Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/326130613a363034343a386666633a3a2f34382d3438203d3e203331383938.roa
File:                     326130613a363034343a386666633a3a2f34382d3438203d3e203331383938.roa (raw, json)
Hash identifier:          q8cZL7zRQS9lfG4W9xxhb4Ocy49h1pWKhIPba+M61XU=
Subject key identifier:   8E:0D:68:81:F0:41:36:4F:AB:FD:53:79:F3:10:8B:0B:9C:88:49:48
Certificate issuer:       /CN=92E983F766C144A0CEAC0B6FC5C20934091D7E02
Certificate serial:       0B45F7FF986BF13771E0893715B235D7C142FA56
Authority key identifier: 92:E9:83:F7:66:C1:44:A0:CE:AC:0B:6F:C5:C2:09:34:09:1D:7E:02
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/92E983F766C144A0CEAC0B6FC5C20934091D7E02.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/326130613a363034343a386666633a3a2f34382d3438203d3e203331383938.roa
Signing time:             Mon 07 Oct 2024 18:25:21 +0000
ROA not before:           Mon 07 Oct 2024 18:20:21 +0000
ROA not after:            Mon 06 Oct 2025 18:25:21 +0000
asID:                     31898
IP address blocks:        2a0a:6044:8ffc::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:45:f7:ff:98:6b:f1:37:71:e0:89:37:15:b2:35:d7:c1:42:fa:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92E983F766C144A0CEAC0B6FC5C20934091D7E02
        Validity
            Not Before: Oct  7 18:20:21 2024 GMT
            Not After : Oct  6 18:25:21 2025 GMT
        Subject: CN=8E0D6881F041364FABFD5379F3108B0B9C884948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8e:f3:c3:0d:17:8e:64:53:44:cc:13:7c:13:
                    7c:98:22:c0:fb:9c:77:1d:41:42:76:58:d0:3c:3b:
                    d4:fa:90:47:72:55:7f:d6:93:72:90:a8:b8:70:1d:
                    a1:b4:1f:f5:c8:1e:9c:dc:66:bf:cb:d9:f7:25:e1:
                    5c:50:47:5e:25:a3:13:4c:f1:90:4f:38:e6:55:62:
                    17:fe:b6:b7:5e:9e:87:3c:c5:81:e6:98:c6:0e:29:
                    fe:30:2d:2f:54:98:ab:ee:60:bc:6b:95:2c:e5:a7:
                    1e:e5:f6:76:92:28:64:86:c4:2a:95:8a:8e:87:77:
                    69:12:59:c4:06:1e:19:eb:3c:a0:5d:ed:30:09:07:
                    24:ba:93:55:98:be:6a:7d:0f:cf:61:bf:e3:ce:fa:
                    88:b6:16:22:28:90:e2:dd:f8:30:fe:61:30:ae:73:
                    be:40:da:29:20:22:2e:2d:f6:01:13:6b:e1:28:f6:
                    47:cb:4a:65:6a:c3:f2:ef:4f:d5:65:86:99:b1:ee:
                    f9:ef:66:09:70:0f:bf:c7:e8:7c:cb:ee:de:53:55:
                    00:9d:41:fd:1d:1d:c2:89:5d:88:35:24:d0:bf:37:
                    1f:48:07:6a:31:bd:df:bc:b8:88:b8:94:c3:c3:aa:
                    96:ba:d1:8d:5e:c4:23:0f:2a:b7:be:ad:f8:a3:8d:
                    35:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0D:68:81:F0:41:36:4F:AB:FD:53:79:F3:10:8B:0B:9C:88:49:48
            X509v3 Authority Key Identifier:
                keyid:92:E9:83:F7:66:C1:44:A0:CE:AC:0B:6F:C5:C2:09:34:09:1D:7E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/92E983F766C144A0CEAC0B6FC5C20934091D7E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/92E983F766C144A0CEAC0B6FC5C20934091D7E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/326130613a363034343a386666633a3a2f34382d3438203d3e203331383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:8ffc::/48

    Signature Algorithm: sha256WithRSAEncryption
         c6:12:42:20:9d:f7:2a:70:de:cb:f1:b2:22:82:98:7f:ce:ab:
         43:84:1e:e9:c5:66:33:10:5a:fa:e0:ea:67:ae:05:d2:3c:32:
         95:47:9a:dc:5e:1d:c0:64:7c:60:1b:2c:86:5c:89:fc:b8:ad:
         ca:23:62:d4:38:de:f3:ea:5d:aa:d6:5f:b2:f6:3d:0d:68:3d:
         00:e7:54:62:b1:e9:ce:c5:ee:5b:4c:58:29:3e:8c:5c:a5:4c:
         98:07:62:65:c3:1c:ef:d5:62:65:85:81:4a:98:89:0b:2e:a5:
         03:74:28:15:bf:52:75:1b:b1:56:cd:a4:a0:d1:04:b8:58:3f:
         ae:15:9a:f2:58:01:60:07:09:52:2f:7b:b8:d1:3c:3d:b8:ac:
         18:58:fc:2f:0a:a8:64:06:77:7a:b2:dc:2a:96:56:0e:56:09:
         c2:b8:26:ce:5d:b9:b7:df:92:30:c6:58:a1:4f:03:45:c9:a5:
         72:a9:e2:c7:b2:c3:01:0e:ad:80:a8:08:28:52:5f:a4:08:00:
         7c:16:5e:ca:3b:56:9b:10:96:1f:03:cb:3e:53:b5:2c:76:19:
         33:38:06:8c:73:ff:7f:2f:9f:81:a9:a6:7d:d6:7c:3a:01:68:
         af:52:bd:68:61:f9:56:eb:6c:b5:9e:6a:e6:2b:86:89:86:38:
         68:78:c3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----