Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363530303a3a2f34302d3430203d3e20323134313239.roa
File:                     326130613a363034343a363530303a3a2f34302d3430203d3e20323134313239.roa (raw, json)
Hash identifier:          WfBflgAETd85xLhU6tMxkCw/SOctQe1iwYZ1FTXwDTs=
Subject key identifier:   87:81:99:40:9B:31:87:0C:4A:7D:CD:1F:9A:67:F1:B0:A3:3D:AE:21
Certificate issuer:       /CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
Certificate serial:       7778A7465AAF9DCABB49BF820B2A0D4A28CE20DE
Authority key identifier: 77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363530303a3a2f34302d3430203d3e20323134313239.roa
Signing time:             Fri 20 Dec 2024 17:23:40 +0000
ROA not before:           Fri 20 Dec 2024 17:18:40 +0000
ROA not after:            Fri 19 Dec 2025 17:23:40 +0000
asID:                     214129
IP address blocks:        2a0a:6044:6500::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:78:a7:46:5a:af:9d:ca:bb:49:bf:82:0b:2a:0d:4a:28:ce:20:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
        Validity
            Not Before: Dec 20 17:18:40 2024 GMT
            Not After : Dec 19 17:23:40 2025 GMT
        Subject: CN=878199409B31870C4A7DCD1F9A67F1B0A33DAE21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:6c:6e:d7:32:3c:57:70:4e:4a:35:72:fc:c7:
                    fe:31:06:50:44:4d:17:c9:25:5b:9d:8b:ca:96:1e:
                    65:4d:31:a0:15:51:ff:ce:51:ca:e8:77:f1:ba:3d:
                    c5:ca:18:93:fd:8a:51:99:51:bc:2f:ef:61:1e:c8:
                    88:35:a2:eb:c7:c6:b0:7f:7c:09:af:9f:bd:8b:96:
                    23:df:b0:c4:20:27:f5:ee:d6:10:ee:73:16:05:7e:
                    74:c4:21:a2:3f:90:b7:c4:54:d4:80:1b:0d:31:cd:
                    c3:e3:5d:e8:09:bd:44:b1:83:59:fd:3c:27:91:78:
                    3d:c2:7f:19:38:3e:c4:45:ff:0b:b3:f4:77:7c:4d:
                    22:e6:2e:50:16:75:e9:53:b9:ac:b4:58:06:87:69:
                    e2:5a:da:17:89:5f:8c:79:c1:95:9d:d8:77:57:67:
                    91:a3:55:36:f3:0d:15:e4:f5:f4:44:dc:2b:45:21:
                    cf:0c:ee:ad:7b:e2:cd:03:4a:fb:a2:ab:d5:86:b0:
                    b8:5f:0d:27:17:bf:ae:b6:66:00:7e:96:df:0b:b9:
                    ae:9c:82:d9:7c:ad:e3:33:bd:c9:c7:05:4f:35:c4:
                    02:4e:3e:ba:5a:f7:aa:5c:03:21:72:e3:fb:15:86:
                    99:f9:10:49:75:53:d4:27:d5:de:62:68:7e:a5:ec:
                    9a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:81:99:40:9B:31:87:0C:4A:7D:CD:1F:9A:67:F1:B0:A3:3D:AE:21
            X509v3 Authority Key Identifier:
                keyid:77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363530303a3a2f34302d3430203d3e20323134313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:6500::/40

    Signature Algorithm: sha256WithRSAEncryption
         b9:52:3c:d5:9c:2d:dd:81:8c:e8:ad:69:a1:70:35:8f:17:bd:
         f5:8b:88:1b:c7:b5:58:c1:fe:13:bb:a2:e1:5e:3c:62:6b:f0:
         b0:b4:d3:39:91:7f:c4:82:2b:62:98:24:22:7d:b5:1b:bc:25:
         2d:20:e6:91:84:ec:87:89:a7:57:7e:d3:66:47:23:da:02:65:
         7e:e0:43:b3:d8:7c:bc:dd:00:05:be:44:18:49:a1:9a:94:d6:
         51:b8:01:14:2b:df:35:f0:30:43:e2:3e:85:bd:b4:c9:a4:ea:
         08:c9:51:1b:8d:3b:1e:94:61:3b:78:9b:56:c2:e3:4e:a1:fd:
         ad:92:38:0e:e1:5b:a8:5a:24:9a:d8:9b:62:5f:fb:2a:72:fa:
         a4:b1:0f:89:d5:29:c2:e9:b0:69:31:23:97:29:1c:3f:26:6a:
         24:02:11:cf:a9:ec:7b:d9:f0:b4:70:55:5a:ac:1f:0f:7a:8b:
         62:f0:34:d1:02:f9:2c:6c:1e:68:b7:b0:30:b7:a1:38:04:48:
         cc:8d:09:0c:ef:e8:e6:38:60:ca:6f:1f:34:9a:ad:a1:9c:5c:
         6e:35:b6:46:dc:9c:ad:f9:1f:ac:d7:92:1a:8e:b3:c9:f4:d4:
         26:69:3c:7e:f8:4b:23:f8:e6:79:a4:1e:9d:96:af:30:f0:73:
         2e:7c:01:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----