Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363339303a3a2f34342d3434203d3e20323134313239.roa
File:                     326130613a363034343a363339303a3a2f34342d3434203d3e20323134313239.roa (raw, json)
Hash identifier:          PdvZuFVn4xp0ugkK2wTNAWuPThS47aZR0Su65uBVbh4=
Subject key identifier:   E3:CB:61:AF:F1:16:CE:E1:16:41:F4:A7:C0:1D:95:91:4C:51:7D:CA
Certificate issuer:       /CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
Certificate serial:       18DFCD93082ACD29F446C3F94DB19B59EC30215D
Authority key identifier: 77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363339303a3a2f34342d3434203d3e20323134313239.roa
Signing time:             Fri 20 Dec 2024 17:27:41 +0000
ROA not before:           Fri 20 Dec 2024 17:22:41 +0000
ROA not after:            Fri 19 Dec 2025 17:27:41 +0000
asID:                     214129
IP address blocks:        2a0a:6044:6390::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:df:cd:93:08:2a:cd:29:f4:46:c3:f9:4d:b1:9b:59:ec:30:21:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
        Validity
            Not Before: Dec 20 17:22:41 2024 GMT
            Not After : Dec 19 17:27:41 2025 GMT
        Subject: CN=E3CB61AFF116CEE11641F4A7C01D95914C517DCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:74:d2:e2:8d:b0:0f:73:61:41:68:d7:42:16:
                    e6:55:f9:b0:f2:de:88:68:32:9a:86:6d:69:18:7f:
                    5b:b6:de:22:d0:27:9f:c1:f9:80:04:55:94:98:87:
                    da:b6:9d:61:be:fe:17:35:9d:79:8d:35:b9:98:80:
                    f9:05:6d:6e:11:e4:b9:2a:83:8d:d9:c1:f9:6a:4d:
                    b1:e7:1f:1c:15:54:c8:f1:27:9b:44:bf:f8:36:7e:
                    43:1e:44:7f:04:09:78:6d:00:f3:66:f8:2d:de:6e:
                    48:3b:a2:2f:5b:d5:88:b8:4c:fd:e2:0d:52:91:0e:
                    27:10:28:bd:d8:21:97:8c:3e:a8:1f:0b:da:24:47:
                    cc:69:78:12:39:ba:4e:c6:b1:c3:c9:17:b7:da:82:
                    14:9a:d8:8b:f9:27:98:f7:c1:d5:f9:3f:da:02:16:
                    6a:04:ee:73:86:6f:fe:47:3a:50:5c:b9:3e:78:6b:
                    83:b2:ea:c4:1d:0a:9b:8f:5a:2c:28:41:f8:99:56:
                    86:e0:04:56:7f:d1:f0:76:ff:b8:42:0f:e2:9e:ab:
                    7e:89:21:1b:fc:bd:ac:28:ac:b3:67:a9:a6:79:e4:
                    47:94:98:39:9f:09:ab:3e:8f:ce:3f:3b:aa:33:5c:
                    43:44:32:ea:70:92:5b:0b:fa:85:e0:72:8e:f9:fa:
                    eb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CB:61:AF:F1:16:CE:E1:16:41:F4:A7:C0:1D:95:91:4C:51:7D:CA
            X509v3 Authority Key Identifier:
                keyid:77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363339303a3a2f34342d3434203d3e20323134313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:6390::/44

    Signature Algorithm: sha256WithRSAEncryption
         85:7a:80:b4:53:ef:bf:85:10:cf:d2:e2:3e:59:7c:3c:ab:6f:
         24:67:ef:61:00:9e:7a:a8:4b:9e:4a:2b:c1:97:54:31:ff:57:
         71:c5:7f:0f:d4:1f:85:1a:5e:88:97:e7:01:87:67:31:ef:a5:
         17:5d:df:2b:3d:c8:88:bd:4a:ae:a0:49:38:3f:22:8d:01:bc:
         e4:cf:1e:03:c9:08:25:29:29:af:8b:47:81:e5:7d:a1:51:e2:
         b9:bc:b4:70:a2:d9:b2:72:14:f0:a3:2a:f7:29:c4:c4:78:ba:
         85:56:8b:5d:37:96:ed:3c:74:ac:33:63:21:92:62:e5:8f:8a:
         da:7f:dd:77:9f:2a:14:5f:43:27:a5:89:da:d8:7a:09:b2:15:
         5b:43:f2:2b:de:c3:84:ea:aa:61:50:2a:d7:4b:a2:6b:9e:40:
         2b:03:3f:62:51:65:9e:24:6f:74:60:20:a6:f3:37:cf:34:6b:
         a6:85:7e:cd:33:36:b2:c3:50:a7:f8:40:06:b6:81:c7:00:ed:
         cd:31:4a:2d:c7:19:59:d2:e3:2e:4e:cc:1c:03:04:f8:23:b9:
         82:47:14:67:11:24:59:98:c2:40:40:82:dc:59:71:14:c1:eb:
         59:88:d9:c7:52:44:7e:30:d2:eb:91:5f:16:7c:d5:18:47:2c:
         52:9e:1c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----