e:
                    b3:20:9a:d1:c5:e5:21:e7:e0:2f:24:6e:f3:0c:3b:
                    f5:8a:81:11:c9:b5:cd:4b:2e:6c:8b:5e:ac:92:a1:
                    fd:70:37:fe:f3:bb:cd:c9:7c:d4:98:6e:d6:aa:3c:
                    21:14:09:f4:a7:cb:a6:a7:68:f3:35:c8:70:3c:5f:
                    11:12:60:9b:95:84:25:b2:3f:59:51:fd:88:6e:9c:
                    f3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E8:47:F5:6E:CA:5F:4A:26:08:41:6B:FA:A5:4E:64:73:81:77:27
            X509v3 Authority Key Identifier:
                keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:4650::/44

    Signature Algorithm: sha256WithRSAEncryption
         18:c3:9d:40:5f:67:ef:2d:b2:ab:32:81:1d:7b:ce:77:03:bc:
         56:12:6e:25:3d:91:76:f5:7a:e2:f9:1d:c7:33:bc:0d:04:3e:
         da:41:78:98:e8:42:6e:89:26:30:66:8e:2b:11:09:13:53:63:
         c8:90:a7:1e:74:5c:82:98:c9:bc:b3:e0:25:c1:c6:99:39:f3:
         86:a4:d6:fb:59:b1:ef:1e:59:b0:c6:f7:a9:5c:ba:a3:a7:60:
         3f:2c:83:9e:4f:ba:30:1c:4a:8b:1c:03:e7:b0:32:b0:bb:fc:
         fd:8c:9b:fd:48:61:35:90:01:9d:ee:c0:bc:dc:fc:86:96:83:
         64:f8:ee:79:c7:7a:54:80:bd:f7:e5:7f:61:32:fb:ca:4e:bd:
         8d:40:1e:e2:82:75:11:dd:7e:21:20:30:a6:c7:ec:fd:ad:2b:
         9e:69:19:5e:a6:b2:69:03:37:bf:01:f9:d0:9d:e0:1f:82:fe:
         a8:2e:99:4c:5c:bf:0c:53:93:e1:4d:d4:a4:4f:ee:78:ab:fb:
         97:c2:47:a4:46:fe:29:57:da:a7:81:b3:39:2e:74:1f:bd:ec:
         61:7d:61:e7:69:c7:8e:f1:70:46:83:ce:d6:4d:40:0e:e2:5c:
         ec:27:ed:e0:4a:54:83:e0:a4:bd:7f:d6:ca:cb:45:f2:ac:77:
         57:5f:3e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----