Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3f064c2-a45d-4ab2-b1db-cf4537db6f7a/1/326130373a323438373a3a2f33322d3332203d3e20323135383238.roa
File:                     326130373a323438373a3a2f33322d3332203d3e20323135383238.roa (raw, json)
Hash identifier:          gk5hbC0JB5WKQK3JtzAIfwyfkhXWvCr2UxY0RQsxZZ4=
Subject key identifier:   BD:59:1B:76:6C:D3:43:12:94:0E:F9:0D:93:1A:6D:21:02:DB:BD:E7
Certificate issuer:       /CN=72484EF62E84FA48E7A4A243EFAAF012268DBBB4
Certificate serial:       4B3D55BD350AF207A44829FD8845D78437C503AD
Authority key identifier: 72:48:4E:F6:2E:84:FA:48:E7:A4:A2:43:EF:AA:F0:12:26:8D:BB:B4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/72484EF62E84FA48E7A4A243EFAAF012268DBBB4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e3f064c2-a45d-4ab2-b1db-cf4537db6f7a/1/326130373a323438373a3a2f33322d3332203d3e20323135383238.roa
Signing time:             Sun 25 Feb 2024 02:27:09 +0000
ROA not before:           Sun 25 Feb 2024 02:22:09 +0000
ROA not after:            Sun 23 Feb 2025 02:27:09 +0000
asID:                     215828
IP address blocks:        2a07:2487::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:3d:55:bd:35:0a:f2:07:a4:48:29:fd:88:45:d7:84:37:c5:03:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72484EF62E84FA48E7A4A243EFAAF012268DBBB4
        Validity
            Not Before: Feb 25 02:22:09 2024 GMT
            Not After : Feb 23 02:27:09 2025 GMT
        Subject: CN=BD591B766CD34312940EF90D931A6D2102DBBDE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ae:e9:33:2b:9a:58:01:eb:7a:fd:bb:c2:8a:
                    5f:ca:f2:48:53:29:2e:03:41:a9:6f:4d:fb:93:e2:
                    1f:16:e2:cb:ad:ac:91:c1:62:0e:ad:6a:13:df:2c:
                    b8:b6:05:d5:f6:d7:0d:60:73:de:41:50:05:64:1a:
                    ae:4f:5a:d0:ca:5c:d4:04:ba:05:0c:04:ea:36:e3:
                    bc:e6:67:7c:bb:b4:23:b4:e5:7e:af:cb:29:09:f0:
                    e6:50:d4:f2:b3:db:bd:9d:6e:e6:31:80:dd:7e:86:
                    cd:fc:c3:3d:d7:0e:90:23:fa:b5:e4:e7:ea:de:ba:
                    df:b1:4d:9f:dc:01:e0:9d:75:3a:3a:a5:0f:d6:ed:
                    83:7f:be:55:d0:5e:2d:69:7f:ab:b7:1c:e3:12:2d:
                    76:bd:48:6e:78:08:2f:f9:d7:ae:e0:41:75:4b:f0:
                    81:4d:d6:b1:52:b1:15:11:62:ab:f9:3f:b2:9f:a5:
                    2f:be:bd:e7:6c:43:45:fb:5d:ac:01:30:54:8f:73:
                    49:ea:13:01:dc:5d:25:4d:3a:5c:3c:2e:fe:eb:c7:
                    33:b4:48:43:32:9c:a4:e3:19:8f:90:9b:44:97:52:
                    a8:94:dd:49:fa:67:cc:5b:d0:80:cd:f0:bb:db:1e:
                    bc:20:1e:e4:7b:b1:26:a3:d0:46:00:81:f6:ef:a5:
                    bc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:59:1B:76:6C:D3:43:12:94:0E:F9:0D:93:1A:6D:21:02:DB:BD:E7
            X509v3 Authority Key Identifier:
                keyid:72:48:4E:F6:2E:84:FA:48:E7:A4:A2:43:EF:AA:F0:12:26:8D:BB:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e3f064c2-a45d-4ab2-b1db-cf4537db6f7a/1/72484EF62E84FA48E7A4A243EFAAF012268DBBB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/72484EF62E84FA48E7A4A243EFAAF012268DBBB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3f064c2-a45d-4ab2-b1db-cf4537db6f7a/1/326130373a323438373a3a2f33322d3332203d3e20323135383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:2487::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:ba:20:f5:17:72:0f:eb:7e:50:6e:2c:52:86:02:9f:6e:63:
         41:9f:32:12:69:68:cf:2a:3d:0c:89:c2:05:b5:28:86:68:d8:
         cb:72:ab:7e:00:83:5f:da:1c:37:ed:f1:37:c5:22:dc:65:15:
         e2:30:c8:91:a9:07:b8:d6:19:06:95:e3:69:a7:11:ae:21:29:
         77:62:3e:d6:cb:7f:e5:08:66:a5:09:9b:6b:a8:d8:42:30:e4:
         d6:25:42:a6:5c:0f:ed:e1:be:19:25:4e:ce:75:20:f5:be:49:
         b3:20:42:67:0a:d5:78:3f:0b:61:68:02:9d:96:09:db:33:99:
         19:d2:aa:dd:a5:ee:0d:cd:7a:c8:fa:6e:ab:36:04:6b:3a:33:
         06:0a:57:9d:74:4c:bc:43:52:ff:15:fc:e4:61:70:7b:76:f5:
         00:43:ec:c0:d2:09:f6:86:20:5d:b3:82:0e:4c:fc:02:0d:a2:
         cf:7e:1b:08:b5:02:95:a3:2b:f4:ef:94:b0:d5:9e:1f:89:32:
         14:48:14:7b:e3:61:d0:4a:a0:99:a2:94:72:1e:e0:84:27:ec:
         12:4a:67:e2:45:45:f6:cc:5c:36:6c:50:cd:5d:3c:2a:88:30:
         b5:47:b9:93:62:ae:40:38:17:23:e4:7c:5b:c2:ce:c0:8d:36:
         bd:0e:74:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----