Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538303a393030303a3a2f34302d3438203d3e20323134363433.roa
File:                     326131343a373538303a393030303a3a2f34302d3438203d3e20323134363433.roa (raw, json)
Hash identifier:          TpBOht4fHdBbgzn8V6oN1sv1lzMWI2nPHKIFH/SJnHk=
Subject key identifier:   8C:66:32:B6:D4:36:A3:45:19:BC:63:D5:03:02:F0:2C:33:D6:C1:82
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       77AD21E68AF4F5584A2365814CBFBBB2FA8E6EC3
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538303a393030303a3a2f34302d3438203d3e20323134363433.roa
Signing time:             Tue 17 Dec 2024 03:25:47 +0000
ROA not before:           Tue 17 Dec 2024 03:20:47 +0000
ROA not after:            Tue 16 Dec 2025 03:25:47 +0000
asID:                     214643
IP address blocks:        2a14:7580:9000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ad:21:e6:8a:f4:f5:58:4a:23:65:81:4c:bf:bb:b2:fa:8e:6e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Dec 17 03:20:47 2024 GMT
            Not After : Dec 16 03:25:47 2025 GMT
        Subject: CN=8C6632B6D436A34519BC63D50302F02C33D6C182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a1:52:92:be:52:2b:1a:d6:0a:98:81:3f:39:
                    db:38:91:7e:30:04:76:c3:d2:79:85:6a:b1:d1:eb:
                    3f:70:b2:a5:24:09:3a:d8:92:a4:a6:ab:f3:a9:24:
                    ae:13:7b:67:b7:35:60:75:49:d3:53:7f:bb:ca:0f:
                    97:3d:0b:05:ba:96:19:b1:4a:6a:23:7b:9d:0c:50:
                    08:d7:3a:ac:5e:f4:8e:48:7d:f6:83:d4:89:cc:fd:
                    17:d0:bb:9d:46:59:d8:d5:40:e5:c5:43:a7:de:99:
                    46:ab:7d:77:f9:ad:74:4b:62:78:e6:60:8c:20:de:
                    ce:e3:66:41:1d:b9:4e:91:e2:5b:e7:62:3a:60:be:
                    76:1d:bb:d6:c0:27:a6:3f:a3:f0:b8:16:d3:7c:6a:
                    31:37:36:b4:06:b4:85:0f:5a:a8:71:20:21:c0:79:
                    ce:e5:c3:ab:84:62:35:d1:de:b4:0b:fd:62:7e:e4:
                    87:b9:e7:99:98:66:cf:ae:9f:f5:1f:f8:fe:0d:dc:
                    f0:67:37:75:fa:e9:5b:3a:12:a2:75:a3:f2:e4:9a:
                    61:4a:c8:3e:9b:38:53:82:1e:99:50:76:f3:30:bb:
                    ad:b1:1e:0b:d2:95:ce:cc:6e:fd:6a:37:6b:cd:3d:
                    bc:b9:a2:f1:71:e9:3e:0f:cb:7f:6a:6d:fa:75:91:
                    e7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:66:32:B6:D4:36:A3:45:19:BC:63:D5:03:02:F0:2C:33:D6:C1:82
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538303a393030303a3a2f34302d3438203d3e20323134363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         57:22:0f:e5:6a:b8:32:2e:d4:2c:c9:52:49:a9:a9:c9:ca:8b:
         a6:a1:95:13:5b:28:83:6d:cc:fb:7a:5d:fb:c6:8c:dd:e3:8c:
         4d:dc:e8:9b:eb:41:eb:db:cc:8d:c4:cf:af:f7:f0:f0:0c:a2:
         b9:d2:ae:34:1d:af:5a:ec:c5:a3:1a:36:bb:99:2c:74:d5:d9:
         97:36:2b:da:57:7d:50:79:b9:5a:81:a0:57:42:51:a6:93:8f:
         0f:04:96:69:6a:be:c9:25:05:49:5e:0a:f6:7a:01:76:73:a6:
         41:b1:1a:49:66:eb:41:47:47:f2:f9:01:e9:b6:fb:b9:eb:e9:
         5a:02:81:87:38:0e:cf:87:2f:ae:f1:c5:35:47:ea:c4:92:64:
         9d:19:a0:0d:d1:9b:ee:bb:3e:4b:3a:db:65:1f:06:b0:8c:a3:
         2d:e1:e4:24:03:ac:48:3b:4c:ff:9b:69:29:ca:68:b0:5c:ab:
         2b:bf:6a:9b:a3:bf:ed:eb:b1:47:2b:04:87:ac:5f:6d:e9:a9:
         b8:e8:13:b8:98:2b:f7:a2:e1:9b:5f:b8:ee:51:29:ae:4d:ac:
         a9:d8:23:a5:e9:62:15:94:df:ab:25:ed:82:c0:aa:3f:a7:da:
         e3:a2:ec:72:da:7e:c3:a6:e1:3e:25:a2:0f:90:05:50:bb:56:
         00:98:a9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----