Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/326130613a363034343a616337303a3a2f34342d3438203d3e20323134373537.roa
File:                     326130613a363034343a616337303a3a2f34342d3438203d3e20323134373537.roa (raw, json)
Hash identifier:          FSvDJnvBb9JZOIRSY3tmRV+iA3B/nnOtW/fgEjlH7Kg=
Subject key identifier:   6F:52:8B:64:D0:25:8B:29:F2:0F:8B:1C:80:C8:6B:F8:7A:85:19:2C
Certificate issuer:       /CN=E78C2AFCF0927B952709E9D02232AAF22369820A
Certificate serial:       17BB3910D3BEFB446D92DA4089358D1B96C3A5C6
Authority key identifier: E7:8C:2A:FC:F0:92:7B:95:27:09:E9:D0:22:32:AA:F2:23:69:82:0A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E78C2AFCF0927B952709E9D02232AAF22369820A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/326130613a363034343a616337303a3a2f34342d3438203d3e20323134373537.roa
Signing time:             Fri 30 Aug 2024 14:21:40 +0000
ROA not before:           Fri 30 Aug 2024 14:16:40 +0000
ROA not after:            Fri 29 Aug 2025 14:21:40 +0000
asID:                     214757
IP address blocks:        2a0a:6044:ac70::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:bb:39:10:d3:be:fb:44:6d:92:da:40:89:35:8d:1b:96:c3:a5:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78C2AFCF0927B952709E9D02232AAF22369820A
        Validity
            Not Before: Aug 30 14:16:40 2024 GMT
            Not After : Aug 29 14:21:40 2025 GMT
        Subject: CN=6F528B64D0258B29F20F8B1C80C86BF87A85192C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c9:03:cf:73:d2:66:bf:d9:5f:f6:6a:ba:5b:
                    32:75:e3:68:60:fc:14:3c:42:bb:e8:6b:76:e5:0f:
                    20:24:aa:fa:d0:a9:31:51:a3:35:dd:79:fc:ca:63:
                    37:4c:d2:e9:95:cf:0e:33:7f:67:18:cb:58:89:38:
                    d7:fc:4d:36:1f:62:b2:85:6a:e2:51:16:04:d5:29:
                    61:3a:0e:08:dc:74:c6:e8:da:ff:b0:89:0d:d1:e8:
                    c2:b8:e5:03:98:83:44:dd:c7:84:67:32:48:d7:40:
                    cb:e6:17:ca:a6:55:16:e7:a0:10:65:4c:cc:c6:ed:
                    aa:4c:21:07:e6:3e:0e:7c:5b:7b:42:96:dc:02:56:
                    c1:c3:80:fe:db:a3:45:91:c9:93:16:af:45:80:21:
                    12:f4:95:1a:07:fe:e1:b7:e7:bb:40:20:59:f2:f7:
                    1a:f7:2c:ad:27:69:20:76:70:6f:f9:7e:c0:8b:9c:
                    3f:6d:13:8c:0c:7e:62:07:73:f3:cd:f9:f0:81:3a:
                    16:e9:ce:78:4e:30:b7:36:a7:11:68:25:b8:6a:c0:
                    de:cd:84:b6:ca:1f:c8:b5:79:22:1e:ba:3b:b1:3d:
                    f6:e9:33:cc:a6:0f:fc:56:cc:27:2c:60:11:cc:3c:
                    f2:77:47:d0:be:7c:1c:11:9e:62:e3:74:4f:f1:81:
                    f3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:52:8B:64:D0:25:8B:29:F2:0F:8B:1C:80:C8:6B:F8:7A:85:19:2C
            X509v3 Authority Key Identifier:
                keyid:E7:8C:2A:FC:F0:92:7B:95:27:09:E9:D0:22:32:AA:F2:23:69:82:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/E78C2AFCF0927B952709E9D02232AAF22369820A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E78C2AFCF0927B952709E9D02232AAF22369820A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/326130613a363034343a616337303a3a2f34342d3438203d3e20323134373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ac70::/44

    Signature Algorithm: sha256WithRSAEncryption
         74:d0:f7:9f:26:31:9c:f1:68:b4:07:75:42:87:cf:03:64:f4:
         19:e1:43:68:39:c2:63:f4:fb:29:88:ab:79:97:ab:5e:f4:e5:
         dd:7b:d0:41:08:be:ed:8b:43:31:86:e2:91:2f:40:d9:23:95:
         1b:26:27:a1:b3:a8:0f:bf:87:d8:ec:15:1e:d9:c4:4c:26:09:
         87:a7:ee:ff:0d:4f:78:1b:06:43:87:7c:8c:90:d7:ee:f7:48:
         0c:5d:08:4d:8d:4d:39:b5:ed:72:9e:b0:f7:da:4f:06:71:16:
         b1:ba:ec:61:23:c5:1b:48:86:8f:22:4e:7e:07:92:d2:06:7f:
         6a:cd:e8:9e:4f:61:7c:74:d2:c8:99:ae:1f:c4:54:20:6a:4d:
         1b:84:0a:ee:7c:44:f6:6e:36:cd:39:a3:c1:d6:01:c3:6e:09:
         2c:51:20:1d:a7:c5:fb:98:6c:84:4f:3c:85:b0:7d:9b:3a:c0:
         14:4c:95:ca:f3:6e:6e:1a:ab:1a:05:24:25:34:fb:42:e9:56:
         ad:ae:18:91:c9:45:37:03:0d:45:a8:a2:c2:4f:5d:16:ae:f8:
         3b:11:9b:8e:54:c2:29:d3:f0:6f:3e:1a:08:c3:87:69:9b:3e:
         d8:c3:db:e5:13:61:31:22:5a:d1:c3:55:06:94:cb:bd:fd:a9:
         19:a0:75:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----