Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa
File:                     326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (raw, json)
Hash identifier:          8VIJvS4DRohWd1Y0K8fQgnGOXF/vTHOcI7Xson0U+54=
Subject key identifier:   81:2A:DF:45:E0:F5:5B:3C:35:43:80:D2:4B:FA:4B:6D:F3:77:F4:8E
Certificate issuer:       /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial:       33C2FF3D8ED511538CD898FF14C671FADAE05BB5
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa
Signing time:             Mon 15 Apr 2024 18:25:10 +0000
ROA not before:           Mon 15 Apr 2024 18:20:10 +0000
ROA not after:            Mon 14 Apr 2025 18:25:10 +0000
asID:                     215242
IP address blocks:        2a0f:85c1:700::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c2:ff:3d:8e:d5:11:53:8c:d8:98:ff:14:c6:71:fa:da:e0:5b:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
        Validity
            Not Before: Apr 15 18:20:10 2024 GMT
            Not After : Apr 14 18:25:10 2025 GMT
        Subject: CN=812ADF45E0F55B3C354380D24BFA4B6DF377F48E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1b:0f:a1:4a:39:1a:6c:f1:5a:65:69:a5:9f:
                    53:8c:b8:a8:46:24:19:34:8a:75:3f:c7:a4:ae:29:
                    fa:36:9d:7d:b1:2a:8c:76:35:56:3e:cb:cf:03:7a:
                    e8:3b:6d:53:f3:b8:04:48:6e:b0:e5:75:27:ab:51:
                    f8:09:67:7e:34:c7:1d:03:4a:73:97:1d:02:fd:ad:
                    eb:92:b6:5b:bb:6d:7a:fa:b2:d1:50:11:44:89:6d:
                    48:87:b1:ad:21:97:9b:73:e1:7a:a8:70:58:3c:46:
                    3a:40:dd:60:91:96:aa:f2:ea:84:45:b0:ee:b2:40:
                    67:24:1d:a0:a1:94:68:03:d3:dc:af:5c:e7:b4:6a:
                    39:09:4f:37:17:65:57:48:5e:02:fc:b0:ac:dc:66:
                    67:37:e4:66:e7:83:86:01:cd:9e:b7:8d:d0:0a:59:
                    26:97:f6:28:27:b6:bc:c2:ef:d4:d6:f0:54:75:fc:
                    61:49:cc:ab:50:d7:d2:83:36:fc:a5:5d:a3:9e:c6:
                    a0:a6:c9:12:e2:6a:01:35:5e:a4:b0:0e:be:68:d3:
                    3e:c7:dc:ce:fd:ad:de:de:7a:30:e7:d1:9f:83:e8:
                    95:98:c8:ee:7f:5a:4b:88:6b:d8:58:a6:40:b2:a2:
                    99:7e:6c:02:4e:6e:a7:32:af:51:4d:0f:52:45:95:
                    6d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:2A:DF:45:E0:F5:5B:3C:35:43:80:D2:4B:FA:4B:6D:F3:77:F4:8E
            X509v3 Authority Key Identifier:
                keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         36:46:46:8b:91:6c:d3:c8:d5:4f:dd:7a:a2:2f:31:a0:82:de:
         f9:06:b8:c4:84:89:43:39:51:ed:3c:4a:d8:fe:d0:ac:38:c7:
         49:1a:d9:bc:b9:57:86:a4:6f:a7:25:77:e2:3f:1d:c3:e8:32:
         ca:f4:c9:f2:67:22:ea:48:32:7a:45:9f:f9:ad:b2:75:dd:9c:
         00:8f:31:bb:28:fe:75:26:b5:b8:82:e1:68:08:9e:c6:95:3b:
         6f:99:b1:f3:c1:90:c7:cc:71:21:58:65:8d:8d:fb:26:cd:89:
         d0:f3:9b:15:6e:6e:fc:b5:84:1f:f7:31:ae:73:e3:10:d6:4f:
         ed:22:13:22:63:99:f3:d3:6c:b5:fe:b5:03:ca:dc:8d:0e:4d:
         62:96:51:19:cd:da:7d:2d:17:e8:26:06:05:fa:2f:86:68:24:
         2c:e4:39:77:48:76:26:2c:1b:74:f7:fc:8c:57:4d:7b:75:80:
         bf:50:42:c5:fe:f1:42:1a:88:0b:14:86:eb:54:4a:ae:93:b1:
         05:6b:85:7e:d4:ba:fe:5f:a0:82:a8:1f:13:3f:c7:38:ad:7f:
         53:de:17:2a:c8:a4:4d:9f:28:27:05:d6:7a:0c:d8:48:4d:64:
         75:ac:ea:42:ff:67:45:3d:44:75:b1:98:3d:69:f9:2f:d0:cb:
         bd:ed:24:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----