Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/97aba9e9-eec8-495b-9e20-d6b3ccebde45/1/326131343a373538313a396661303a3a2f34342d3434203d3e20323133343330.roa
File:                     326131343a373538313a396661303a3a2f34342d3434203d3e20323133343330.roa (raw, json)
Hash identifier:          joCtQ8QWuV/kS9vjxMvuKSqwizppQS6cDGs5ezlVLH0=
Subject key identifier:   B6:0F:A3:A6:9E:56:96:0B:FF:53:A1:DE:62:61:66:8D:59:F8:13:DB
Certificate issuer:       /CN=BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6
Certificate serial:       62144B8026256EA235ABFAD989EBF406074C2A5A
Authority key identifier: BD:8F:16:9B:24:F2:8F:F7:FF:47:FC:60:2D:29:0C:BA:7B:DA:AB:F6
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/97aba9e9-eec8-495b-9e20-d6b3ccebde45/1/326131343a373538313a396661303a3a2f34342d3434203d3e20323133343330.roa
Signing time:             Fri 14 Feb 2025 03:21:39 +0000
ROA not before:           Fri 14 Feb 2025 03:16:39 +0000
ROA not after:            Fri 13 Feb 2026 03:21:39 +0000
asID:                     213430
IP address blocks:        2a14:7581:9fa0::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:14:4b:80:26:25:6e:a2:35:ab:fa:d9:89:eb:f4:06:07:4c:2a:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6
        Validity
            Not Before: Feb 14 03:16:39 2025 GMT
            Not After : Feb 13 03:21:39 2026 GMT
        Subject: CN=B60FA3A69E56960BFF53A1DE6261668D59F813DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ac:56:db:80:e3:a3:fb:3b:9f:53:c6:59:f6:
                    1f:6f:71:91:00:66:c5:49:e0:7a:9a:a5:b0:8c:fc:
                    80:31:c2:b9:8d:0a:c9:d0:5a:a8:61:18:e1:20:11:
                    cc:0a:b4:39:de:9d:34:20:20:36:d1:c5:6c:9e:11:
                    28:5d:dc:7f:b3:8c:61:8e:44:1f:6a:8c:86:02:47:
                    65:76:ed:a2:e6:4f:a4:34:f5:ec:a7:7c:cd:1f:cf:
                    e9:7e:68:6c:86:8c:4d:3d:49:ff:e2:e5:c6:4f:e6:
                    36:d2:65:14:a9:42:97:f1:39:c3:3b:8c:53:4b:bf:
                    26:e3:cf:ac:7b:2a:91:da:f1:4f:43:9d:79:45:05:
                    71:14:6a:b5:29:8f:c2:22:6f:7c:c3:a6:7a:a2:93:
                    26:d4:0f:58:14:39:84:56:48:a6:ea:b0:4e:a4:d8:
                    3c:4b:f1:70:48:10:23:ac:5e:39:8d:e8:bc:29:39:
                    01:99:45:54:22:cc:c2:6e:43:50:a4:ef:29:d1:21:
                    9d:b1:e5:88:09:5d:19:4a:e6:8b:4b:ec:e6:b5:57:
                    fd:bf:29:ec:ef:35:e4:89:30:72:4c:16:9c:35:e6:
                    37:e6:0d:5f:74:eb:70:cb:25:1a:6d:a6:22:49:17:
                    cf:30:98:fb:5a:6b:1d:f8:9f:dc:8e:b9:d8:f2:bf:
                    a3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:0F:A3:A6:9E:56:96:0B:FF:53:A1:DE:62:61:66:8D:59:F8:13:DB
            X509v3 Authority Key Identifier:
                keyid:BD:8F:16:9B:24:F2:8F:F7:FF:47:FC:60:2D:29:0C:BA:7B:DA:AB:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/97aba9e9-eec8-495b-9e20-d6b3ccebde45/1/BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/97aba9e9-eec8-495b-9e20-d6b3ccebde45/1/326131343a373538313a396661303a3a2f34342d3434203d3e20323133343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:9fa0::/44

    Signature Algorithm: sha256WithRSAEncryption
         55:6b:78:0a:0b:27:8b:46:30:ba:02:a6:37:a9:89:d3:49:55:
         b6:75:4b:ff:ec:04:74:a0:43:c2:b4:c7:f4:1a:eb:2a:9b:aa:
         e0:51:0d:9e:77:51:34:cb:e9:66:8d:5b:32:5d:4f:20:37:37:
         0f:40:be:bd:7f:fc:33:57:14:dc:8f:37:fd:59:1a:f4:15:3b:
         3e:7b:e3:2c:8f:bf:7c:be:30:43:d4:f9:8e:5a:bb:4e:a3:37:
         8c:a9:14:4f:c8:81:fb:39:84:dd:5a:05:6e:8d:e6:51:a1:cd:
         94:b8:ee:79:ed:80:7c:66:fc:f5:bd:ef:3a:3c:7b:9e:93:51:
         50:39:c8:0c:73:e2:60:4d:90:f4:90:13:8c:ab:c5:b6:72:5f:
         40:cd:0d:6d:31:e8:c3:e6:fa:7a:09:fb:b3:ea:97:7a:c8:ec:
         f8:47:2e:e5:61:7e:34:b2:b3:21:a4:a6:db:48:af:2e:83:c3:
         11:ad:c3:ed:22:d8:6c:84:92:ef:e0:46:f2:c1:54:0e:79:cd:
         4b:50:af:4e:fb:45:22:d0:2e:6f:e6:84:22:7d:e6:90:eb:1d:
         31:0d:48:51:ed:5a:9a:79:a0:39:7d:98:b6:e8:6b:f6:d6:40:
         85:96:fd:98:c5:51:f7:3c:fa:50:dd:b6:45:a1:ac:b7:0e:67:
         8a:16:b3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----