Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363365333a3a2f34382d3438203d3e20323133373638.roa
File:                     326130613a363034343a363365333a3a2f34382d3438203d3e20323133373638.roa (raw, json)
Hash identifier:          bssPLKGPHDK4oSVXYzB3zo446+/8WhDNm1WEKvavFF4=
Subject key identifier:   9E:F7:18:09:7C:FC:A0:40:E3:F0:8E:63:B7:83:F0:12:E4:33:8D:B6
Certificate issuer:       /CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
Certificate serial:       38A0A32835735E5E4AAA8FE74AB68D693CFCB7DA
Authority key identifier: 77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363365333a3a2f34382d3438203d3e20323133373638.roa
Signing time:             Mon 20 Jan 2025 12:31:38 +0000
ROA not before:           Mon 20 Jan 2025 12:26:38 +0000
ROA not after:            Mon 19 Jan 2026 12:31:38 +0000
asID:                     213768
IP address blocks:        2a0a:6044:63e3::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a0:a3:28:35:73:5e:5e:4a:aa:8f:e7:4a:b6:8d:69:3c:fc:b7:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
        Validity
            Not Before: Jan 20 12:26:38 2025 GMT
            Not After : Jan 19 12:31:38 2026 GMT
        Subject: CN=9EF718097CFCA040E3F08E63B783F012E4338DB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c6:de:f3:2b:36:24:54:f9:d8:42:39:4d:8d:
                    68:61:26:91:b2:fc:f9:42:9f:a1:c6:94:25:fe:15:
                    d4:ba:92:fb:82:db:33:ed:25:58:33:60:d0:81:4a:
                    fb:d4:74:05:21:70:a2:4c:df:b2:16:c3:25:76:c7:
                    28:b3:f3:88:b6:ca:ac:9d:76:79:1b:34:f2:24:0a:
                    e6:de:c1:3e:bf:36:eb:54:12:9f:cd:da:70:46:38:
                    6e:09:fa:d2:cf:e5:9b:f7:e6:03:9e:bb:6d:91:ce:
                    04:75:c4:58:cb:e4:78:9a:4e:4c:04:02:bd:72:bd:
                    e4:6d:bd:12:01:91:9f:2c:94:a1:9b:20:29:97:db:
                    a0:be:d5:93:2c:25:77:15:80:37:eb:53:4f:9d:13:
                    b0:fa:b4:2e:83:ad:c6:cf:57:f0:6d:0e:38:70:49:
                    0b:9a:e5:f3:f0:80:d2:bc:0a:68:c5:6f:19:a0:cd:
                    bc:8f:90:9e:83:b6:fa:b3:9f:b5:a9:44:67:dd:e6:
                    96:00:20:da:23:b8:2d:df:cb:b0:65:b4:aa:3d:09:
                    0b:6a:ae:f2:67:79:86:f1:c2:50:c8:7b:08:f2:28:
                    af:af:fd:44:bd:c0:1d:c2:bf:a8:4c:19:40:54:f3:
                    41:62:da:06:eb:38:fd:fa:b5:d7:c1:cc:33:a1:3e:
                    a8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F7:18:09:7C:FC:A0:40:E3:F0:8E:63:B7:83:F0:12:E4:33:8D:B6
            X509v3 Authority Key Identifier:
                keyid:77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363365333a3a2f34382d3438203d3e20323133373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:63e3::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:66:0b:1e:3f:b4:e1:73:c1:c2:c3:25:b1:b3:32:41:d3:a7:
         29:ce:24:a6:0e:f6:b9:aa:a0:a3:74:fd:93:5d:6f:33:3d:57:
         88:8a:04:6e:dc:08:74:d8:dc:64:09:12:bb:9d:c8:51:a2:d8:
         69:cb:3e:96:5d:88:e6:10:95:ae:05:8e:5d:d3:d8:05:88:84:
         ba:a9:fa:4b:1b:e7:07:44:8a:3a:06:ca:00:5d:9e:e5:36:7a:
         a1:f8:cd:35:da:36:ec:7e:94:2b:ea:e4:5a:bd:14:9c:43:e9:
         6b:22:68:57:2f:24:1c:ae:5d:49:b5:1e:ac:81:f9:5e:d7:b1:
         0b:be:ea:04:2d:40:57:9c:e0:de:e4:46:cb:c9:4f:73:17:3b:
         7d:e0:e8:11:bf:0c:ef:2e:c5:33:e8:87:d6:37:bf:87:bf:db:
         5a:1b:ec:48:76:b6:93:95:1d:82:8d:18:42:89:2a:29:39:3f:
         2d:df:9c:7c:50:6e:41:47:c1:74:e0:99:ac:e6:c6:9b:54:72:
         48:b6:bf:3b:ea:ee:d4:2f:39:0c:d7:0c:1c:ce:3e:20:f3:69:
         03:c9:a0:e9:d7:3b:54:f6:92:ab:19:43:c8:f9:ab:a9:76:92:
         5e:42:a8:98:05:17:9c:42:96:ae:f7:9e:bf:09:ee:ea:4c:6f:
         e6:46:b5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----