Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363361303a3a2f34342d3434203d3e20323134313239.roa
File:                     326130613a363034343a363361303a3a2f34342d3434203d3e20323134313239.roa (raw, json)
Hash identifier:          emFnH7yVrCp1VsGveo/6YMYSSMGSSBrctGdXSXfVWY4=
Subject key identifier:   1E:4D:82:75:C2:FB:B9:C9:D2:CB:1B:A9:B2:0C:5F:72:AA:5C:52:33
Certificate issuer:       /CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
Certificate serial:       77FF0762486127C9A2581062EF532A6599E54686
Authority key identifier: 77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363361303a3a2f34342d3434203d3e20323134313239.roa
Signing time:             Fri 20 Dec 2024 17:27:42 +0000
ROA not before:           Fri 20 Dec 2024 17:22:42 +0000
ROA not after:            Fri 19 Dec 2025 17:27:42 +0000
asID:                     214129
IP address blocks:        2a0a:6044:63a0::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ff:07:62:48:61:27:c9:a2:58:10:62:ef:53:2a:65:99:e5:46:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
        Validity
            Not Before: Dec 20 17:22:42 2024 GMT
            Not After : Dec 19 17:27:42 2025 GMT
        Subject: CN=1E4D8275C2FBB9C9D2CB1BA9B20C5F72AA5C5233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:62:39:13:34:63:9a:0b:76:b4:1f:a4:d5:55:
                    f5:12:66:6c:6d:a8:16:51:43:d8:f3:a6:d1:06:de:
                    1f:c0:2d:cf:ba:96:0a:f0:9d:18:46:f1:a5:08:5d:
                    c8:5e:53:59:bf:3f:74:8c:60:23:fe:1e:ec:da:55:
                    79:bd:b7:d2:b3:17:ef:b7:b5:09:b1:9e:d1:5b:09:
                    61:4e:8c:c3:22:35:c1:66:c0:94:61:40:25:6e:90:
                    e8:6f:9f:bf:69:27:76:05:af:37:c8:38:36:d0:88:
                    39:d8:09:43:99:52:32:4c:39:05:27:02:c9:a4:b0:
                    7d:d1:af:9b:e0:bb:b2:7d:ba:ca:b1:96:3c:25:18:
                    20:dc:e6:b5:7f:8d:43:c2:c5:f3:85:56:47:f9:8c:
                    7e:8a:0d:69:f0:ab:ed:d1:8f:05:89:88:aa:dc:c2:
                    46:dd:6f:66:e2:75:51:d8:c2:dd:d2:81:45:ea:94:
                    ca:8b:cc:ed:89:78:e5:4b:7a:91:cb:93:6d:e9:48:
                    09:92:89:fc:4e:91:96:69:d0:03:7c:6a:4a:67:4b:
                    2f:4a:9b:75:37:19:c4:9c:e1:9a:7f:7f:87:c8:de:
                    10:16:d2:53:7b:cc:63:4c:c7:b8:c9:6b:0d:d1:99:
                    f1:8f:d0:7b:b1:a0:0d:db:5c:be:6d:87:4e:00:6f:
                    25:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4D:82:75:C2:FB:B9:C9:D2:CB:1B:A9:B2:0C:5F:72:AA:5C:52:33
            X509v3 Authority Key Identifier:
                keyid:77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363361303a3a2f34342d3434203d3e20323134313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:63a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         02:ee:ef:1b:02:e2:87:3d:c2:88:52:6f:60:df:3f:98:d0:fd:
         fa:44:96:2f:86:40:c5:39:1e:bd:8f:89:71:e5:04:66:94:e4:
         8f:32:5c:73:60:38:c6:b2:15:67:14:49:63:e7:1f:c6:03:90:
         ad:35:24:94:8a:3a:b3:21:9e:87:43:bd:58:5a:40:d1:1c:39:
         41:71:32:1e:52:fc:23:47:09:08:b2:0c:6a:c2:76:f7:40:6d:
         39:e7:76:a0:5a:8b:09:97:5d:0f:21:d2:b0:ac:3d:e3:be:79:
         4e:4b:58:e4:5c:0d:eb:d8:26:33:36:86:15:ef:a4:34:fc:fa:
         17:d6:5a:25:21:21:73:70:32:36:1c:66:12:50:80:9d:a2:c2:
         9e:7c:0c:f7:fe:59:65:38:d1:20:3c:bd:51:58:87:0c:3c:c6:
         73:48:8e:76:5a:bf:a7:24:95:85:c7:a4:62:74:31:58:21:2c:
         01:f7:c9:f6:2c:8e:ad:4c:62:9e:34:6d:a5:07:69:13:1c:ce:
         f9:0e:02:d7:8b:bc:eb:51:22:b9:e5:13:1e:de:d5:ef:f1:90:
         5c:6a:6e:fe:eb:78:8d:5b:be:a6:f6:80:a4:82:d8:45:ac:f3:
         38:35:5b:0a:28:b7:03:9b:67:8b:2e:b6:8a:2f:b2:98:7f:35:
         e1:49:f9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----