Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363330303a3a2f34302d3430203d3e20323134313239.roa
File:                     326130613a363034343a363330303a3a2f34302d3430203d3e20323134313239.roa (raw, json)
Hash identifier:          /YsNDwa8qVtfGc/R9u7p/N7g+3BhoQ5FPcE3MkaE4kw=
Subject key identifier:   55:1D:D2:BA:AC:8A:2E:E0:1E:00:D2:A6:B3:BB:4B:A2:0D:57:8D:C7
Certificate issuer:       /CN=18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA
Certificate serial:       6CDA73789A3BCA6A4AF988A97AACCCEE702DA0E8
Authority key identifier: 18:F0:32:EC:A3:64:4A:3B:74:3F:0E:B6:E8:B4:97:80:FA:D3:BC:AA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363330303a3a2f34302d3430203d3e20323134313239.roa
Signing time:             Sat 07 Dec 2024 20:33:48 +0000
ROA not before:           Sat 07 Dec 2024 20:28:48 +0000
ROA not after:            Sat 06 Dec 2025 20:33:48 +0000
asID:                     214129
IP address blocks:        2a0a:6044:6300::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:da:73:78:9a:3b:ca:6a:4a:f9:88:a9:7a:ac:cc:ee:70:2d:a0:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA
        Validity
            Not Before: Dec  7 20:28:48 2024 GMT
            Not After : Dec  6 20:33:48 2025 GMT
        Subject: CN=551DD2BAAC8A2EE01E00D2A6B3BB4BA20D578DC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2c:74:ee:9e:8e:1f:87:c6:25:90:67:7c:b5:
                    f0:ba:2f:33:4e:20:cc:a0:9d:6c:93:cb:e0:b5:09:
                    e9:50:52:43:c8:71:92:89:7b:cc:3d:7a:37:7b:1a:
                    92:58:37:1f:cc:a5:23:26:83:7c:ca:10:b5:87:96:
                    b2:84:3d:c7:b9:09:04:47:26:65:e8:20:c7:dc:cc:
                    5d:6f:5d:0b:5c:c9:22:65:3f:9d:c9:68:22:28:ab:
                    3d:fb:4b:cc:a2:ba:42:e2:3d:8e:b4:ee:49:f3:23:
                    ee:fa:b7:7c:dc:2a:00:80:77:61:d9:f2:e1:29:85:
                    16:bd:c5:4f:a6:1f:53:a3:ea:26:93:68:d5:16:95:
                    b8:62:5d:e2:0c:5d:db:2a:c9:29:12:84:98:dc:f3:
                    f8:91:5f:8c:9b:82:a2:db:45:fa:c9:9d:d6:cc:f9:
                    2f:11:8a:09:e8:f0:de:7b:07:b5:10:2d:d3:9a:e4:
                    b1:47:4f:5d:1b:fa:90:97:0c:e6:14:9a:c8:4d:8f:
                    be:ca:fd:b6:25:21:b6:eb:d8:d0:57:50:1f:88:48:
                    c6:d0:6b:e1:fb:41:f9:bc:12:82:ab:0a:e5:3a:df:
                    71:fa:bc:c7:aa:24:13:42:38:b8:a3:67:63:c5:75:
                    63:c6:32:28:d3:1a:83:42:cf:21:75:49:da:c8:30:
                    66:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1D:D2:BA:AC:8A:2E:E0:1E:00:D2:A6:B3:BB:4B:A2:0D:57:8D:C7
            X509v3 Authority Key Identifier:
                keyid:18:F0:32:EC:A3:64:4A:3B:74:3F:0E:B6:E8:B4:97:80:FA:D3:BC:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363330303a3a2f34302d3430203d3e20323134313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:6300::/40

    Signature Algorithm: sha256WithRSAEncryption
         6b:bb:6d:e1:57:2c:d2:4e:04:e2:3a:00:9a:e7:f7:47:a5:c3:
         ca:c0:94:f1:15:45:09:22:7a:62:44:a4:3f:db:2e:a1:4d:c6:
         30:ee:9b:51:c4:03:49:1f:4b:b6:6f:1a:ef:67:4b:9d:46:d3:
         e8:96:25:21:81:1e:38:72:3b:67:cf:69:26:99:44:a0:b0:26:
         6c:ba:9a:37:d0:e9:fe:32:fb:d4:5a:ac:1b:97:a9:e8:d8:b3:
         22:7c:4f:8e:52:d2:a8:99:cb:ca:94:bb:98:4d:96:5c:f5:f8:
         ee:5f:e7:ff:c6:47:41:d5:a5:02:64:4f:2e:56:d5:e8:80:6d:
         f6:64:c7:51:c7:7a:3b:fe:6b:88:29:2c:3e:33:5b:c7:94:89:
         f2:25:9b:a9:b0:7d:9c:d7:d3:8b:22:37:00:94:38:23:7b:cd:
         41:a8:4e:75:6f:27:6d:94:fe:2d:31:50:06:6c:94:4c:ee:cd:
         50:f7:df:44:ff:59:c2:bd:0e:3e:d4:a9:a9:7b:55:18:7a:5f:
         2a:a8:f1:4e:46:e7:4c:20:c3:eb:f5:ab:6b:79:97:b9:6a:78:
         e8:50:1f:b2:04:11:c9:a9:5e:ae:26:31:16:f3:47:00:2a:91:
         95:bd:d9:ff:e8:c3:48:fb:9a:83:b2:e8:99:f4:fe:92:ca:4b:
         2a:13:41:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----