Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363334303a3a2f34342d3434203d3e20323134313239.roa
File:                     326130613a363034343a363334303a3a2f34342d3434203d3e20323134313239.roa (raw, json)
Hash identifier:          xu1Kr9mZ6rpVfrObJrYSyRm7eAuspUneDFpBXhkTeZc=
Subject key identifier:   89:68:D0:6D:F5:F5:31:0D:FF:61:39:EE:E6:59:04:57:68:3F:9A:3C
Certificate issuer:       /CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
Certificate serial:       439CC53AC774C7452210FC7137A9954F42EA22CA
Authority key identifier: 77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363334303a3a2f34342d3434203d3e20323134313239.roa
Signing time:             Fri 20 Dec 2024 17:27:43 +0000
ROA not before:           Fri 20 Dec 2024 17:22:43 +0000
ROA not after:            Fri 19 Dec 2025 17:27:43 +0000
asID:                     214129
IP address blocks:        2a0a:6044:6340::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:9c:c5:3a:c7:74:c7:45:22:10:fc:71:37:a9:95:4f:42:ea:22:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
        Validity
            Not Before: Dec 20 17:22:43 2024 GMT
            Not After : Dec 19 17:27:43 2025 GMT
        Subject: CN=8968D06DF5F5310DFF6139EEE6590457683F9A3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f1:c1:8c:8f:6e:a0:25:e6:ea:68:c9:cc:cd:
                    9f:9d:c9:0c:15:ba:59:a6:b8:7f:47:df:82:07:3c:
                    18:55:eb:d1:5a:e3:99:ec:61:53:ab:4f:30:5c:c6:
                    a0:20:89:eb:74:72:fb:8d:5a:01:28:26:32:c5:86:
                    55:84:8c:76:ef:48:54:c1:f1:1b:18:cf:f1:c7:3a:
                    b8:a6:95:64:d4:e3:0d:92:bc:2d:70:98:63:5d:fb:
                    25:43:82:c1:9a:74:76:e9:39:f5:ea:f0:c0:0f:d1:
                    55:ca:04:d0:5a:fc:c5:c1:ad:9f:49:ff:3b:09:82:
                    b8:3a:a3:9b:1c:87:9c:45:26:83:19:5b:b6:5e:65:
                    03:69:a2:b9:d6:65:65:bf:e7:fe:76:4c:a5:30:74:
                    25:0c:45:53:91:9c:53:b4:f5:cf:3c:66:df:32:39:
                    a7:8e:27:d0:85:52:b7:09:c8:4e:e4:51:08:37:6e:
                    07:84:41:9d:f4:df:9d:9f:cb:29:c8:5c:b6:aa:57:
                    76:8d:b3:34:4d:47:1a:66:9c:60:1c:42:dd:2a:e8:
                    60:f2:e4:89:ca:83:e8:48:31:de:c3:8c:fe:4a:ba:
                    6f:35:08:ad:97:84:1f:e4:16:27:0f:ff:1b:d6:ab:
                    fc:04:08:47:99:af:25:b4:50:64:13:73:c7:84:b0:
                    6a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:68:D0:6D:F5:F5:31:0D:FF:61:39:EE:E6:59:04:57:68:3F:9A:3C
            X509v3 Authority Key Identifier:
                keyid:77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363334303a3a2f34342d3434203d3e20323134313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:6340::/44

    Signature Algorithm: sha256WithRSAEncryption
         91:33:f4:a8:b0:30:d4:be:b7:84:ad:56:e2:5c:85:0f:2e:c4:
         14:67:81:a3:9a:8b:65:5e:f1:71:eb:87:48:58:71:64:6c:f0:
         23:bd:99:2e:40:80:e9:ea:1d:b7:c6:c1:75:4e:02:74:7d:30:
         81:6f:c3:55:b7:f5:c1:9f:70:2e:3a:8a:5d:20:03:fa:62:15:
         99:da:9e:8c:45:35:cd:8b:cc:60:87:62:bf:52:d8:23:f7:0d:
         2e:a6:f0:46:d6:a1:04:d5:50:8f:ac:ae:d2:33:a4:9c:14:f0:
         42:e0:55:27:a5:fc:85:6e:7c:b2:95:a3:20:8b:7a:0b:d7:9a:
         c7:cd:1e:93:38:be:e4:52:25:ca:34:73:37:a5:f5:ba:8e:67:
         c0:cd:5b:50:58:be:eb:46:4b:c5:fc:a2:b0:5c:94:a4:33:10:
         3f:eb:65:e0:a5:98:b5:7e:ce:60:16:9d:7c:0b:6e:1e:f9:0d:
         be:53:36:31:a7:8b:ff:47:ea:59:6e:73:c1:1a:5a:13:0d:f9:
         b6:d9:80:80:da:66:38:b1:ae:d9:ca:0c:a7:96:5d:f6:87:a9:
         47:73:e5:4a:11:d7:31:5d:c0:6a:db:15:ff:3d:73:5d:a7:bb:
         92:59:6c:f6:f9:69:81:7a:6b:40:33:40:82:50:e0:66:1a:51:
         d5:ce:2e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----