Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/2/326130373a323438373a3a2f33322d3438203d3e20323135383238.roa
File:                     326130373a323438373a3a2f33322d3438203d3e20323135383238.roa (raw, json)
Hash identifier:          vkuDOfDy9gmFhFLg4+zl0wMF3xsgiDaU0WJp0H8+3sc=
Subject key identifier:   28:FF:52:C7:90:00:B7:2F:53:81:0C:D0:98:BC:24:A0:80:6A:A5:E8
Certificate issuer:       /CN=4933E82359A31E92233CED54CD674AE9D68FB569
Certificate serial:       3B49A4628C8C8A7664E813390EF406A5CB32C931
Authority key identifier: 49:33:E8:23:59:A3:1E:92:23:3C:ED:54:CD:67:4A:E9:D6:8F:B5:69
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/4933E82359A31E92233CED54CD674AE9D68FB569.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/2/326130373a323438373a3a2f33322d3438203d3e20323135383238.roa
Signing time:             Sat 30 Mar 2024 15:51:48 +0000
ROA not before:           Sat 30 Mar 2024 15:46:48 +0000
ROA not after:            Sat 29 Mar 2025 15:51:48 +0000
asID:                     215828
IP address blocks:        2a07:2487::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:49:a4:62:8c:8c:8a:76:64:e8:13:39:0e:f4:06:a5:cb:32:c9:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4933E82359A31E92233CED54CD674AE9D68FB569
        Validity
            Not Before: Mar 30 15:46:48 2024 GMT
            Not After : Mar 29 15:51:48 2025 GMT
        Subject: CN=28FF52C79000B72F53810CD098BC24A0806AA5E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:77:36:30:2f:24:aa:ab:91:9c:47:3c:1e:ec:
                    80:90:3d:d6:de:47:3e:3a:9f:da:ec:56:f6:a5:66:
                    ae:8f:b6:c9:39:33:76:1f:aa:90:5b:46:35:c7:fd:
                    3e:14:ea:24:62:ff:d1:a2:09:9f:b7:02:bc:d5:06:
                    3f:82:e3:33:ba:be:5b:1a:9b:39:ab:cd:2b:f0:43:
                    32:82:c6:4f:4e:5e:c2:da:5e:f2:bf:f8:c1:cc:8a:
                    8a:45:6f:6a:fb:a5:74:0e:5e:a5:a0:13:e0:41:3c:
                    03:05:26:7d:dc:d5:ea:c9:4e:05:b2:15:4d:1a:df:
                    d3:bc:b7:b4:c3:f5:94:3a:2b:de:ae:7d:07:79:b6:
                    04:68:62:74:bc:38:7e:a9:41:d3:f7:9b:60:c1:cc:
                    f2:a4:1b:1f:4c:8e:a2:98:94:27:61:b9:6a:be:c2:
                    0b:e6:4f:6a:13:d9:93:84:98:32:a5:24:50:9e:61:
                    f5:52:59:f3:99:be:f8:a3:8f:aa:2f:3d:c9:4e:1d:
                    6a:22:1f:08:7a:05:0c:ab:14:48:64:d2:a0:7b:4f:
                    a7:d8:b0:3d:6f:34:b9:a9:ae:59:af:f8:6f:28:a6:
                    e9:31:85:fd:90:26:21:76:6c:7d:5b:97:17:23:d0:
                    d4:55:ab:a9:c2:d5:cf:4c:68:ef:0e:b2:0e:bb:d9:
                    9d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FF:52:C7:90:00:B7:2F:53:81:0C:D0:98:BC:24:A0:80:6A:A5:E8
            X509v3 Authority Key Identifier:
                keyid:49:33:E8:23:59:A3:1E:92:23:3C:ED:54:CD:67:4A:E9:D6:8F:B5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/2/4933E82359A31E92233CED54CD674AE9D68FB569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/4933E82359A31E92233CED54CD674AE9D68FB569.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/2/326130373a323438373a3a2f33322d3438203d3e20323135383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:2487::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:33:ca:51:01:de:c1:bc:c9:5c:42:b1:eb:e8:26:de:9c:ab:
         b7:da:ec:1e:b1:61:f1:fb:fb:a5:ad:b1:ea:56:a5:94:30:7d:
         09:8f:b0:0e:22:79:8f:79:1a:80:0a:b7:7d:70:78:6a:8a:2e:
         02:27:28:c0:f3:27:5b:e0:d6:eb:b8:7b:03:24:7d:3f:db:f2:
         ea:21:65:75:d5:65:cd:f9:74:51:a7:b6:ab:b5:af:74:af:4a:
         06:50:10:3e:eb:5e:28:17:52:27:cc:50:98:8e:0a:73:f5:98:
         b4:29:ff:ad:c7:06:c8:ce:d7:ac:52:2e:c1:4e:89:de:d5:8f:
         cd:0d:0f:c4:77:24:27:ce:c7:09:cd:a6:54:97:d4:58:13:7c:
         11:6c:5b:b8:c9:8f:7c:e8:7b:49:90:1c:49:41:57:45:fb:53:
         88:75:f1:50:05:a4:13:65:9b:ce:ad:bc:58:2e:6a:99:10:2c:
         21:a3:d3:f1:81:6e:ee:11:e6:a7:6c:89:0e:e4:94:28:8b:55:
         3e:af:84:7f:fd:0e:94:55:3b:81:73:e7:29:c1:31:cd:fc:15:
         4e:99:d7:de:39:ed:5f:97:12:d2:a5:9f:56:6c:82:5e:dc:18:
         40:4f:de:33:05:83:bc:e8:19:04:50:3d:42:e9:cb:fd:6c:83:
         72:08:85:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----