Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363337303a3a2f34342d3434203d3e20323134313239.roa
File:                     326130613a363034343a363337303a3a2f34342d3434203d3e20323134313239.roa (raw, json)
Hash identifier:          aOgpspOtzi7kLjZleqfsig0EotvF/PcnEYzNw7vRpBk=
Subject key identifier:   C4:F1:46:F3:2F:DA:19:0B:77:5B:40:C5:0E:B0:E1:57:B9:E2:B3:DD
Certificate issuer:       /CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
Certificate serial:       54CA0D840BEF0D779DB386F702A5E274DD7AAAF0
Authority key identifier: 77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363337303a3a2f34342d3434203d3e20323134313239.roa
Signing time:             Fri 20 Dec 2024 17:27:43 +0000
ROA not before:           Fri 20 Dec 2024 17:22:43 +0000
ROA not after:            Fri 19 Dec 2025 17:27:43 +0000
asID:                     214129
IP address blocks:        2a0a:6044:6370::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ca:0d:84:0b:ef:0d:77:9d:b3:86:f7:02:a5:e2:74:dd:7a:aa:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
        Validity
            Not Before: Dec 20 17:22:43 2024 GMT
            Not After : Dec 19 17:27:43 2025 GMT
        Subject: CN=C4F146F32FDA190B775B40C50EB0E157B9E2B3DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:66:e9:a2:af:01:a1:b6:be:76:42:b7:a2:40:
                    0a:76:3f:ab:68:bf:67:1e:3b:1c:a7:e0:fc:fb:0e:
                    ea:9e:a0:2d:6c:40:10:6a:fb:35:bf:08:a3:ea:b8:
                    55:a1:84:e5:c3:d1:17:d3:7f:75:2c:a1:29:fd:20:
                    e2:d5:d5:70:74:4f:09:ce:fb:34:ca:02:f1:ff:de:
                    ff:b0:8a:88:10:f8:b6:2e:68:da:6d:33:a2:09:d7:
                    be:9f:a4:65:ad:62:c0:df:0b:88:8a:54:5b:ef:0f:
                    43:1e:5c:39:69:63:ab:4f:c3:fb:78:a4:a7:b0:aa:
                    bf:b2:e3:35:fb:87:a4:21:d7:5e:07:59:85:99:cd:
                    c9:52:89:5d:5c:77:c9:dd:2a:68:1f:8e:78:c7:ac:
                    e7:a7:57:24:31:f3:18:35:6d:a8:51:ba:35:92:e8:
                    d9:d3:43:b0:01:25:59:29:78:18:5d:a1:dd:84:d0:
                    e7:72:55:6b:eb:b5:44:16:20:2c:b6:62:06:c8:a3:
                    c5:86:4e:2d:45:c5:62:ac:4a:16:89:76:28:84:a6:
                    80:47:77:25:fa:97:cc:00:2b:57:ab:bc:3f:18:02:
                    40:6d:89:d1:23:c6:a3:0d:00:4c:b4:a6:26:52:a2:
                    5b:2c:63:71:b7:4b:fc:23:2c:ca:71:9f:7d:74:79:
                    53:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F1:46:F3:2F:DA:19:0B:77:5B:40:C5:0E:B0:E1:57:B9:E2:B3:DD
            X509v3 Authority Key Identifier:
                keyid:77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363337303a3a2f34342d3434203d3e20323134313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:6370::/44

    Signature Algorithm: sha256WithRSAEncryption
         67:1e:de:27:87:c2:dc:0a:6c:39:4c:13:41:ff:a5:75:f3:e8:
         94:ca:55:42:a2:99:25:16:06:69:03:7b:7d:c3:d5:9d:8a:a7:
         22:cc:f7:aa:7c:b9:bd:91:54:3a:83:44:6b:94:ac:88:67:cb:
         ce:31:d1:70:f6:fa:62:8d:2b:2f:10:0d:d1:9b:53:18:43:67:
         02:9a:82:55:47:0e:bf:64:c2:98:ea:ab:95:9a:22:ed:3d:db:
         3a:23:39:58:0d:85:c1:7b:c8:fb:10:58:de:16:75:10:37:3f:
         d7:2c:a0:b1:2e:0f:fc:91:44:d7:6f:a7:dd:b3:18:c3:bd:f0:
         f6:70:2e:37:ce:b9:cd:ea:e3:65:72:26:09:94:11:5a:a3:14:
         11:2a:40:9f:07:de:db:a1:88:03:1f:b7:77:db:78:a3:79:f9:
         ee:34:04:16:03:68:7b:60:29:69:33:f6:9e:10:1b:c0:cf:6b:
         19:cd:07:66:ee:73:14:54:20:4d:e4:79:14:b3:58:55:16:b9:
         52:36:12:67:75:6c:7d:c8:96:c5:7a:db:50:aa:52:69:87:72:
         67:11:c8:05:58:dd:23:dc:0d:13:89:7f:b1:1f:de:e4:7c:36:
         0b:d9:c5:60:ae:4a:ac:8e:55:d4:46:fe:da:21:db:03:e6:a0:
         67:d0:9d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----