Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363338303a3a2f34342d3434203d3e20323134313239.roa
File:                     326130613a363034343a363338303a3a2f34342d3434203d3e20323134313239.roa (raw, json)
Hash identifier:          m3NqrNgE4BUEfRm/wgUq2om1D5KeXTlBrRR4I4aqBQ4=
Subject key identifier:   1E:A9:E9:92:87:94:6A:92:6A:4C:67:5E:7B:5D:29:08:E8:73:A6:D3
Certificate issuer:       /CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
Certificate serial:       78BF4E6DE9F9CCEDABA23728AE6987B545B9D8FF
Authority key identifier: 77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363338303a3a2f34342d3434203d3e20323134313239.roa
Signing time:             Fri 20 Dec 2024 17:27:43 +0000
ROA not before:           Fri 20 Dec 2024 17:22:43 +0000
ROA not after:            Fri 19 Dec 2025 17:27:43 +0000
asID:                     214129
IP address blocks:        2a0a:6044:6380::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:bf:4e:6d:e9:f9:cc:ed:ab:a2:37:28:ae:69:87:b5:45:b9:d8:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
        Validity
            Not Before: Dec 20 17:22:43 2024 GMT
            Not After : Dec 19 17:27:43 2025 GMT
        Subject: CN=1EA9E99287946A926A4C675E7B5D2908E873A6D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:11:a0:49:44:b8:77:ec:10:7d:37:63:a4:92:
                    03:d7:2d:23:0c:d0:23:9f:f8:4b:77:9b:ef:a1:f1:
                    c4:87:44:0b:04:2a:70:d5:45:35:55:ab:b3:2d:65:
                    03:c0:41:c8:7c:73:da:39:04:d9:12:3d:35:30:35:
                    18:00:a9:8a:28:35:41:4f:72:4b:d3:a8:b9:8f:51:
                    fd:7d:c9:a5:39:bd:f3:c2:e1:a9:70:fe:9d:b3:2c:
                    de:42:75:f8:ca:8d:6b:1f:2c:6c:54:cc:60:1d:13:
                    fb:d8:65:25:69:00:e9:d4:c7:08:c3:ab:c3:bd:eb:
                    88:bf:52:94:42:5a:4c:da:0e:ab:bf:70:c9:82:ea:
                    eb:c0:4c:9f:2c:a4:97:30:6c:e1:82:45:c4:7b:65:
                    78:4f:e7:2a:ec:d3:fb:9d:d2:96:76:db:1f:0d:d4:
                    cb:da:f8:0e:53:3f:47:22:72:58:0a:48:d7:7f:7e:
                    24:4d:28:e3:11:d5:7f:18:c0:b6:ee:49:78:62:87:
                    b9:65:f7:c6:96:a9:cd:b6:9f:b4:36:72:43:8c:97:
                    98:e1:75:a8:02:d7:c7:0c:c3:7c:c3:32:a5:c8:4a:
                    cc:3a:79:17:60:45:ad:06:b2:6d:69:81:53:f7:2a:
                    0a:ba:c6:98:33:f0:54:af:ea:f7:bb:eb:fc:82:2f:
                    1d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A9:E9:92:87:94:6A:92:6A:4C:67:5E:7B:5D:29:08:E8:73:A6:D3
            X509v3 Authority Key Identifier:
                keyid:77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363338303a3a2f34342d3434203d3e20323134313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:6380::/44

    Signature Algorithm: sha256WithRSAEncryption
         53:58:9d:99:7f:ce:95:f1:85:5f:08:f8:c0:a7:54:26:61:b7:
         d4:04:96:34:10:a9:bb:1d:b1:32:da:dd:ac:3d:68:a2:f5:9e:
         b1:d4:75:35:8e:91:13:ba:f3:b5:36:e4:d6:3e:13:be:9a:6a:
         ec:24:d0:50:ab:a8:9e:5c:53:c4:f2:bf:9d:92:e2:22:0b:1b:
         73:ff:da:82:93:39:8d:ec:56:4e:02:13:75:1b:ab:33:4e:e0:
         04:0c:4e:f7:a3:1b:92:9e:a7:26:7b:37:a0:50:d9:35:96:dc:
         b4:8f:de:fd:9b:6c:b8:f6:06:d3:29:85:46:eb:be:d2:07:9e:
         67:0e:17:6a:86:af:c0:0f:a8:d7:2e:b3:23:6f:e2:b9:d6:c4:
         a0:8c:54:68:8f:49:6d:dc:95:28:f5:69:d1:95:76:09:ad:ad:
         e4:7f:9c:ce:2a:84:65:88:cc:ae:09:ca:a3:0e:f7:92:5d:a1:
         79:1d:1a:6a:52:bb:9d:78:aa:09:13:80:2b:ef:ed:c1:11:42:
         46:95:66:de:83:a3:d1:cf:9b:e9:1a:b4:7e:30:8c:fb:c7:26:
         50:eb:c4:c7:2e:21:b7:64:2b:1b:40:6c:2c:57:76:14:e3:87:
         5b:be:28:5c:39:0f:01:a7:ca:86:ca:8a:58:f4:eb:99:90:70:
         ab:f5:50:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----