Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/326130613a363034343a376366303a3a2f34342d3434203d3e20323135363035.roa
File:                     326130613a363034343a376366303a3a2f34342d3434203d3e20323135363035.roa (raw, json)
Hash identifier:          mFeNNtx+gBOS326xCqmLlSV+MObZhbo3CJ36/33lJxY=
Subject key identifier:   A2:3E:A9:5E:C1:61:DD:36:2F:6C:C4:0C:92:75:C0:61:52:C5:AF:FD
Certificate issuer:       /CN=AE038F55F4904E67637BC2F369CA4E00D4AEAB1E
Certificate serial:       47DFAFC0D7E7E060B7E545B7B206376552366063
Authority key identifier: AE:03:8F:55:F4:90:4E:67:63:7B:C2:F3:69:CA:4E:00:D4:AE:AB:1E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AE038F55F4904E67637BC2F369CA4E00D4AEAB1E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/326130613a363034343a376366303a3a2f34342d3434203d3e20323135363035.roa
Signing time:             Thu 14 Mar 2024 08:27:59 +0000
ROA not before:           Thu 14 Mar 2024 08:22:59 +0000
ROA not after:            Thu 13 Mar 2025 08:27:59 +0000
asID:                     215605
IP address blocks:        2a0a:6044:7cf0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:df:af:c0:d7:e7:e0:60:b7:e5:45:b7:b2:06:37:65:52:36:60:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE038F55F4904E67637BC2F369CA4E00D4AEAB1E
        Validity
            Not Before: Mar 14 08:22:59 2024 GMT
            Not After : Mar 13 08:27:59 2025 GMT
        Subject: CN=A23EA95EC161DD362F6CC40C9275C06152C5AFFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2f:01:07:3f:98:af:10:84:7e:09:17:c8:cd:
                    34:83:24:10:88:65:3c:af:9e:0b:9f:58:2a:ee:10:
                    0c:40:eb:9a:bb:fe:72:03:ab:40:65:13:59:1b:c1:
                    f8:9f:44:ba:6e:73:11:12:35:ed:bf:87:9a:5b:16:
                    f9:97:91:d4:23:70:9c:86:cd:b8:28:6e:06:b1:52:
                    bb:ce:1b:eb:6c:b4:13:c4:cc:13:41:b7:df:ad:db:
                    ec:a9:19:68:f8:bd:15:c0:54:48:1a:64:3b:0f:1e:
                    41:58:02:5a:f6:88:9b:a9:c7:35:d6:fe:20:ea:a8:
                    4a:7b:d6:77:4a:dc:a2:f9:58:b5:ef:2b:bf:21:b1:
                    b1:67:91:f7:1b:1f:f3:58:1f:3b:5d:de:1b:30:5b:
                    41:f4:05:bd:20:3e:3a:3b:66:44:16:a4:77:b1:78:
                    94:9e:40:e2:9d:7d:e2:e7:f8:78:bb:9e:9a:51:96:
                    94:07:ef:e6:b8:c6:4e:bd:f2:35:4f:b1:21:3e:fc:
                    3d:f8:5a:9b:ed:da:4d:d7:f4:72:18:8f:96:c5:a2:
                    e1:19:80:a5:48:f5:c4:24:8f:e4:9d:45:20:11:69:
                    d9:0b:e7:14:5f:e3:48:0c:90:41:e1:d1:ab:cf:80:
                    5a:af:76:6e:1b:4e:a0:69:be:26:58:09:37:5d:59:
                    d4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3E:A9:5E:C1:61:DD:36:2F:6C:C4:0C:92:75:C0:61:52:C5:AF:FD
            X509v3 Authority Key Identifier:
                keyid:AE:03:8F:55:F4:90:4E:67:63:7B:C2:F3:69:CA:4E:00:D4:AE:AB:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/AE038F55F4904E67637BC2F369CA4E00D4AEAB1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AE038F55F4904E67637BC2F369CA4E00D4AEAB1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/326130613a363034343a376366303a3a2f34342d3434203d3e20323135363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7cf0::/44

    Signature Algorithm: sha256WithRSAEncryption
         22:d6:d1:b5:ef:e4:57:69:87:15:99:70:98:4e:b2:c4:d2:bb:
         cb:f4:a1:7f:44:9d:8c:43:47:26:5c:85:56:ff:f9:d3:59:40:
         7f:06:66:5f:bc:eb:3d:b8:05:cc:de:f9:01:83:96:52:fc:f0:
         bd:6b:06:29:8f:7e:f8:71:49:6f:d2:ab:8a:30:90:f1:15:df:
         8d:68:c9:b0:7e:0e:59:14:1c:1d:6a:e2:10:60:1b:23:ca:4b:
         e6:fe:fe:68:2a:1d:61:28:99:cb:92:ba:60:b6:a1:97:be:db:
         1f:a1:05:0b:5a:e0:01:9c:a5:c4:03:ce:9c:33:23:0b:f6:a3:
         bf:46:04:be:e3:10:29:1c:04:10:a3:63:da:b8:d4:59:6f:5c:
         37:a6:7b:e5:eb:00:4a:ee:d6:0e:1e:4c:40:ac:ab:59:64:5d:
         3f:d1:e8:54:1c:cc:cc:00:32:a3:b3:3d:0f:7a:bf:87:85:db:
         69:f3:97:92:f3:05:ff:ef:22:c3:66:2c:f2:45:c2:c6:ea:d9:
         5b:04:6e:e5:d4:e6:ef:c9:a4:e9:f9:f6:01:26:9f:96:94:41:
         58:37:57:75:18:35:0c:f6:1c:db:20:e0:e0:4d:00:1f:2a:a1:
         94:d8:87:4a:c5:58:d5:df:39:02:2b:d8:7a:cb:56:d7:57:69:
         d8:27:97:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----