Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363336303a3a2f34342d3434203d3e20323134313239.roa
File:                     326130613a363034343a363336303a3a2f34342d3434203d3e20323134313239.roa (raw, json)
Hash identifier:          UPVkheL1qNEZWlp2HDfSHmY/iV0uhsBeBGljPWVDrrM=
Subject key identifier:   BE:2B:EE:A8:46:89:1E:AB:11:E7:B3:16:54:30:8C:86:19:EC:3E:D1
Certificate issuer:       /CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
Certificate serial:       19CBF6F6522EAAD1E85E3D7FA2B1C97BD708A78E
Authority key identifier: 77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363336303a3a2f34342d3434203d3e20323134313239.roa
Signing time:             Fri 20 Dec 2024 17:27:43 +0000
ROA not before:           Fri 20 Dec 2024 17:22:43 +0000
ROA not after:            Fri 19 Dec 2025 17:27:43 +0000
asID:                     214129
IP address blocks:        2a0a:6044:6360::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:cb:f6:f6:52:2e:aa:d1:e8:5e:3d:7f:a2:b1:c9:7b:d7:08:a7:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
        Validity
            Not Before: Dec 20 17:22:43 2024 GMT
            Not After : Dec 19 17:27:43 2025 GMT
        Subject: CN=BE2BEEA846891EAB11E7B31654308C8619EC3ED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:83:f4:3d:8b:2d:2e:f3:f2:4a:b3:03:cc:64:
                    93:1f:a7:f4:ec:4b:d1:9c:86:7c:0f:6d:3c:ee:83:
                    de:ed:c8:ea:19:44:a3:06:ab:f0:03:60:6e:ab:bc:
                    3c:d6:10:ac:a0:27:81:bb:27:07:15:0d:a0:82:19:
                    71:52:12:4e:d5:4b:f3:6d:d5:a3:ca:eb:69:ef:d6:
                    28:1c:c5:0e:0e:a3:cf:a8:ff:17:ae:6c:66:02:4e:
                    9a:fb:16:f5:5e:a2:55:3c:18:58:dd:cd:aa:4b:e4:
                    aa:29:b4:90:56:93:c1:45:37:67:0b:c5:04:af:a1:
                    9f:f4:5f:16:b9:02:b2:f9:05:1c:c3:52:16:12:ab:
                    01:49:9b:48:e9:a6:ce:91:cf:b8:3a:04:e6:b8:a8:
                    46:a0:70:62:99:16:3c:83:d9:9e:33:32:0b:0d:ae:
                    27:4f:b0:9d:b5:99:9e:84:b7:67:c4:9f:83:60:f2:
                    41:6d:31:8a:61:41:8e:96:0d:20:f7:dd:05:07:a2:
                    c5:7c:70:b4:29:47:9f:39:1d:06:2a:ab:b4:91:bf:
                    f6:5b:f0:a3:44:f5:02:24:e4:9c:82:bd:b0:1e:6e:
                    ad:48:ca:f7:9b:97:a5:d1:69:54:8f:b5:b7:ae:9f:
                    95:84:03:31:8d:27:4f:cc:6d:b6:a6:96:93:ea:59:
                    ac:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2B:EE:A8:46:89:1E:AB:11:E7:B3:16:54:30:8C:86:19:EC:3E:D1
            X509v3 Authority Key Identifier:
                keyid:77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363336303a3a2f34342d3434203d3e20323134313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:6360::/44

    Signature Algorithm: sha256WithRSAEncryption
         57:22:47:43:20:68:3e:0a:16:77:c2:40:92:46:2d:ee:72:94:
         52:db:60:df:a3:2f:1a:47:6d:1c:1c:38:f2:e3:81:7c:9a:65:
         25:42:75:91:18:aa:f0:41:c7:57:06:98:c6:df:1e:0d:31:ed:
         cd:38:82:cd:65:f8:37:40:c8:6b:44:11:db:69:64:4f:33:7f:
         aa:df:34:2f:05:8a:8f:75:4d:c1:88:a9:88:1b:64:06:00:cc:
         2e:2d:56:20:c8:a2:1f:4e:33:f5:58:9c:af:ea:6e:a4:a1:6b:
         a4:f1:6a:65:da:25:19:ac:83:72:69:3e:0d:50:af:3f:b7:2f:
         98:6f:46:10:5c:bc:9f:85:e8:78:67:21:a3:90:92:fa:b6:c2:
         73:aa:02:a5:cb:b5:a6:ab:05:86:42:bb:c8:32:c4:3b:cf:eb:
         7f:bc:ba:0e:68:d4:16:61:01:1a:6e:f2:44:ab:69:36:00:14:
         99:cf:c2:14:fe:13:31:e7:dc:21:1c:4a:bf:3c:52:00:a8:52:
         47:41:45:39:fb:80:23:ec:38:b5:26:1d:d3:22:6a:15:47:e6:
         a1:7e:b0:41:82:d8:03:f1:cc:0a:2e:59:64:88:0f:51:0d:47:
         84:d6:b9:1d:68:a9:3b:39:84:92:c2:8b:ac:9c:77:09:9a:b4:
         c4:30:9f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----