Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5ba53c38-6e6c-48d0-9f29-5428a4f3744a/0/326131323a363263303a3a2f34382d3438203d3e203531373431.roa
File:                     326131323a363263303a3a2f34382d3438203d3e203531373431.roa (raw, json)
Hash identifier:          PivynMWwq5P8aQaW6CmsYU2+IwGWMW/+8hQW9we+Np0=
Subject key identifier:   9E:9F:0D:5A:00:8B:60:4C:24:50:22:DE:6C:A3:52:42:B8:DD:EB:D9
Certificate issuer:       /CN=4055d133e6c4e342a1e28e5f6c47ca49aebd35f1
Certificate serial:       11281FF5F88D71E4C24083B99AD6288B4B2AD885
Authority key identifier: 40:55:D1:33:E6:C4:E3:42:A1:E2:8E:5F:6C:47:CA:49:AE:BD:35:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QFXRM-bE40Kh4o5fbEfKSa69NfE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/5ba53c38-6e6c-48d0-9f29-5428a4f3744a/0/326131323a363263303a3a2f34382d3438203d3e203531373431.roa
Signing time:             Fri 29 Mar 2024 20:17:34 +0000
ROA not before:           Fri 29 Mar 2024 20:12:34 +0000
ROA not after:            Fri 28 Mar 2025 20:17:34 +0000
asID:                     51741
IP address blocks:        2a12:62c0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:28:1f:f5:f8:8d:71:e4:c2:40:83:b9:9a:d6:28:8b:4b:2a:d8:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4055d133e6c4e342a1e28e5f6c47ca49aebd35f1
        Validity
            Not Before: Mar 29 20:12:34 2024 GMT
            Not After : Mar 28 20:17:34 2025 GMT
        Subject: CN=9E9F0D5A008B604C245022DE6CA35242B8DDEBD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8e:bb:cc:4d:7b:45:dd:59:59:55:0e:ed:03:
                    16:0d:1d:8d:98:97:ec:46:79:ec:5f:f0:0d:99:9f:
                    6a:35:a3:cf:70:8d:45:56:04:2d:96:e0:9c:ec:36:
                    fc:c5:5c:f8:c7:29:6d:99:74:07:d0:3d:42:ba:1b:
                    f4:cd:74:c9:8f:57:c1:1d:e9:2c:53:23:78:65:30:
                    fe:61:9b:cd:29:3d:98:07:d8:f0:0d:e5:86:2c:e6:
                    f3:a0:26:5c:cd:26:55:f5:4a:52:f8:c5:e8:81:7a:
                    58:5c:20:47:75:03:29:cc:39:be:a6:a7:b9:ff:04:
                    7f:34:59:9d:8b:d0:92:2b:74:89:d9:75:59:1e:fe:
                    ae:70:d0:43:e2:6d:08:bb:91:b6:b0:8f:79:0f:cc:
                    f8:d9:3a:dc:7e:10:c4:bf:d4:bc:98:9c:dd:a8:e2:
                    a4:d8:19:ec:f8:2b:1e:19:6d:7c:a9:58:0d:fb:3e:
                    ae:62:1f:34:5e:0b:84:26:fe:0a:0a:ae:5b:dd:25:
                    03:35:ce:c2:7d:7c:26:28:09:f4:c3:ed:8f:ba:9a:
                    62:b5:80:15:e8:fd:e4:ee:e2:67:9a:0f:2e:e0:77:
                    bf:92:a2:fc:bc:d3:5c:58:6b:4d:29:69:89:9e:4f:
                    6c:d5:16:09:c7:e0:55:ae:c1:71:a1:ee:83:e0:83:
                    90:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9F:0D:5A:00:8B:60:4C:24:50:22:DE:6C:A3:52:42:B8:DD:EB:D9
            X509v3 Authority Key Identifier:
                keyid:40:55:D1:33:E6:C4:E3:42:A1:E2:8E:5F:6C:47:CA:49:AE:BD:35:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/5ba53c38-6e6c-48d0-9f29-5428a4f3744a/0/4055D133E6C4E342A1E28E5F6C47CA49AEBD35F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFXRM-bE40Kh4o5fbEfKSa69NfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5ba53c38-6e6c-48d0-9f29-5428a4f3744a/0/326131323a363263303a3a2f34382d3438203d3e203531373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:62c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:94:50:1d:dc:85:d7:bb:38:26:de:ae:67:10:e9:5d:11:8c:
         cd:bf:49:59:f4:27:48:bc:46:2a:ef:6f:ec:3b:43:60:5f:db:
         ec:df:28:45:f4:c7:9b:b4:d9:ea:fd:0c:b6:6a:7e:10:9f:46:
         6f:58:ac:72:1e:c5:9a:9b:ee:7f:31:d5:84:45:bc:11:7f:0d:
         17:c4:0d:1c:24:c9:d8:54:7f:18:2f:a5:72:2f:96:27:20:40:
         2a:b7:25:3c:8e:23:40:fa:58:67:a0:bc:29:1a:70:5e:de:65:
         d2:67:ca:1c:09:7d:9a:e0:b4:b9:d6:75:03:73:ad:6c:c7:c9:
         3b:2f:1d:7a:c2:64:8b:6e:e3:8c:6d:e8:94:4a:b4:dd:a2:e6:
         70:f8:7d:1c:61:03:21:83:bd:a4:8b:a0:38:80:02:15:18:1a:
         42:88:01:92:4c:78:b1:9f:f0:69:15:d2:56:6f:9e:5b:16:20:
         c1:da:52:0c:ab:10:0f:b1:4a:c4:38:fe:cd:a1:f7:bb:3b:30:
         bc:ed:8d:2f:40:10:52:74:83:ff:bd:d7:92:6c:db:f9:5a:f7:
         c6:2f:45:b4:44:4f:5b:8e:eb:0f:74:dd:36:20:06:59:66:51:
         23:f1:98:82:11:ed:58:11:2e:c5:7b:9d:4e:f8:eb:78:02:0d:
         2d:28:47:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----