Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa
File:                     326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa (raw, json)
Hash identifier:          EXuK08+oqHk8pQl69db4apbuttuLFsyV61jf2S7CeW0=
Subject key identifier:   D6:89:69:3C:B6:00:4A:77:F9:72:91:49:27:FB:C6:70:0D:FC:A7:C3
Certificate issuer:       /CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09
Certificate serial:       732FA11BEF046A2C8EC3E3CADF8651534383A3FD
Authority key identifier: B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa
Signing time:             Wed 21 Aug 2024 13:31:52 +0000
ROA not before:           Wed 21 Aug 2024 13:26:52 +0000
ROA not after:            Wed 20 Aug 2025 13:31:52 +0000
asID:                     8075
IP address blocks:        2a0a:6044:8ffe::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:2f:a1:1b:ef:04:6a:2c:8e:c3:e3:ca:df:86:51:53:43:83:a3:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09
        Validity
            Not Before: Aug 21 13:26:52 2024 GMT
            Not After : Aug 20 13:31:52 2025 GMT
        Subject: CN=D689693CB6004A77F972914927FBC6700DFCA7C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:12:a8:53:7a:17:3d:83:90:48:03:c3:0f:90:
                    ad:86:84:57:15:19:81:1f:ca:c2:b0:ba:6c:dc:0c:
                    d3:61:30:a3:1d:d3:90:72:b3:1a:21:a9:5e:1a:42:
                    5e:37:58:e8:04:6c:f5:07:9e:b3:90:e9:b0:7f:2a:
                    d9:33:f5:15:40:52:58:a9:8d:4c:83:a3:ad:50:14:
                    06:b1:a2:c9:f9:b5:dc:21:f3:11:10:4f:3a:7a:40:
                    3a:c0:7f:b8:a6:d6:4c:2c:fb:92:28:46:06:92:7e:
                    a3:ba:c4:b7:20:01:81:87:7a:01:4d:31:ea:38:3f:
                    80:3c:5e:e6:e2:62:b1:a5:3d:27:73:76:82:86:0c:
                    cd:de:2c:79:01:46:7e:71:ad:d9:da:f0:00:1e:2e:
                    b3:cf:8a:4a:9f:92:0c:74:86:c1:da:9e:6a:ae:a0:
                    d9:43:54:c1:11:d2:f9:e9:7e:ca:73:f4:b8:dc:03:
                    82:8c:28:0c:bc:0f:50:d5:17:e5:f8:01:88:6e:c9:
                    7b:17:5a:c8:21:a8:c2:13:ac:cf:06:34:15:d5:e1:
                    7c:77:d5:16:7f:ec:42:8c:48:75:a0:ad:64:4c:a9:
                    63:60:c6:e5:18:ba:63:3e:d5:e0:7a:45:95:2b:11:
                    d9:c6:00:de:4e:6f:51:0b:70:a8:70:6a:81:74:eb:
                    bb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:89:69:3C:B6:00:4A:77:F9:72:91:49:27:FB:C6:70:0D:FC:A7:C3
            X509v3 Authority Key Identifier:
                keyid:B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:8ffe::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:1f:26:c5:94:e5:05:cc:8c:27:d8:d9:55:f8:9b:98:5f:7d:
         d6:b5:15:ca:62:90:23:02:6c:de:18:8f:0a:28:25:85:a6:68:
         03:e5:54:93:7f:38:9a:fe:27:ec:6f:f3:46:b6:a0:0b:f1:4e:
         54:3b:d2:6b:df:e0:04:07:55:d2:de:6e:7d:71:2e:e8:4c:f6:
         42:99:54:83:58:e3:ef:e0:e5:3a:29:31:e4:4f:b0:a0:44:7d:
         53:5a:f2:1a:0f:b3:6d:1f:3f:54:41:8f:c9:74:c3:07:12:d9:
         28:dc:06:5b:ed:c4:aa:3d:33:b8:dd:85:d8:74:35:4b:b0:8b:
         14:34:e0:05:aa:ca:53:81:4d:2c:e4:74:34:ed:95:8b:90:ca:
         18:a3:13:c3:43:ed:24:1a:1e:c8:61:66:02:56:80:a8:58:95:
         e4:79:f3:a4:84:71:dd:3b:4e:9d:f8:29:76:ba:06:e1:67:fb:
         f5:5a:69:4f:27:ae:60:dc:a3:74:cc:ab:94:f6:2e:33:f0:8d:
         f1:85:af:e4:f8:c1:c2:e3:19:c9:38:3c:45:69:19:f8:82:6c:
         cf:7c:af:22:c0:8e:7e:e5:39:2c:58:e4:07:b7:92:39:1c:0d:
         58:3f:a8:64:aa:75:9c:2d:00:07:82:fa:95:f6:61:51:2b:77:
         7f:2f:b4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----