Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a386666633a3a2f34382d3438203d3e203331383938.roa
File:                     326130613a363034343a386666633a3a2f34382d3438203d3e203331383938.roa (raw, json)
Hash identifier:          utfcOtV0ira9oI60/XtqWPcWDjYS5TA34R10kidjjZM=
Subject key identifier:   76:85:2F:75:A9:18:BA:60:6E:62:D7:18:6B:64:9B:6A:23:D7:FD:97
Certificate issuer:       /CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC
Certificate serial:       5CC8453E5E2EF942531F872A256107360546EBB1
Authority key identifier: 43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a386666633a3a2f34382d3438203d3e203331383938.roa
Signing time:             Wed 12 Feb 2025 09:21:10 +0000
ROA not before:           Wed 12 Feb 2025 09:16:10 +0000
ROA not after:            Wed 11 Feb 2026 09:21:10 +0000
asID:                     31898
IP address blocks:        2a0a:6044:8ffc::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c8:45:3e:5e:2e:f9:42:53:1f:87:2a:25:61:07:36:05:46:eb:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC
        Validity
            Not Before: Feb 12 09:16:10 2025 GMT
            Not After : Feb 11 09:21:10 2026 GMT
        Subject: CN=76852F75A918BA606E62D7186B649B6A23D7FD97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1d:18:96:79:55:30:19:ab:82:10:71:d4:62:
                    be:26:c3:bd:78:15:52:71:2f:33:ef:18:6c:95:1f:
                    73:3f:2c:72:0c:af:50:00:5b:05:52:ce:84:e6:65:
                    72:a0:be:ad:d2:3a:a8:8d:49:cd:ef:99:4a:b2:84:
                    dd:c4:03:49:63:f6:20:82:11:09:72:83:11:08:c8:
                    f7:1a:ac:f5:86:6b:3b:5c:dc:0d:03:80:ec:a6:1b:
                    2a:63:c5:96:14:ae:08:76:30:4b:3a:08:97:5f:47:
                    81:fb:61:ec:63:12:01:20:5d:19:7c:fe:11:28:38:
                    bc:72:01:dc:2e:4e:5d:1f:fb:36:34:0e:f3:92:e4:
                    75:be:c6:81:c4:bf:01:da:26:fb:06:18:7b:38:64:
                    75:fc:8a:a1:a6:ff:07:c2:a0:a3:82:63:72:23:1c:
                    f3:f3:6f:e1:1f:fb:7c:73:30:53:de:c8:35:47:14:
                    7b:49:3a:2f:58:cc:6f:7b:b5:9a:5b:6a:73:0c:fe:
                    57:f0:8c:11:76:7c:b9:05:30:17:31:57:72:e2:4b:
                    16:26:94:da:fc:7d:ee:49:3a:5c:33:2e:23:ce:4c:
                    5e:33:e5:11:30:d2:c8:59:69:0f:dc:90:71:3e:d0:
                    81:63:56:60:50:f6:d8:a1:01:31:63:b8:26:40:e3:
                    62:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:85:2F:75:A9:18:BA:60:6E:62:D7:18:6B:64:9B:6A:23:D7:FD:97
            X509v3 Authority Key Identifier:
                keyid:43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a386666633a3a2f34382d3438203d3e203331383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:8ffc::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:92:b9:0c:16:55:69:d9:9f:18:59:bc:75:aa:3e:3b:6d:f0:
         a5:8e:72:f0:30:46:6a:25:d6:b7:3a:a4:80:91:28:52:f9:d7:
         65:76:a8:27:ff:b7:ea:57:b1:8c:31:6a:54:fe:db:aa:68:46:
         69:84:9d:3d:3f:5f:a0:b2:10:2c:0e:2d:ab:c0:8d:f8:ca:f7:
         7a:48:70:5f:c0:f4:0c:56:af:49:0b:75:a7:bb:14:e7:f2:03:
         c8:19:47:da:fc:1d:2d:2b:b4:c4:68:04:51:da:fc:08:a0:d5:
         9f:a8:1e:10:33:20:6c:7c:26:57:2d:8c:33:74:ee:48:9f:43:
         be:bd:c4:28:a2:e9:77:f9:c3:25:50:bb:16:e0:24:bd:14:f0:
         b8:e9:d5:a1:ed:9f:90:01:29:c4:65:6d:ec:12:2c:4a:81:c4:
         ae:45:5c:36:4a:6b:41:a2:8f:1c:97:36:d8:17:a5:58:1a:a9:
         4a:0a:92:8c:63:4f:f5:0a:75:69:61:1b:18:7f:9c:67:5d:5d:
         1e:3e:e6:33:31:62:b7:b4:2d:03:ff:5d:b7:84:73:40:d1:f1:
         4c:1c:e9:35:57:07:c7:04:42:22:b7:66:9a:fc:91:85:b9:a1:
         8c:26:7a:66:fa:63:72:6c:2b:83:c7:73:5f:45:f6:10:ba:ac:
         03:d2:94:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----