Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6566303a3a2f34342d3438203d3e20313938393233.roa
File:                     326130373a323438363a6566303a3a2f34342d3438203d3e20313938393233.roa (raw, json)
Hash identifier:          hseuYSraXEZSRzxdMks6tQ9NPMbXIJG+SWKAnXoVeNk=
Subject key identifier:   3F:83:6B:AE:29:7D:30:C2:26:CD:E2:83:ED:24:52:C5:66:6C:F1:21
Certificate issuer:       /CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Certificate serial:       12CF778FCA37E582EF0F3393B02ADD5319836285
Authority key identifier: AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6566303a3a2f34342d3438203d3e20313938393233.roa
Signing time:             Sat 04 May 2024 12:50:21 +0000
ROA not before:           Sat 04 May 2024 12:45:21 +0000
ROA not after:            Sat 03 May 2025 12:50:21 +0000
asID:                     198923
IP address blocks:        2a07:2486:ef0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:cf:77:8f:ca:37:e5:82:ef:0f:33:93:b0:2a:dd:53:19:83:62:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
        Validity
            Not Before: May  4 12:45:21 2024 GMT
            Not After : May  3 12:50:21 2025 GMT
        Subject: CN=3F836BAE297D30C226CDE283ED2452C5666CF121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:77:37:76:15:b4:60:83:0c:d2:8d:93:01:75:
                    d5:00:9c:81:5e:ac:f9:00:3b:50:b9:53:a8:17:be:
                    3a:fa:5a:71:1c:a7:8f:de:6c:5e:b1:64:1b:be:81:
                    bb:43:ae:9a:11:f6:31:7e:80:67:68:35:1b:04:c4:
                    e6:4a:33:80:38:85:78:7b:13:94:d5:f0:64:9d:34:
                    97:1b:81:ce:96:d2:b5:f4:1d:71:de:41:80:28:82:
                    fe:0b:cb:9a:19:cd:e6:c2:5e:c9:24:3f:95:ea:a0:
                    df:b8:66:52:8a:8c:11:57:72:f7:e7:7d:96:60:5f:
                    14:73:1b:c3:49:a5:a9:37:91:62:75:e3:aa:55:38:
                    56:3f:cc:76:c3:77:f1:3f:89:a6:8c:6e:41:7e:2f:
                    31:d4:4a:f1:0e:6b:b7:bc:36:58:3c:fe:05:5f:4d:
                    95:1e:89:13:06:74:5e:ff:7b:fc:96:47:e0:23:a8:
                    ae:71:ea:5e:36:8f:c3:16:31:3a:70:b3:dd:b5:b9:
                    23:1e:92:07:51:70:50:a8:b1:01:d5:dc:4b:d6:bc:
                    74:77:5e:70:9a:0e:f9:06:f8:4e:71:e2:8b:9c:09:
                    6b:8a:c2:7b:da:86:4d:31:c1:42:70:1a:d9:d7:41:
                    66:69:f6:ba:e8:52:ce:1a:ce:ff:40:7f:81:1b:79:
                    83:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:83:6B:AE:29:7D:30:C2:26:CD:E2:83:ED:24:52:C5:66:6C:F1:21
            X509v3 Authority Key Identifier:
                keyid:AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/AC2B083EE37BCF2D737C576EF9D532ED717A1711.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6566303a3a2f34342d3438203d3e20313938393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:2486:ef0::/44

    Signature Algorithm: sha256WithRSAEncryption
         56:b2:c1:fd:f9:41:6d:98:a9:ea:15:7f:58:e2:7c:95:77:e2:
         5a:db:d6:24:41:32:8b:a4:2d:27:1a:de:b4:b2:fd:25:2d:51:
         c0:04:78:59:b1:8f:5e:62:eb:2f:c2:a0:1b:97:4f:e4:a5:c4:
         28:c5:e6:a0:71:38:6a:ad:34:39:2c:de:f9:b2:73:1a:16:a6:
         07:bc:39:26:3a:d3:9e:70:6a:ef:16:90:a9:88:09:bb:25:e8:
         70:e5:af:fc:d7:fa:a7:e8:f3:0e:7d:73:76:c0:7c:19:be:09:
         8b:59:e2:e0:94:46:08:f5:e5:66:37:f3:52:07:d9:9b:2d:c1:
         c5:ae:f2:12:02:b9:85:e1:82:82:95:38:ff:08:bf:6f:9e:b1:
         0d:16:ca:72:cb:77:70:b5:f8:ac:95:89:81:17:cb:96:08:58:
         76:19:00:7e:96:49:35:08:17:44:60:00:a9:9f:64:91:55:4f:
         37:03:27:cf:9f:38:9f:09:3c:8f:9d:dc:3b:e3:f9:be:ce:85:
         92:3a:42:c5:ed:5b:fe:1f:f1:5f:a6:25:62:66:2d:4a:0a:16:
         3a:ca:ef:ff:4c:23:12:67:51:cd:d1:f6:63:5c:b4:96:bf:3b:
         32:cc:54:1b:26:a4:77:41:49:40:f1:65:3c:1a:67:f9:2b:23:
         74:98:0a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----