Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363365343a3a2f34382d3438203d3e20323133373638.roa
File:                     326130613a363034343a363365343a3a2f34382d3438203d3e20323133373638.roa (raw, json)
Hash identifier:          C7SslzGwm/3L9OQdVJYLDkmrzwGDYJnorSBRT0RBp6w=
Subject key identifier:   1A:E1:84:F4:8D:2E:F2:BA:0E:52:09:75:BD:51:64:D5:1B:01:76:55
Certificate issuer:       /CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
Certificate serial:       341955EA3BF0CE52B170B4DAABD5CC39455C164E
Authority key identifier: 77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363365343a3a2f34382d3438203d3e20323133373638.roa
Signing time:             Mon 20 Jan 2025 12:31:41 +0000
ROA not before:           Mon 20 Jan 2025 12:26:41 +0000
ROA not after:            Mon 19 Jan 2026 12:31:41 +0000
asID:                     213768
IP address blocks:        2a0a:6044:63e4::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:19:55:ea:3b:f0:ce:52:b1:70:b4:da:ab:d5:cc:39:45:5c:16:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
        Validity
            Not Before: Jan 20 12:26:41 2025 GMT
            Not After : Jan 19 12:31:41 2026 GMT
        Subject: CN=1AE184F48D2EF2BA0E520975BD5164D51B017655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:82:a6:41:e9:a9:22:f9:94:ed:c9:a1:e2:45:
                    be:f3:6e:dd:6a:b6:ef:16:f3:15:06:6c:af:93:65:
                    43:d0:f9:c5:65:ba:e1:cc:b5:8d:cf:f4:36:e2:32:
                    d3:1c:36:04:d2:9f:db:ef:51:5e:b8:02:24:73:91:
                    a5:f6:95:76:9a:3e:3d:a5:04:52:7a:54:99:c0:2e:
                    be:b7:f3:58:89:07:e8:2f:f8:33:6f:66:f1:1e:12:
                    98:a7:26:90:c6:e5:21:01:32:c7:6f:1c:b6:ad:d4:
                    e1:cd:2c:78:4c:c6:e9:6d:b7:0d:65:85:18:8b:72:
                    3b:e5:7d:5e:40:5e:09:c5:65:cc:3c:78:31:18:2e:
                    e2:0f:5a:5e:de:a0:92:ce:93:51:6e:e2:f5:1c:01:
                    59:da:6b:5f:c4:27:46:a4:8c:d8:cb:34:e4:f9:41:
                    6a:2f:91:7c:2f:51:a2:a8:50:17:7a:a2:47:3c:13:
                    0a:a6:7c:80:d0:6e:e8:68:a3:dc:8a:72:71:18:c0:
                    25:a7:af:f8:3b:65:02:4a:3c:b0:04:7c:f2:9a:3c:
                    df:e4:5d:ca:1e:76:55:b4:af:5f:d2:7d:eb:a1:98:
                    68:72:94:25:6a:06:98:5f:1b:8e:73:57:28:a9:72:
                    d2:36:70:62:3e:17:ad:79:a1:1e:df:9a:a1:77:d3:
                    4c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E1:84:F4:8D:2E:F2:BA:0E:52:09:75:BD:51:64:D5:1B:01:76:55
            X509v3 Authority Key Identifier:
                keyid:77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363365343a3a2f34382d3438203d3e20323133373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:63e4::/48

    Signature Algorithm: sha256WithRSAEncryption
         bd:1c:ef:c3:03:f9:25:05:f5:95:54:e5:64:4e:84:45:64:a9:
         ed:f7:35:3b:f9:c7:81:e2:00:0f:36:e0:4d:0d:ca:30:77:b7:
         82:cb:7c:1e:ba:e0:fa:f2:af:82:ca:ce:40:d6:20:7b:33:a6:
         95:dc:86:d9:a2:1f:e8:cc:3b:4a:75:8f:14:2b:e2:96:1e:80:
         78:1a:72:6c:15:f5:22:39:00:2d:0d:24:2b:a1:0e:88:30:59:
         02:e4:00:ad:12:dd:82:c8:1d:e0:08:c7:a4:25:89:00:ff:29:
         da:ad:68:97:2b:f1:0e:c9:47:65:0b:2f:63:6e:90:eb:af:db:
         67:c9:6e:e0:4a:13:20:c6:68:e7:c0:17:6b:28:a3:37:cb:ed:
         39:b9:ff:fd:7f:d8:31:0d:ea:aa:a9:09:76:15:1f:eb:55:23:
         37:f9:c1:00:9b:82:41:7f:52:56:18:c3:45:85:12:32:13:bc:
         2b:56:86:81:7e:54:be:5a:35:ff:71:d7:35:63:58:0c:d8:35:
         43:8f:48:d1:b4:06:0b:e1:3e:9d:ec:83:c2:ff:ec:f7:c6:98:
         c9:be:a1:b2:44:b0:33:62:37:7c:64:fa:d7:e8:c7:01:71:fa:
         5a:cc:d3:9a:0b:1a:11:dd:8c:20:d3:5d:f9:10:69:b3:7b:70:
         84:f7:2b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----