Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/326130613a363034343a376366303a3a2f34342d3438203d3e20323135363035.roa
File:                     326130613a363034343a376366303a3a2f34342d3438203d3e20323135363035.roa (raw, json)
Hash identifier:          5XUHhfVEOSIrkUR/8F9UJZLlHJd6mKLrYd/4ppG7eD0=
Subject key identifier:   E9:0A:F3:FE:37:00:32:CE:9E:6B:78:00:39:09:EA:51:8F:4B:D5:2F
Certificate issuer:       /CN=AE038F55F4904E67637BC2F369CA4E00D4AEAB1E
Certificate serial:       68BC22596F6C329E45E754B93941AE2D1E82CA3D
Authority key identifier: AE:03:8F:55:F4:90:4E:67:63:7B:C2:F3:69:CA:4E:00:D4:AE:AB:1E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AE038F55F4904E67637BC2F369CA4E00D4AEAB1E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/326130613a363034343a376366303a3a2f34342d3438203d3e20323135363035.roa
Signing time:             Sun 04 Feb 2024 13:07:39 +0000
ROA not before:           Sun 04 Feb 2024 13:02:39 +0000
ROA not after:            Sun 02 Feb 2025 13:07:39 +0000
asID:                     215605
IP address blocks:        2a0a:6044:7cf0::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:bc:22:59:6f:6c:32:9e:45:e7:54:b9:39:41:ae:2d:1e:82:ca:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE038F55F4904E67637BC2F369CA4E00D4AEAB1E
        Validity
            Not Before: Feb  4 13:02:39 2024 GMT
            Not After : Feb  2 13:07:39 2025 GMT
        Subject: CN=E90AF3FE370032CE9E6B78003909EA518F4BD52F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:28:ae:b8:8d:95:66:db:35:e4:25:77:8a:ad:
                    dc:36:4a:6c:03:93:59:b8:be:38:f8:c9:8f:80:3e:
                    56:39:05:80:90:03:03:7e:a8:cb:8e:15:b6:0d:24:
                    29:36:ce:91:25:58:b2:49:7d:06:1b:00:cd:e9:a0:
                    84:0c:5e:c7:49:2e:3a:95:4b:cd:e2:ea:18:ad:4d:
                    be:3a:88:1b:f6:22:5c:7d:78:54:46:05:3c:5a:56:
                    7d:21:b3:9b:3c:a9:58:08:a2:03:24:46:03:fa:8f:
                    4b:c2:c1:f3:67:94:d7:65:ac:a4:4c:3c:56:dc:bd:
                    c0:51:d9:9c:18:25:87:bf:3a:04:2e:28:82:e7:3e:
                    fa:ef:06:9c:ad:41:d0:29:81:9b:e1:e1:a4:c6:26:
                    3a:b0:99:4f:f0:d3:b6:e0:8e:53:af:82:c6:fe:3d:
                    87:b6:2a:a4:fb:e3:2a:6c:62:c5:1e:7a:20:53:0d:
                    f5:76:3a:a2:27:b9:23:a2:79:8f:e0:8a:dc:4d:9d:
                    d5:41:15:95:35:28:ed:44:61:2e:38:16:99:d3:d7:
                    07:69:d9:9e:9e:ca:22:56:c8:32:98:c0:72:0a:e3:
                    d0:32:61:03:cd:5a:fa:cf:03:04:1b:b7:28:eb:17:
                    d5:c7:ca:24:75:3e:4c:4c:be:c7:1f:f3:c1:9b:10:
                    c8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0A:F3:FE:37:00:32:CE:9E:6B:78:00:39:09:EA:51:8F:4B:D5:2F
            X509v3 Authority Key Identifier:
                keyid:AE:03:8F:55:F4:90:4E:67:63:7B:C2:F3:69:CA:4E:00:D4:AE:AB:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/AE038F55F4904E67637BC2F369CA4E00D4AEAB1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AE038F55F4904E67637BC2F369CA4E00D4AEAB1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/326130613a363034343a376366303a3a2f34342d3438203d3e20323135363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7cf0::/44

    Signature Algorithm: sha256WithRSAEncryption
         62:34:7e:2f:0f:84:85:9a:91:24:eb:dc:84:0b:a6:b2:b1:78:
         97:c7:66:db:30:8d:40:41:da:4b:7c:c5:1d:3e:be:12:24:0c:
         ed:2f:53:e7:5f:b3:90:01:f5:b3:f9:4f:0d:82:f7:8c:33:c9:
         2f:bc:cc:1d:be:63:d8:91:11:82:f9:e7:88:df:72:07:d4:f5:
         0c:2d:78:67:c0:ba:b8:09:07:1d:d0:b8:f6:5c:18:7e:6c:6a:
         fd:a6:6a:48:a0:a8:5e:e2:90:f8:6c:a5:2d:7c:0c:fe:6b:29:
         98:9a:83:f5:66:75:a7:d5:80:04:0e:89:ec:38:97:79:6c:41:
         e5:2a:97:1d:88:18:89:fc:ec:1e:82:2f:6b:08:2f:d4:6d:22:
         17:37:a0:91:13:ff:d2:84:a2:7e:3e:00:9b:84:dc:63:71:96:
         b6:48:59:8d:fe:13:7b:82:49:50:e9:8c:04:53:a6:74:db:cf:
         73:53:c4:8e:58:f4:43:4c:8b:c9:ec:54:bf:ea:f6:a9:77:e2:
         3e:98:15:7e:2f:6f:2b:cc:c6:46:5e:53:fd:7d:cd:9f:ed:72:
         25:26:03:68:61:d2:2b:3f:e6:2c:93:f3:41:99:a7:a3:95:f5:
         6e:6d:e2:6e:57:13:5a:67:50:76:8c:c3:b6:ca:3b:1e:8e:f1:
         7f:0c:89:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----