Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363339303a3a2f34342d3434203d3e20323134313239.roa
File:                     326130613a363034343a363339303a3a2f34342d3434203d3e20323134313239.roa (raw, json)
Hash identifier:          HE6tEgm57K2qXX50JfTGA97zW49iWovSW53g8U8xORY=
Subject key identifier:   46:64:D2:D0:C5:88:38:8D:4F:A2:60:2F:73:92:48:61:2D:DA:F4:DF
Certificate issuer:       /CN=18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA
Certificate serial:       7F46132AF5B7EA625F314D978BD73A453E981AAA
Authority key identifier: 18:F0:32:EC:A3:64:4A:3B:74:3F:0E:B6:E8:B4:97:80:FA:D3:BC:AA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363339303a3a2f34342d3434203d3e20323134313239.roa
Signing time:             Sat 07 Dec 2024 20:33:46 +0000
ROA not before:           Sat 07 Dec 2024 20:28:46 +0000
ROA not after:            Sat 06 Dec 2025 20:33:46 +0000
asID:                     214129
IP address blocks:        2a0a:6044:6390::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:46:13:2a:f5:b7:ea:62:5f:31:4d:97:8b:d7:3a:45:3e:98:1a:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA
        Validity
            Not Before: Dec  7 20:28:46 2024 GMT
            Not After : Dec  6 20:33:46 2025 GMT
        Subject: CN=4664D2D0C588388D4FA2602F739248612DDAF4DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:42:f3:35:38:14:da:67:45:2d:0f:e8:b3:62:
                    e1:04:b8:30:39:71:6b:f7:5b:2d:17:31:31:fe:7d:
                    be:f8:f9:c2:14:b6:04:5e:28:18:58:5b:52:ed:28:
                    ce:cc:53:a5:5d:70:6e:98:5a:0d:ff:17:4b:85:b8:
                    83:35:18:a2:91:e0:36:f2:49:02:c0:2a:66:ae:cf:
                    d0:e6:d7:10:e0:bd:8f:c7:24:50:93:9d:23:85:a5:
                    11:2d:f1:fa:bb:ef:06:f2:1f:df:c5:19:53:37:3c:
                    93:ff:4e:54:a7:dc:0a:f6:65:2e:d9:ab:48:48:cf:
                    c2:cd:f5:b5:ca:ad:ee:03:09:58:16:e6:eb:9e:29:
                    61:e1:3b:a4:0c:85:7d:17:82:84:d7:a7:53:08:9e:
                    65:ef:2e:2a:a9:11:ac:d8:64:8c:3d:a5:e0:ad:43:
                    04:d0:a4:8e:02:06:a3:9c:34:50:1c:eb:4c:1e:2c:
                    fc:29:3c:56:74:c2:57:ea:77:0f:b9:24:fe:ca:40:
                    14:0c:50:d7:ad:bb:8c:55:c4:48:2c:b2:f9:34:15:
                    b1:05:49:f7:7c:9d:01:a4:46:84:12:b8:d9:e8:11:
                    b9:3a:25:ac:75:40:17:9e:e2:57:56:cb:83:74:7d:
                    f0:61:00:d9:b0:83:e9:ce:31:60:fa:92:cd:9a:c6:
                    b6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:64:D2:D0:C5:88:38:8D:4F:A2:60:2F:73:92:48:61:2D:DA:F4:DF
            X509v3 Authority Key Identifier:
                keyid:18:F0:32:EC:A3:64:4A:3B:74:3F:0E:B6:E8:B4:97:80:FA:D3:BC:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363339303a3a2f34342d3434203d3e20323134313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:6390::/44

    Signature Algorithm: sha256WithRSAEncryption
         02:85:30:b0:f2:93:b4:68:0d:b9:07:d5:d6:53:1d:2c:bb:70:
         2a:19:53:05:33:66:ac:64:bd:96:27:d0:0a:0f:65:07:97:79:
         02:27:c2:5a:ac:83:a5:e8:44:8f:f5:e3:75:03:98:8e:28:5d:
         0a:8e:fc:20:13:ae:e5:c1:0e:75:00:01:48:5d:1f:53:07:c7:
         27:eb:91:ba:25:07:ec:61:2c:28:c5:09:72:d8:be:6d:47:c8:
         c6:31:98:92:ba:c1:0d:5c:2b:0a:aa:10:ff:a4:b7:2f:c5:35:
         87:67:4c:f2:a0:95:44:21:5a:78:c6:14:2c:e7:d8:40:90:99:
         39:57:3f:2c:b6:06:35:b2:c4:78:8a:2a:9a:97:77:79:6c:cd:
         45:b9:64:36:be:9a:57:0b:ad:97:93:69:44:0d:4d:89:d4:72:
         6c:44:31:58:1c:1d:70:16:52:d8:b4:02:4b:45:d1:24:ea:07:
         f7:0f:5c:39:ad:8f:5d:5b:3e:5d:dd:d2:1b:40:69:5d:55:e2:
         aa:85:a4:23:2c:9a:39:2a:fd:30:e7:9f:45:d0:87:35:82:82:
         80:ed:20:3b:57:07:1f:c8:48:3b:37:13:f9:3b:30:e3:c9:b2:
         19:07:ec:dc:a5:95:50:e4:2e:ab:05:13:03:83:ed:0c:b6:16:
         f4:a6:06:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----