Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363332303a3a2f34342d3434203d3e20323134313239.roa
File:                     326130613a363034343a363332303a3a2f34342d3434203d3e20323134313239.roa (raw, json)
Hash identifier:          gNLyw9gjBBQ+GM/XNzSPfSz4T+moboV9QrwtZCRqN0c=
Subject key identifier:   99:1C:6D:C4:08:00:D2:58:53:96:A0:21:3A:67:F8:43:CB:43:CE:63
Certificate issuer:       /CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
Certificate serial:       4B87A179C817D9FB18383DBAD8952C130117189E
Authority key identifier: 77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363332303a3a2f34342d3434203d3e20323134313239.roa
Signing time:             Fri 20 Dec 2024 17:27:42 +0000
ROA not before:           Fri 20 Dec 2024 17:22:42 +0000
ROA not after:            Fri 19 Dec 2025 17:27:42 +0000
asID:                     214129
IP address blocks:        2a0a:6044:6320::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:87:a1:79:c8:17:d9:fb:18:38:3d:ba:d8:95:2c:13:01:17:18:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
        Validity
            Not Before: Dec 20 17:22:42 2024 GMT
            Not After : Dec 19 17:27:42 2025 GMT
        Subject: CN=991C6DC40800D2585396A0213A67F843CB43CE63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7b:7c:66:a6:f1:38:1d:6a:30:cf:fb:4e:ab:
                    3d:12:78:e0:5f:e1:a8:7a:28:08:30:d2:97:da:0c:
                    75:8d:d8:42:b2:72:16:a4:a1:3a:b2:d2:82:15:f5:
                    e2:fa:19:1b:63:c0:90:90:f0:09:9d:52:e5:53:14:
                    af:4d:41:f1:9e:3c:70:d2:43:34:70:57:66:98:62:
                    d9:c6:7d:79:2e:64:25:6f:5c:20:fe:e4:84:2c:be:
                    26:ad:b5:a0:4f:4d:2a:00:71:35:00:d7:b9:01:3d:
                    e5:c9:01:93:31:40:c5:3e:09:ce:68:7f:f5:62:d8:
                    a0:fd:a4:0e:9d:86:90:8b:a1:c0:1e:87:b1:96:eb:
                    00:9f:79:58:e8:bf:0c:6e:4e:af:52:07:0b:9e:f8:
                    9d:65:5e:29:ad:d4:31:3c:e3:28:5e:3a:c8:6d:10:
                    7f:7a:34:19:b3:f6:4d:5a:88:a3:a3:ba:43:78:f6:
                    01:50:cf:70:b6:f5:ac:89:a6:c7:95:20:dc:b1:bd:
                    dc:d2:48:34:f6:3b:0f:9b:2b:66:47:0d:13:76:76:
                    ba:dd:71:ed:a8:ec:e8:26:d3:b2:e2:2f:7d:00:83:
                    73:3c:5d:96:17:10:50:c6:8d:b1:b7:67:05:a4:2c:
                    d5:e3:e8:37:dd:6a:12:78:91:29:91:4d:7a:27:41:
                    dc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1C:6D:C4:08:00:D2:58:53:96:A0:21:3A:67:F8:43:CB:43:CE:63
            X509v3 Authority Key Identifier:
                keyid:77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363332303a3a2f34342d3434203d3e20323134313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:6320::/44

    Signature Algorithm: sha256WithRSAEncryption
         3a:59:23:40:4f:85:99:43:af:37:22:d0:bf:99:20:99:51:d9:
         29:37:25:22:79:be:62:2a:90:a0:0a:b9:77:e2:63:32:eb:ec:
         5b:3a:90:fb:14:ee:15:5a:43:0f:c8:26:d5:b3:ca:f2:22:06:
         18:05:35:d7:d9:a1:c2:b5:4c:67:4c:50:2a:0d:ee:d3:d9:bc:
         99:4e:24:92:ac:20:b9:9b:87:79:2a:03:7d:19:4d:6a:9a:af:
         2f:4e:bc:4d:90:cf:d8:a1:7e:f8:9a:20:bc:40:3f:50:16:b7:
         f6:1a:18:73:9b:c6:ef:b3:cc:dd:dc:a8:8f:1b:b4:9c:a4:42:
         fd:b8:4d:1e:78:1f:54:08:88:c6:ba:f8:c9:3c:f1:de:0b:ae:
         af:b3:c3:99:24:0e:53:1e:79:ba:4a:b3:73:b9:7d:7c:f9:58:
         7c:fc:ec:7b:24:e8:41:96:99:80:49:c6:29:cc:fe:81:7c:b5:
         b2:78:c7:9f:34:e4:0c:05:71:c8:78:c1:bb:d0:a3:35:ed:f3:
         67:f1:88:76:69:60:f2:26:31:c6:cc:48:4e:ec:9e:18:74:a2:
         e9:61:46:5d:a8:1e:bf:a7:a1:9c:a8:fa:a5:a1:51:3c:31:3b:
         aa:16:c0:9d:04:60:ae:c8:b2:7f:d0:bf:32:66:1e:b0:4b:4c:
         e1:e6:2a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----