Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/326130613a363034343a376432323a3a2f34382d3438203d3e20323134353130.roa
File:                     326130613a363034343a376432323a3a2f34382d3438203d3e20323134353130.roa (raw, json)
Hash identifier:          6QB86LCDvT8yq3v58c2YEfFPwBMmZAVxG13c4LjDtA4=
Subject key identifier:   F1:24:48:23:1B:F4:62:2D:71:2F:6D:D6:96:4D:D9:A1:74:CB:AB:47
Certificate issuer:       /CN=E48ABA5D969C9C557913482E3064E3BC626018E3
Certificate serial:       40AB0F17642BA390417BEAAF59961B58CFF3ED7D
Authority key identifier: E4:8A:BA:5D:96:9C:9C:55:79:13:48:2E:30:64:E3:BC:62:60:18:E3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E48ABA5D969C9C557913482E3064E3BC626018E3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/326130613a363034343a376432323a3a2f34382d3438203d3e20323134353130.roa
Signing time:             Sat 21 Sep 2024 14:18:27 +0000
ROA not before:           Sat 21 Sep 2024 14:13:27 +0000
ROA not after:            Sat 20 Sep 2025 14:18:27 +0000
asID:                     214510
IP address blocks:        2a0a:6044:7d22::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ab:0f:17:64:2b:a3:90:41:7b:ea:af:59:96:1b:58:cf:f3:ed:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E48ABA5D969C9C557913482E3064E3BC626018E3
        Validity
            Not Before: Sep 21 14:13:27 2024 GMT
            Not After : Sep 20 14:18:27 2025 GMT
        Subject: CN=F12448231BF4622D712F6DD6964DD9A174CBAB47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:35:32:06:69:9b:0d:1b:f6:db:47:ee:0a:9c:
                    f4:40:5a:ba:a8:27:8f:b2:88:c1:36:e6:a6:f8:a9:
                    df:ac:34:a0:d7:77:1d:d3:24:a2:c0:2c:82:5f:ec:
                    6d:e9:d1:46:c5:e2:cb:6c:2c:c1:6c:05:78:b7:f1:
                    d3:8d:f5:53:62:86:0b:ad:36:60:ed:49:f3:18:86:
                    66:4f:90:c0:e0:01:a6:3c:10:21:11:d6:06:9e:15:
                    77:fb:51:d8:34:90:45:86:b9:8f:55:57:fe:cd:3a:
                    28:fb:2c:56:7d:61:73:07:db:f8:8d:fd:af:4d:c6:
                    99:d8:12:1f:fd:fa:07:59:38:54:bd:a5:91:c8:21:
                    e9:85:f8:ea:d3:c4:50:42:1e:50:66:ba:dd:3c:5f:
                    c0:14:d5:35:7c:27:ac:00:c3:2e:89:07:4a:da:5f:
                    35:d6:b7:31:47:c2:8a:9e:c9:64:82:ba:fb:ff:ea:
                    ea:7d:fc:aa:27:99:6d:62:c3:9a:e4:78:9f:d8:84:
                    d1:54:56:78:d7:ad:12:59:16:64:b6:ba:ae:89:e6:
                    13:b7:27:9f:3f:fd:9e:d8:b0:2e:78:02:91:8d:47:
                    8f:b8:14:60:86:85:68:b1:87:d8:2b:aa:81:19:64:
                    84:45:bf:bf:9d:6c:ae:30:f7:24:07:e4:8e:ff:aa:
                    2d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:24:48:23:1B:F4:62:2D:71:2F:6D:D6:96:4D:D9:A1:74:CB:AB:47
            X509v3 Authority Key Identifier:
                keyid:E4:8A:BA:5D:96:9C:9C:55:79:13:48:2E:30:64:E3:BC:62:60:18:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/E48ABA5D969C9C557913482E3064E3BC626018E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E48ABA5D969C9C557913482E3064E3BC626018E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/326130613a363034343a376432323a3a2f34382d3438203d3e20323134353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7d22::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:45:4e:43:98:4b:4f:8c:a2:f4:8b:8a:b9:aa:ca:8a:99:ce:
         c9:f9:47:cc:41:c0:13:b7:62:05:f9:41:09:42:11:e4:55:2d:
         6d:3e:7c:ef:21:22:d6:2e:3d:30:b6:54:4f:7b:99:14:9e:80:
         5e:3b:2e:76:2d:a5:07:d6:9c:c1:1d:65:93:5a:12:44:3f:24:
         81:95:d3:99:8d:cd:e5:f5:bd:0d:17:15:ad:6a:de:c8:5e:e5:
         e7:a2:b5:41:75:11:ea:ca:0d:54:22:8c:37:c8:d1:19:a5:13:
         28:e3:69:5e:23:ee:a0:1a:ea:6f:3d:e2:43:33:87:eb:ea:0f:
         5a:f4:9f:08:c8:79:17:33:cf:af:6d:06:02:9a:92:cd:95:96:
         41:48:f4:b4:91:98:2b:9d:e0:dc:69:3f:bb:2e:3a:e1:74:32:
         e0:cd:95:e1:19:0d:88:51:bc:0e:a5:e6:bf:94:81:5f:b4:ea:
         0b:6c:81:9a:26:92:c7:0a:63:df:17:15:b1:76:ca:6e:5e:6d:
         5f:86:59:4d:08:17:1a:d1:b5:76:83:ce:c9:f1:a5:9a:e6:77:
         00:8b:a5:6e:13:dd:6f:b8:5f:3d:80:6c:95:e8:41:03:22:35:
         bf:d7:47:87:38:b0:2b:d6:b3:a6:29:0c:ca:7a:c4:0a:51:4b:
         41:69:ab:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----