Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bfd68121-0aaa-4b94-89b5-40c6eabdac26/0/326130613a363034343a633131303a3a2f34342d3434203d3e20323135323431.roa
File:                     326130613a363034343a633131303a3a2f34342d3434203d3e20323135323431.roa (raw, json)
Hash identifier:          ye4Kr7UKWvH9Z7mQeWBaY7qlK1SHzOXMBhuTuTXrW9E=
Subject key identifier:   C3:D4:37:AD:F7:66:B5:0A:F1:01:AC:49:1A:98:98:DE:6E:95:6D:E0
Certificate issuer:       /CN=5D3BF911E19D079EDDFB194ED158480130E355F0
Certificate serial:       17892990A7D52C836C2A679DD401BC023666D98E
Authority key identifier: 5D:3B:F9:11:E1:9D:07:9E:DD:FB:19:4E:D1:58:48:01:30:E3:55:F0
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5D3BF911E19D079EDDFB194ED158480130E355F0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bfd68121-0aaa-4b94-89b5-40c6eabdac26/0/326130613a363034343a633131303a3a2f34342d3434203d3e20323135323431.roa
Signing time:             Fri 30 Aug 2024 12:13:15 +0000
ROA not before:           Fri 30 Aug 2024 12:08:15 +0000
ROA not after:            Fri 29 Aug 2025 12:13:15 +0000
asID:                     215241
IP address blocks:        2a0a:6044:c110::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:89:29:90:a7:d5:2c:83:6c:2a:67:9d:d4:01:bc:02:36:66:d9:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D3BF911E19D079EDDFB194ED158480130E355F0
        Validity
            Not Before: Aug 30 12:08:15 2024 GMT
            Not After : Aug 29 12:13:15 2025 GMT
        Subject: CN=C3D437ADF766B50AF101AC491A9898DE6E956DE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ef:5d:11:2c:e4:7f:84:d7:80:f6:0f:99:fb:
                    9c:81:be:d8:b2:e3:3e:5b:47:f7:e2:ef:7b:ba:7e:
                    78:52:8f:a5:d6:b9:cf:08:cd:12:93:bc:f1:3c:6d:
                    19:0e:58:af:a1:23:e2:42:f3:71:e7:9d:16:ff:3d:
                    2e:0b:72:04:15:55:14:88:02:12:4d:a3:4d:3f:9e:
                    1a:11:0d:4f:54:ae:56:40:e0:ad:13:97:54:52:e1:
                    75:f3:85:63:29:8b:57:c0:fd:b7:5f:9c:ab:5d:37:
                    19:d7:ca:30:29:59:9f:65:b6:12:60:d8:87:e6:bf:
                    55:41:af:43:1a:55:73:25:c6:bc:73:02:56:26:e9:
                    38:de:19:1b:1c:30:99:93:9c:cc:4f:5d:30:18:2d:
                    97:03:4e:49:49:d7:e0:11:df:a3:cb:b8:86:54:9e:
                    ec:6d:27:6a:17:f1:66:c6:f1:88:31:86:72:43:d2:
                    32:f3:19:90:bb:eb:d4:c3:cf:43:cd:23:36:a4:f2:
                    90:d8:b1:34:47:d5:a6:70:88:d9:a3:31:6d:d6:24:
                    52:3c:3a:1a:56:aa:92:b8:d9:86:9e:c2:00:5b:e3:
                    48:2b:ef:86:2f:58:24:c6:9a:63:7a:9b:db:a5:d5:
                    1c:4a:d5:a3:88:0b:e3:f1:c2:22:25:41:16:ca:c6:
                    c1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D4:37:AD:F7:66:B5:0A:F1:01:AC:49:1A:98:98:DE:6E:95:6D:E0
            X509v3 Authority Key Identifier:
                keyid:5D:3B:F9:11:E1:9D:07:9E:DD:FB:19:4E:D1:58:48:01:30:E3:55:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bfd68121-0aaa-4b94-89b5-40c6eabdac26/0/5D3BF911E19D079EDDFB194ED158480130E355F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5D3BF911E19D079EDDFB194ED158480130E355F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bfd68121-0aaa-4b94-89b5-40c6eabdac26/0/326130613a363034343a633131303a3a2f34342d3434203d3e20323135323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:c110::/44

    Signature Algorithm: sha256WithRSAEncryption
         47:63:14:03:5a:68:6a:6e:df:2a:f3:ab:00:91:e7:d4:32:bd:
         c0:b7:6f:53:08:2f:a0:17:89:49:a3:f9:17:80:42:04:bd:5a:
         ec:45:ac:50:9e:50:0a:db:a9:5e:e3:64:15:17:8b:82:29:ef:
         a4:cb:9f:95:83:9c:7a:a0:65:a3:43:9a:5a:52:66:ea:ff:c7:
         a6:35:46:4c:9d:9c:21:53:d7:17:21:36:72:d1:70:b6:d7:cc:
         2c:d5:b4:d8:a0:24:56:86:42:bd:63:bf:d5:82:19:be:6d:27:
         62:0c:c3:50:42:d7:f1:b3:6e:86:6a:21:cf:b6:30:8d:c3:cd:
         a6:b4:f9:b8:a5:b6:7d:5a:28:e5:ed:4a:1c:2c:4b:5c:fc:09:
         c4:37:46:ce:15:e5:de:21:8b:19:2d:b2:0a:90:c2:d0:15:3d:
         95:97:de:f6:e4:e5:9d:50:8a:72:01:77:6e:9c:dd:ed:10:c2:
         18:aa:bc:20:af:92:41:8e:d3:df:b5:01:c8:7b:a1:2b:fc:3b:
         e3:5e:28:d5:91:e1:7c:00:de:ed:eb:8c:46:fe:54:c3:c0:a0:
         fb:8f:df:58:d0:88:7a:e5:8a:6b:0c:f2:8e:c6:4d:24:5e:c4:
         41:2f:fd:e0:f5:cb:23:01:63:83:02:b7:55:1f:d1:e6:d6:13:
         a0:ef:ef:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----