Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363333303a3a2f34342d3434203d3e20323134313239.roa
File:                     326130613a363034343a363333303a3a2f34342d3434203d3e20323134313239.roa (raw, json)
Hash identifier:          /TZQ3HjEgvc5uvdyUggAFH0/V2EmhAHjJxA01fJLUrs=
Subject key identifier:   C6:76:C5:95:73:2D:DB:C0:74:6E:83:C0:11:50:E0:E3:CB:E7:84:90
Certificate issuer:       /CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
Certificate serial:       604575F379BEF0C1A084D89454D3D6325CE92968
Authority key identifier: 77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363333303a3a2f34342d3434203d3e20323134313239.roa
Signing time:             Fri 20 Dec 2024 17:27:43 +0000
ROA not before:           Fri 20 Dec 2024 17:22:43 +0000
ROA not after:            Fri 19 Dec 2025 17:27:43 +0000
asID:                     214129
IP address blocks:        2a0a:6044:6330::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:45:75:f3:79:be:f0:c1:a0:84:d8:94:54:d3:d6:32:5c:e9:29:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
        Validity
            Not Before: Dec 20 17:22:43 2024 GMT
            Not After : Dec 19 17:27:43 2025 GMT
        Subject: CN=C676C595732DDBC0746E83C01150E0E3CBE78490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:89:7e:7b:08:1b:da:e6:86:bd:f5:82:f7:07:
                    3c:c5:fc:a1:6e:8f:fe:2b:d3:92:8e:3f:72:c3:68:
                    3f:96:f8:3a:50:bf:2a:a0:70:42:8e:8a:38:1d:a9:
                    76:b5:63:54:f1:f2:23:aa:98:dd:4a:30:10:98:4f:
                    20:15:31:b1:e3:47:b9:24:78:9e:22:32:1b:b2:5e:
                    07:73:1e:7f:d3:ed:69:8e:b6:01:a2:03:dd:9f:fd:
                    75:ad:8a:ad:d6:f7:88:b1:73:fd:00:dd:84:13:a4:
                    20:05:cc:04:7e:b2:5c:b6:57:ca:f0:7e:e4:ec:be:
                    42:d1:1d:94:25:4d:e1:57:6d:82:2c:7d:34:59:f4:
                    26:03:2d:af:ad:d7:df:f5:5e:d8:eb:38:d0:52:bc:
                    5b:f7:91:e8:1f:45:97:a8:2e:12:a3:53:38:ca:b3:
                    a0:24:f6:e3:64:9e:bb:ac:6d:40:d1:f2:bf:f8:cd:
                    e1:c7:e6:f7:6a:1b:02:29:bf:3b:4c:1c:cb:6e:1b:
                    33:00:68:42:72:af:7d:1a:56:af:7d:1f:9e:57:cd:
                    3e:52:9c:37:13:18:fc:78:c5:c4:02:3e:19:58:d0:
                    b3:0c:e2:ab:6a:a3:d2:95:01:fd:20:b5:76:db:72:
                    3e:68:62:60:ca:a3:c1:e3:04:7b:e4:79:6c:29:b5:
                    5f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:76:C5:95:73:2D:DB:C0:74:6E:83:C0:11:50:E0:E3:CB:E7:84:90
            X509v3 Authority Key Identifier:
                keyid:77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363333303a3a2f34342d3434203d3e20323134313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:6330::/44

    Signature Algorithm: sha256WithRSAEncryption
         7f:57:e1:d2:98:84:35:cd:29:2b:a5:d5:71:a2:74:c5:32:ac:
         17:95:3c:bf:c8:c4:64:87:c0:42:f0:db:e9:ab:b9:c4:27:0c:
         29:ef:b1:8a:f1:16:91:dd:4a:f7:e9:1a:74:fb:b5:40:b1:1e:
         a9:20:7b:01:5c:78:39:c5:ca:ae:85:7c:94:86:bc:d6:cf:aa:
         67:2c:ad:0f:c9:76:ca:3f:ad:8a:20:bd:4c:b0:94:53:e0:00:
         ff:3c:d4:d6:26:4e:6f:d4:c7:4a:2f:08:b0:1e:77:80:bb:f4:
         2a:61:35:fa:91:6d:7f:46:69:7e:06:65:8b:cc:1c:d5:fe:e5:
         98:8b:aa:37:4a:8c:11:b3:b8:76:18:f8:a3:b5:ce:e0:f4:59:
         de:e9:a5:8c:2f:78:37:be:f5:84:0c:23:53:61:49:5f:fa:c6:
         cc:d5:98:b5:02:63:21:12:82:6a:88:ea:4b:e9:84:74:c6:5a:
         f5:25:3e:0d:39:a5:a1:51:b5:f6:13:b3:df:9b:a4:67:ff:08:
         88:70:9e:8b:a7:0d:40:53:53:a7:1c:3e:6c:6c:31:2a:ae:ff:
         d4:02:07:0f:a6:16:de:e1:aa:66:6b:02:4a:c8:7b:a8:b2:7f:
         3f:ba:a6:c3:6b:92:93:55:f4:32:20:4b:c7:f4:29:70:07:3e:
         c4:a2:49:e2
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUYEV183m+8MGghNiUVNPWMlzpKWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc5NkIxQzRFRUI0MTVCNjU2Q0I0NjhBNzFCMTgxRTkz
RjJDNTBCQjAeFw0yNDEyMjAxNzIyNDNaFw0yNTEyMTkxNzI3NDNaMDMxMTAvBgNV
BAMTKEM2NzZDNTk1NzMyRERCQzA3NDZFODNDMDExNTBFMEUzQ0JFNzg0OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUiX57CBva5oa99YL3BzzF/KFu
j/4r05KOP3LDaD+W+DpQvyqgcEKOijgdqXa1Y1Tx8iOqmN1KMBCYTyAVMbHjR7kk
eJ4iMhuyXgdzHn/T7WmOtgGiA92f/XWtiq3W94ixc/0A3YQTpCAFzAR+sly2V8rw
fuTsvkLRHZQlTeFXbYIsfTRZ9CYDLa+t19/1XtjrONBSvFv3kegfRZeoLhKjUzjK
s6Ak9uNknrusbUDR8r/4zeHH5vdqGwIpvztMHMtuGzMAaEJyr30aVq99H55XzT5S
nDcTGPx4xcQCPhlY0LMM4qtqo9KVAf0gtXbbcj5oYmDKo8HjBHvkeWwptV9JAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUxnbFlXMt28B0boPAEVDg48vnhJAwHwYDVR0j
BBgwFoAUd5axxO60FbZWy0aKcbGB6T8sULswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODE4OGNmOWYtMGRlOS00NTFmLWI5MzUtYjNmZjFkODdh
NjY2LzAvNzc5NkIxQzRFRUI0MTVCNjU2Q0I0NjhBNzFCMTgxRTkzRjJDNTBCQi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC83Nzk2QjFDNEVFQjQxNUI2NTZDQjQ2OEE3
MUIxODFFOTNGMkM1MEJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS84MTg4Y2Y5Zi0wZGU5LTQ1MWYtYjkzNS1iM2ZmMWQ4N2E2NjYvMC8zMjYxMzA2
MTNhMzYzMDM0MzQzYTM2MzMzMzMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIz
MTM0MzEzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcEKgpgRGMwMA0GCSqGSIb3DQEBCwUAA4IBAQB/
V+HSmIQ1zSkrpdVxonTFMqwXlTy/yMRkh8BC8Nvpq7nEJwwp77GK8RaR3Ur36Rp0
+7VAsR6pIHsBXHg5xcquhXyUhrzWz6pnLK0PyXbKP62KIL1MsJRT4AD/PNTWJk5v
1MdKLwiwHneAu/QqYTX6kW1/Rml+BmWLzBzV/uWYi6o3SowRs7h2GPijtc7g9Fne
6aWML3g3vvWEDCNTYUlf+sbM1Zi1AmMhEoJqiOpL6YR0xlr1JT4NOaWhUbX2E7Pf
m6Rn/wiIcJ6Lpw1AU1OnHD5sbDEqrv/UAgcPphbe4apmawJKyHuosn8/uqbDa5KT
VfQyIEvH9ClwBz7Eokni
-----END CERTIFICATE-----