Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363365303a3a2f34342d3438203d3e20323133373638.roa
File:                     326130613a363034343a363365303a3a2f34342d3438203d3e20323133373638.roa (raw, json)
Hash identifier:          HTUS5j0pBrPau6oAPgqm/3sN9buaxIUDb65TspClRkQ=
Subject key identifier:   A1:B1:CD:AB:A5:22:BD:69:E1:09:E5:8E:75:A9:F2:C7:30:03:E2:F8
Certificate issuer:       /CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
Certificate serial:       550B07FDC0586130CF37D973F7D6F782196B37E6
Authority key identifier: 77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363365303a3a2f34342d3438203d3e20323133373638.roa
Signing time:             Fri 20 Dec 2024 17:28:15 +0000
ROA not before:           Fri 20 Dec 2024 17:23:15 +0000
ROA not after:            Fri 19 Dec 2025 17:28:15 +0000
asID:                     213768
IP address blocks:        2a0a:6044:63e0::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:0b:07:fd:c0:58:61:30:cf:37:d9:73:f7:d6:f7:82:19:6b:37:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
        Validity
            Not Before: Dec 20 17:23:15 2024 GMT
            Not After : Dec 19 17:28:15 2025 GMT
        Subject: CN=A1B1CDABA522BD69E109E58E75A9F2C73003E2F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c5:c6:73:d8:ee:9c:61:7c:29:c8:a6:dc:4f:
                    63:e2:d8:f5:ba:f1:4d:29:c8:54:1e:d2:4b:2a:5c:
                    80:47:d8:2d:25:33:9b:05:74:61:68:b2:21:4c:85:
                    d4:bf:93:7a:2b:47:ac:7a:a9:8f:ee:2c:52:b5:ee:
                    e7:cf:8e:d9:c4:40:21:0f:82:d3:85:f4:74:68:0a:
                    79:b2:b4:a6:9b:ba:18:5a:79:61:7b:04:33:45:f2:
                    d5:9c:2c:65:1f:07:51:89:5b:88:49:3b:d7:ce:a9:
                    85:52:48:62:bf:a3:79:28:2a:93:30:5b:2c:bb:96:
                    ca:22:f2:77:53:e0:d4:1f:7a:0f:cf:de:5a:eb:3f:
                    ff:ea:7c:bf:28:a5:d7:98:41:7d:9c:47:69:2e:79:
                    d6:22:5e:0d:4b:b8:8b:83:93:52:7c:c9:ab:58:a4:
                    e1:e5:72:32:32:49:be:95:10:a9:21:24:aa:af:e1:
                    ef:22:6b:13:18:2b:f5:15:60:10:a4:4f:0c:1d:88:
                    a3:2c:05:a8:e4:b1:26:50:f8:c5:10:0b:ba:db:06:
                    19:22:63:ff:36:64:38:79:20:47:2f:fa:12:d0:53:
                    03:c9:e5:eb:70:d4:b2:ce:92:c0:c5:2b:25:bb:65:
                    0c:1d:9c:0d:80:dc:ee:16:cd:de:b3:fb:50:80:7d:
                    37:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B1:CD:AB:A5:22:BD:69:E1:09:E5:8E:75:A9:F2:C7:30:03:E2:F8
            X509v3 Authority Key Identifier:
                keyid:77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363365303a3a2f34342d3438203d3e20323133373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:63e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         09:4b:d5:0e:3d:4f:01:2a:f2:4c:a1:67:48:68:e9:40:bc:bc:
         24:1c:3a:f9:a5:4a:7c:20:1b:03:e4:9e:76:fc:5f:c3:c3:53:
         c6:53:22:b9:d7:f0:82:51:2d:65:a4:4e:9c:be:73:41:38:85:
         59:ae:cc:86:27:e8:29:42:2d:7b:7e:fa:b1:3e:cb:bf:eb:d6:
         83:47:6e:ba:a8:ab:bf:4d:91:a2:e1:ee:d1:af:ba:42:46:7e:
         43:e7:b9:2a:27:5f:78:49:d4:a0:b2:65:31:06:33:93:09:71:
         5d:b2:3e:f6:9a:18:f9:6a:03:b7:da:d8:95:3f:e2:1f:67:06:
         e3:cd:fb:11:6b:77:ee:7f:be:67:d1:c2:db:f2:0f:d3:02:f9:
         1c:3f:79:d9:12:e5:b6:b4:fe:1d:ed:5c:ce:1a:42:17:42:77:
         65:be:69:6f:ca:94:86:5f:b9:c2:e0:aa:08:cb:fb:50:b2:6b:
         79:24:99:ee:bb:d2:cc:e3:b0:97:62:29:34:0f:a1:2d:5e:a1:
         ef:f7:a7:26:a7:93:c0:d1:f9:7a:a4:ac:fe:d0:bf:b3:79:3e:
         32:b7:5b:1c:88:cf:21:b4:ba:97:d2:92:bb:2d:1c:e5:ed:07:
         60:1f:b8:c0:26:cf:bc:ec:3f:ab:56:2e:9f:ac:e6:40:a7:6c:
         75:97:27:4a
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUVQsH/cBYYTDPN9lz99b3ghlrN+YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc5NkIxQzRFRUI0MTVCNjU2Q0I0NjhBNzFCMTgxRTkz
RjJDNTBCQjAeFw0yNDEyMjAxNzIzMTVaFw0yNTEyMTkxNzI4MTVaMDMxMTAvBgNV
BAMTKEExQjFDREFCQTUyMkJENjlFMTA5RTU4RTc1QTlGMkM3MzAwM0UyRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaxcZz2O6cYXwpyKbcT2Pi2PW6
8U0pyFQe0ksqXIBH2C0lM5sFdGFosiFMhdS/k3orR6x6qY/uLFK17ufPjtnEQCEP
gtOF9HRoCnmytKabuhhaeWF7BDNF8tWcLGUfB1GJW4hJO9fOqYVSSGK/o3koKpMw
Wyy7lsoi8ndT4NQfeg/P3lrrP//qfL8opdeYQX2cR2kuedYiXg1LuIuDk1J8yatY
pOHlcjIySb6VEKkhJKqv4e8iaxMYK/UVYBCkTwwdiKMsBajksSZQ+MUQC7rbBhki
Y/82ZDh5IEcv+hLQUwPJ5etw1LLOksDFKyW7ZQwdnA2A3O4Wzd6z+1CAfTddAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUobHNq6UivWnhCeWOdanyxzAD4vgwHwYDVR0j
BBgwFoAUd5axxO60FbZWy0aKcbGB6T8sULswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODE4OGNmOWYtMGRlOS00NTFmLWI5MzUtYjNmZjFkODdh
NjY2LzAvNzc5NkIxQzRFRUI0MTVCNjU2Q0I0NjhBNzFCMTgxRTkzRjJDNTBCQi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC83Nzk2QjFDNEVFQjQxNUI2NTZDQjQ2OEE3
MUIxODFFOTNGMkM1MEJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS84MTg4Y2Y5Zi0wZGU5LTQ1MWYtYjkzNS1iM2ZmMWQ4N2E2NjYvMC8zMjYxMzA2
MTNhMzYzMDM0MzQzYTM2MzM2NTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz
MTMzMzczNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcEKgpgRGPgMA0GCSqGSIb3DQEBCwUAA4IBAQAJ
S9UOPU8BKvJMoWdIaOlAvLwkHDr5pUp8IBsD5J52/F/Dw1PGUyK51/CCUS1lpE6c
vnNBOIVZrsyGJ+gpQi17fvqxPsu/69aDR266qKu/TZGi4e7Rr7pCRn5D57kqJ194
SdSgsmUxBjOTCXFdsj72mhj5agO32tiVP+IfZwbjzfsRa3fuf75n0cLb8g/TAvkc
P3nZEuW2tP4d7VzOGkIXQndlvmlvypSGX7nC4KoIy/tQsmt5JJnuu9LM47CXYik0
D6EtXqHv96cmp5PA0fl6pKz+0L+zeT4yt1sciM8htLqX0pK7LRzl7QdgH7jAJs+8
7D+rVi6frOZAp2x1lydK
-----END CERTIFICATE-----