Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623230303a3a2f34302d3438203d3e20323136323637.roa
File:                     326130363a313238333a623230303a3a2f34302d3438203d3e20323136323637.roa (raw, json)
Hash identifier:          n80ndnRCokQ3GTq4pZbiaCmFjFw17Dq9k6uL+Hpf3/s=
Subject key identifier:   D2:18:A3:0E:E1:F5:43:96:CB:1A:4A:8D:60:BD:75:FD:4F:D5:3A:4B
Certificate issuer:       /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial:       0F6D9B5C96F4D535D351D4082D5E1B9354E6B88F
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623230303a3a2f34302d3438203d3e20323136323637.roa
Signing time:             Wed 22 Nov 2023 18:12:29 +0000
ROA not before:           Wed 22 Nov 2023 18:07:29 +0000
ROA not after:            Wed 20 Nov 2024 18:12:29 +0000
asID:                     216267
IP address blocks:        2a06:1283:b200::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:6d:9b:5c:96:f4:d5:35:d3:51:d4:08:2d:5e:1b:93:54:e6:b8:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
        Validity
            Not Before: Nov 22 18:07:29 2023 GMT
            Not After : Nov 20 18:12:29 2024 GMT
        Subject: CN=D218A30EE1F54396CB1A4A8D60BD75FD4FD53A4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3a:d5:b9:53:0f:af:b5:d6:98:22:7d:f0:b8:
                    3b:ba:85:80:72:56:b1:63:c6:b4:c8:78:d3:15:f6:
                    fb:e8:e7:12:87:1a:97:56:1d:ac:73:46:a6:f8:2d:
                    df:87:ee:e4:bc:7e:fb:68:f7:d4:4e:40:52:e1:de:
                    dd:16:09:fa:f8:d9:a4:dd:18:9a:b5:dd:f0:86:a5:
                    79:c5:c1:82:4e:d1:b5:9b:c1:9e:8b:1d:d5:f3:c7:
                    4f:a9:37:f5:ca:cb:ed:7c:b5:f9:8a:40:bc:67:22:
                    c5:05:03:12:9b:c7:73:a8:04:48:f1:3d:62:d4:ea:
                    9b:5a:04:6a:72:92:cc:25:ba:24:b9:f6:01:e6:88:
                    0c:52:a2:31:71:27:89:61:56:8f:29:11:ab:3e:1a:
                    07:c2:bb:ee:e5:2d:b0:38:c8:33:43:48:af:87:fd:
                    4d:6d:c4:ca:42:91:36:4a:c3:78:c2:7b:5d:6c:95:
                    a4:98:c8:5b:65:8d:fc:d9:15:73:fa:fe:32:0a:1e:
                    3b:3c:2e:cc:f7:b1:66:68:86:8e:47:e3:f4:05:a1:
                    c4:0b:28:2c:a2:0c:a2:01:68:30:1f:99:23:ec:09:
                    fd:bf:ba:35:4e:aa:b8:e5:3f:26:e0:dc:34:2a:81:
                    5a:4c:e8:54:5e:f1:4c:48:27:3c:e3:a1:dd:0c:dd:
                    57:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:18:A3:0E:E1:F5:43:96:CB:1A:4A:8D:60:BD:75:FD:4F:D5:3A:4B
            X509v3 Authority Key Identifier:
                keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623230303a3a2f34302d3438203d3e20323136323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:b200::/40

    Signature Algorithm: sha256WithRSAEncryption
         96:2e:cf:7f:4e:29:1c:cc:0d:49:a3:fc:7b:16:4c:6d:44:b3:
         1a:5c:4f:b2:90:2a:36:88:66:5b:5d:8e:ac:46:a2:5b:14:20:
         82:6a:75:8c:d2:64:37:47:63:2b:0c:16:4f:d6:7d:f9:9e:7c:
         ac:af:b5:16:d7:2a:a1:93:a1:f8:6c:d1:16:73:ec:dd:51:0f:
         38:0e:ef:2a:c2:61:0f:9f:21:26:ae:e7:a4:60:23:74:d2:b8:
         fd:20:cb:74:7d:35:23:94:02:be:f5:83:bc:30:c3:8e:0e:51:
         85:50:22:8d:b9:94:0d:7c:b3:67:6c:10:85:c5:53:5d:e3:85:
         88:71:aa:78:23:fa:67:7b:61:96:a3:c1:50:d9:f5:66:34:4e:
         a7:ef:79:79:f1:6e:0c:d9:7e:46:2f:6c:85:41:32:a9:33:03:
         a3:9c:87:26:9a:1d:a0:5d:bc:77:40:6e:ad:47:00:ec:cf:63:
         45:41:3b:09:4c:ad:d0:b7:73:cb:42:cb:63:23:6d:9c:8f:01:
         e2:5e:36:3f:be:d6:ca:40:d3:06:4d:54:e4:85:74:35:e9:c6:
         09:ef:62:01:43:b9:5a:a7:56:58:f9:fe:c5:ae:82:07:fa:b5:
         f3:c5:3a:fc:87:33:31:82:b7:21:39:20:d2:c9:1c:0b:48:32:
         bf:ce:36:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----