Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa
File:                     326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (raw, json)
Hash identifier:          M4zqLtdUHSAbU4GatESAUlsOQgWU2zpPTfy3/5JmOsg=
Subject key identifier:   3B:9A:5C:AC:46:6B:9D:9F:A5:A9:6D:7C:3F:AD:0F:FC:A5:5B:F7:88
Certificate issuer:       /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial:       6038550A3A21F73D7371F32229120FE91AA55E56
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa
Signing time:             Sat 08 Feb 2025 01:38:44 +0000
ROA not before:           Sat 08 Feb 2025 01:33:44 +0000
ROA not after:            Sat 07 Feb 2026 01:38:44 +0000
asID:                     215242
IP address blocks:        2a0f:85c1:7fa::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:38:55:0a:3a:21:f7:3d:73:71:f3:22:29:12:0f:e9:1a:a5:5e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
        Validity
            Not Before: Feb  8 01:33:44 2025 GMT
            Not After : Feb  7 01:38:44 2026 GMT
        Subject: CN=3B9A5CAC466B9D9FA5A96D7C3FAD0FFCA55BF788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:05:64:9b:3b:e8:f1:19:6a:d6:80:52:b8:98:
                    52:bd:9d:f8:fe:db:91:01:67:a7:e8:a2:5f:4a:39:
                    18:37:da:2f:89:d1:58:40:17:32:5e:01:73:fe:aa:
                    2f:4c:f4:ce:3d:6d:0f:39:ef:85:48:b5:64:83:18:
                    94:5b:d9:41:b6:c9:27:e5:cf:1e:69:3e:80:d2:19:
                    d9:4c:72:0c:c5:b8:b8:0f:79:66:ab:6c:74:33:b8:
                    54:b9:73:5c:d6:b9:e9:3b:53:68:63:87:8a:91:7b:
                    d4:1d:a9:b2:ed:7b:07:2f:6e:7a:ca:10:86:a8:a6:
                    70:1b:6e:18:be:fc:b9:1f:ba:3e:ad:7f:f6:5f:58:
                    a4:31:08:2f:c3:ef:45:ff:72:21:d0:61:5b:ea:19:
                    ba:18:4c:31:06:bc:de:32:56:a3:2b:f5:e6:ce:19:
                    c5:bd:4f:6a:69:43:47:de:51:14:26:bc:36:e9:eb:
                    35:ab:53:b4:e3:9d:e7:21:ef:53:1d:bd:05:9d:0b:
                    36:59:dd:a7:88:65:13:1b:8d:d2:d4:cc:2c:21:ce:
                    31:24:6a:5a:73:e7:97:2c:e7:29:6d:ef:c3:4a:08:
                    1f:19:81:3c:ca:49:67:57:48:48:87:19:15:4e:bb:
                    33:60:2e:ff:41:8f:de:1d:9e:78:08:c5:54:37:16:
                    6b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:9A:5C:AC:46:6B:9D:9F:A5:A9:6D:7C:3F:AD:0F:FC:A5:5B:F7:88
            X509v3 Authority Key Identifier:
                keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:7fa::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:3a:bd:8c:ea:5d:b1:3c:e4:0f:ce:fe:5c:76:1d:e4:06:04:
         7f:5d:ef:77:dc:5a:df:b2:bb:ea:1d:40:a3:6e:31:d8:6c:c7:
         4b:9a:07:2c:64:ef:99:26:4d:4b:fd:fe:11:79:a2:21:94:93:
         2d:d7:d2:02:34:b3:ce:06:d2:d9:b1:88:52:75:7d:e5:6d:8e:
         15:fb:47:70:92:26:8c:bc:11:94:1a:83:bc:4e:98:e2:a2:7f:
         d5:60:57:b5:7d:81:dc:db:68:d1:73:40:ab:71:63:47:79:af:
         1d:68:38:27:1f:7a:ae:cf:b4:84:44:6a:d5:ce:bc:dc:a7:74:
         a9:b5:ef:7a:7d:7c:82:40:49:0a:dd:a1:2f:e1:ed:87:fb:8b:
         97:e2:3f:cc:15:e1:3a:10:df:c9:47:55:06:05:81:a7:39:4d:
         86:48:af:d1:02:1c:63:55:2a:15:a5:25:3f:19:2d:39:77:63:
         c0:d8:65:ad:80:37:cc:bf:64:94:d1:44:73:54:81:8f:a1:b7:
         72:a5:70:c3:0b:97:f7:d7:04:f0:45:14:4f:fe:14:c9:3e:16:
         92:d9:ac:0e:39:fe:70:48:86:b0:3c:9f:d9:92:08:ee:e4:7c:
         8f:15:c9:04:b1:6a:e7:3c:bd:38:76:d8:5d:98:ce:fd:56:24:
         3f:0a:5e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----