Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/3/326130623a346530373a313030303a3a2f33372d3438203d3e20323134373537.roa
File:                     326130623a346530373a313030303a3a2f33372d3438203d3e20323134373537.roa (raw, json)
Hash identifier:          0yXs4kUifrJAh8dLFjOp0jhJ2EC+pi7VgkNOhf6J63k=
Subject key identifier:   2E:99:6A:86:73:1A:AB:F4:B8:ED:28:B2:45:42:43:B8:03:A2:92:14
Certificate issuer:       /CN=E79FD76484BBAC1B768955A2173762C8B694F46F
Certificate serial:       5AEE19095DD93A12D8C39BA030E1E8843CB96876
Authority key identifier: E7:9F:D7:64:84:BB:AC:1B:76:89:55:A2:17:37:62:C8:B6:94:F4:6F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/E79FD76484BBAC1B768955A2173762C8B694F46F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/3/326130623a346530373a313030303a3a2f33372d3438203d3e20323134373537.roa
Signing time:             Fri 30 Aug 2024 14:21:58 +0000
ROA not before:           Fri 30 Aug 2024 14:16:58 +0000
ROA not after:            Fri 29 Aug 2025 14:21:58 +0000
asID:                     214757
IP address blocks:        2a0b:4e07:1000::/37 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ee:19:09:5d:d9:3a:12:d8:c3:9b:a0:30:e1:e8:84:3c:b9:68:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E79FD76484BBAC1B768955A2173762C8B694F46F
        Validity
            Not Before: Aug 30 14:16:58 2024 GMT
            Not After : Aug 29 14:21:58 2025 GMT
        Subject: CN=2E996A86731AABF4B8ED28B2454243B803A29214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:14:f9:4c:98:2d:bb:14:aa:66:8b:0f:2d:29:
                    e5:7e:c5:c8:c8:30:31:63:e6:dd:b8:80:b2:c6:4e:
                    5f:83:b1:02:63:17:d2:e1:c6:22:31:b4:05:37:fe:
                    24:21:7a:28:dc:29:b9:d0:9b:ba:6d:b0:2a:f2:60:
                    69:64:3b:40:11:e9:a0:ba:64:7a:f4:bc:a5:79:35:
                    30:77:bd:df:0d:e5:e7:00:ff:8d:d0:66:47:6f:55:
                    9f:3b:74:05:b9:c0:30:0c:db:5e:57:5e:33:43:b9:
                    61:80:3e:3d:b3:27:77:b4:00:9e:82:88:fb:ae:1f:
                    ff:c5:00:86:1d:dd:10:66:63:11:02:0f:0f:bc:55:
                    41:81:a2:b1:11:86:31:a0:5d:57:3f:85:9a:67:58:
                    2e:7c:6b:ef:f9:61:32:b7:57:f6:69:14:32:c7:2c:
                    2c:8c:5e:eb:42:d0:79:b9:ab:5e:b3:90:4a:c3:87:
                    c5:05:0a:94:2f:eb:9d:64:f2:8b:65:33:04:75:2c:
                    0d:bb:66:66:6e:0c:39:bd:85:02:0e:c8:c7:3c:c1:
                    25:1c:e1:53:4a:fb:66:f7:07:70:50:f1:e8:4b:0b:
                    d7:33:99:81:49:e8:f3:4c:91:13:dc:36:54:1a:6c:
                    f7:22:f6:19:02:d8:0d:8a:9a:89:a6:12:79:96:a6:
                    e7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:99:6A:86:73:1A:AB:F4:B8:ED:28:B2:45:42:43:B8:03:A2:92:14
            X509v3 Authority Key Identifier:
                keyid:E7:9F:D7:64:84:BB:AC:1B:76:89:55:A2:17:37:62:C8:B6:94:F4:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/3/E79FD76484BBAC1B768955A2173762C8B694F46F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/E79FD76484BBAC1B768955A2173762C8B694F46F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/3/326130623a346530373a313030303a3a2f33372d3438203d3e20323134373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:1000::/37

    Signature Algorithm: sha256WithRSAEncryption
         1a:c6:53:11:28:d9:d8:e8:c7:38:56:b9:bd:30:1a:2a:ea:5f:
         08:5b:22:65:df:9b:6b:76:20:fc:3f:33:34:c5:c0:09:89:af:
         c4:2f:5a:31:37:96:c0:7b:75:9b:05:5d:ac:1f:bd:d7:d7:14:
         4b:3f:6b:5e:3f:c2:66:2d:4f:ea:e3:a1:37:ce:47:1f:35:c7:
         dd:7f:65:30:95:b9:e4:9d:1f:16:83:fa:90:0d:9a:88:53:42:
         82:03:5e:4d:be:40:84:0f:a9:5b:06:ce:3e:31:92:2e:08:42:
         40:08:1f:18:26:ea:e4:83:ed:92:62:d9:20:36:14:cf:1c:e7:
         1f:f5:49:15:dc:87:4d:85:77:de:11:5f:5a:58:b0:7b:65:03:
         26:a9:3b:b9:12:8f:64:46:a9:92:02:c8:8c:0e:7e:7b:4f:68:
         0b:2c:fd:c2:d3:6f:89:fa:db:f3:02:14:27:c6:fa:73:0f:61:
         46:e2:e9:af:cc:bc:1f:93:5b:06:cf:2c:66:dc:c8:48:f3:84:
         75:3e:c2:76:b7:19:b2:4b:44:f9:c0:86:39:0d:73:a3:5d:03:
         bb:18:22:b1:6f:b3:91:6d:3f:8d:83:84:9b:97:37:2b:25:d9:
         aa:60:8c:b8:d3:d7:61:55:41:00:3e:b5:11:70:08:c5:63:26:
         8c:97:27:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----