Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/1/326130613a363034343a376430303a3a2f34342d3434203d3e20323134353130.roa
File:                     326130613a363034343a376430303a3a2f34342d3434203d3e20323134353130.roa (raw, json)
Hash identifier:          Gv+e+EAdByeq5hm7hBAHx8qzpVKZEBMeZOuS5oO3NRk=
Subject key identifier:   0D:CD:7D:27:D5:30:30:0B:0E:B6:FA:99:E3:C9:E8:23:D1:72:72:52
Certificate issuer:       /CN=B5A381A0FBA779028D2A777759668131A0F8F62F
Certificate serial:       45D8FDA5A5F3B704B8468648AB9FC94EEA80B4C7
Authority key identifier: B5:A3:81:A0:FB:A7:79:02:8D:2A:77:77:59:66:81:31:A0:F8:F6:2F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B5A381A0FBA779028D2A777759668131A0F8F62F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/1/326130613a363034343a376430303a3a2f34342d3434203d3e20323134353130.roa
Signing time:             Tue 03 Dec 2024 14:07:34 +0000
ROA not before:           Tue 03 Dec 2024 14:02:34 +0000
ROA not after:            Tue 02 Dec 2025 14:07:34 +0000
asID:                     214510
IP address blocks:        2a0a:6044:7d00::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d8:fd:a5:a5:f3:b7:04:b8:46:86:48:ab:9f:c9:4e:ea:80:b4:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5A381A0FBA779028D2A777759668131A0F8F62F
        Validity
            Not Before: Dec  3 14:02:34 2024 GMT
            Not After : Dec  2 14:07:34 2025 GMT
        Subject: CN=0DCD7D27D530300B0EB6FA99E3C9E823D1727252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3c:e2:05:73:d3:22:e2:06:79:a1:bd:7f:dd:
                    3b:fa:c9:12:96:c3:dc:5c:71:9d:70:7d:3b:8d:65:
                    25:27:72:63:2a:2b:ea:24:f3:59:63:de:74:07:b9:
                    78:0e:16:21:38:15:d3:60:b1:b7:83:c3:1f:3a:a4:
                    81:8e:1e:b3:3f:58:80:95:f0:8e:59:ee:6a:18:72:
                    a8:43:29:f7:e5:66:5a:d8:39:2b:0d:ab:4d:a4:68:
                    3a:54:91:02:03:6f:4d:c5:0c:d1:ef:25:de:b2:77:
                    34:ff:7b:8f:b0:25:97:7d:d1:c7:02:85:95:fe:79:
                    53:1f:8f:a4:38:66:37:5f:79:10:ab:d5:fd:73:3c:
                    33:dc:3d:c7:86:ee:51:30:56:14:af:27:c2:b9:42:
                    6c:0c:dc:e3:a5:ec:15:f8:82:1e:5d:4b:3d:32:57:
                    9d:63:d4:ce:90:0c:9b:0f:7e:f5:ec:9f:e0:1c:67:
                    57:cc:a0:45:db:9a:a4:0d:d6:26:24:71:1f:1b:f9:
                    aa:31:05:dc:bf:91:3b:f4:eb:3c:fb:25:35:b0:c6:
                    b9:30:ef:2a:98:76:85:bc:ea:84:2a:0a:f7:fb:a1:
                    98:64:ec:3d:2b:f8:d2:5a:f8:16:61:5c:14:b8:d6:
                    d0:2d:65:bd:0c:ba:d3:ad:41:8a:17:9c:c4:a9:c6:
                    5c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CD:7D:27:D5:30:30:0B:0E:B6:FA:99:E3:C9:E8:23:D1:72:72:52
            X509v3 Authority Key Identifier:
                keyid:B5:A3:81:A0:FB:A7:79:02:8D:2A:77:77:59:66:81:31:A0:F8:F6:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/1/B5A381A0FBA779028D2A777759668131A0F8F62F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B5A381A0FBA779028D2A777759668131A0F8F62F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/1/326130613a363034343a376430303a3a2f34342d3434203d3e20323134353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7d00::/44

    Signature Algorithm: sha256WithRSAEncryption
         8b:14:f9:01:e8:07:7f:18:e6:8c:9f:f1:46:93:34:41:87:fc:
         6a:3a:54:0f:e4:27:81:02:06:cc:da:43:96:3c:25:47:8f:78:
         f3:fa:b3:c8:eb:45:52:ef:e0:f7:bb:68:6f:ef:b5:08:a0:f1:
         5d:75:f3:81:94:34:33:d2:b0:97:00:7a:9d:c5:5c:d6:87:1b:
         18:f1:4d:d4:03:10:11:3e:6e:c0:1e:3d:4c:e5:94:e2:00:05:
         19:8e:c5:63:e4:01:13:33:5b:d2:9f:bf:8f:01:f1:c8:fd:f3:
         00:98:69:58:fd:a0:24:ad:82:9e:2e:a2:c2:bd:57:06:1d:14:
         aa:55:52:d4:d6:c1:4a:f4:89:fa:b3:d6:d4:fa:42:e9:84:21:
         94:1f:a4:c1:e7:0e:aa:78:d3:ee:b9:c2:a4:9e:f0:c5:8a:68:
         e7:9d:c8:d5:e1:0a:46:a5:e8:9f:88:e4:6b:87:d6:62:a5:af:
         f7:76:38:5e:5b:e7:97:2f:58:8f:fe:33:67:47:de:e0:3b:8a:
         9a:d8:b4:a1:75:07:66:33:ab:3b:93:a6:49:d0:8b:27:37:07:
         47:3e:19:f9:1b:a8:10:c9:b6:a1:76:ea:9b:b3:e2:ff:0f:60:
         f4:75:35:47:a5:ea:8b:02:ca:6d:33:a2:ae:38:39:bd:c2:5b:
         2e:1e:7d:c2
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIURdj9paXztwS4RoZIq5/JTuqAtMcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVBMzgxQTBGQkE3NzkwMjhEMkE3Nzc3NTk2NjgxMzFB
MEY4RjYyRjAeFw0yNDEyMDMxNDAyMzRaFw0yNTEyMDIxNDA3MzRaMDMxMTAvBgNV
BAMTKDBEQ0Q3RDI3RDUzMDMwMEIwRUI2RkE5OUUzQzlFODIzRDE3MjcyNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+POIFc9Mi4gZ5ob1/3Tv6yRKW
w9xccZ1wfTuNZSUncmMqK+ok81lj3nQHuXgOFiE4FdNgsbeDwx86pIGOHrM/WICV
8I5Z7moYcqhDKfflZlrYOSsNq02kaDpUkQIDb03FDNHvJd6ydzT/e4+wJZd90ccC
hZX+eVMfj6Q4ZjdfeRCr1f1zPDPcPceG7lEwVhSvJ8K5QmwM3OOl7BX4gh5dSz0y
V51j1M6QDJsPfvXsn+AcZ1fMoEXbmqQN1iYkcR8b+aoxBdy/kTv06zz7JTWwxrkw
7yqYdoW86oQqCvf7oZhk7D0r+NJa+BZhXBS41tAtZb0MutOtQYoXnMSpxlzfAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUDc19J9UwMAsOtvqZ48noI9FyclIwHwYDVR0j
BBgwFoAUtaOBoPuneQKNKnd3WWaBMaD49i8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNGJmYTdhOWYtMjhkMy00NWIwLWE4MzktYTU3NTE5ZWNh
ZWFlLzEvQjVBMzgxQTBGQkE3NzkwMjhEMkE3Nzc3NTk2NjgxMzFBMEY4RjYyRi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9CNUEzODFBMEZCQTc3OTAyOEQyQTc3Nzc1
OTY2ODEzMUEwRjhGNjJGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS80YmZhN2E5Zi0yOGQzLTQ1YjAtYTgzOS1hNTc1MTllY2FlYWUvMS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTM3NjQzMDMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIz
MTM0MzUzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcEKgpgRH0AMA0GCSqGSIb3DQEBCwUAA4IBAQCL
FPkB6Ad/GOaMn/FGkzRBh/xqOlQP5CeBAgbM2kOWPCVHj3jz+rPI60VS7+D3u2hv
77UIoPFddfOBlDQz0rCXAHqdxVzWhxsY8U3UAxARPm7AHj1M5ZTiAAUZjsVj5AET
M1vSn7+PAfHI/fMAmGlY/aAkrYKeLqLCvVcGHRSqVVLU1sFK9In6s9bU+kLphCGU
H6TB5w6qeNPuucKknvDFimjnncjV4QpGpeifiORrh9Zipa/3djheW+eXL1iP/jNn
R97gO4qa2LShdQdmM6s7k6ZJ0IsnNwdHPhn5G6gQybahduqbs+L/D2D0dTVHpeqL
AsptM6KuODm9wlsuHn3C
-----END CERTIFICATE-----