Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613530343a3a2f34362d3438203d3e20323135393536.roa
File:                     326130613a363034343a613530343a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          akFaDq5uEO2HU/NsPX7ChfMh0fQaRDAeyZOb6rSKq6Y=
Subject key identifier:   A9:D4:EC:AF:8C:E7:4A:29:84:55:E7:31:CE:ED:A5:5A:34:A3:CE:A8
Certificate issuer:       /CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D
Certificate serial:       559699328C88974986257C24E0B8DBB2A8A3165F
Authority key identifier: 13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613530343a3a2f34362d3438203d3e20323135393536.roa
Signing time:             Fri 12 Jul 2024 15:06:08 +0000
ROA not before:           Fri 12 Jul 2024 15:01:08 +0000
ROA not after:            Fri 11 Jul 2025 15:06:08 +0000
asID:                     215956
IP address blocks:        2a0a:6044:a504::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:96:99:32:8c:88:97:49:86:25:7c:24:e0:b8:db:b2:a8:a3:16:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D
        Validity
            Not Before: Jul 12 15:01:08 2024 GMT
            Not After : Jul 11 15:06:08 2025 GMT
        Subject: CN=A9D4ECAF8CE74A298455E731CEEDA55A34A3CEA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:40:d6:b8:d1:25:92:11:44:eb:41:8d:60:90:
                    ac:a6:5f:e7:95:12:68:83:75:83:0a:ac:85:09:57:
                    e8:32:1f:63:6a:81:d8:9b:ea:2b:af:c3:46:4c:d0:
                    7a:53:b3:ad:cd:f7:60:89:f9:6c:50:c3:d7:b3:d9:
                    7e:73:9a:f4:d9:05:9b:10:ec:70:50:90:47:1a:40:
                    c0:55:8c:f4:12:d4:30:2f:81:a0:dc:7b:5e:bc:58:
                    2c:2e:36:d3:c6:ec:c5:20:e5:fe:17:c2:e0:fd:97:
                    79:66:f7:51:02:51:58:c0:de:43:b9:61:6c:4c:e1:
                    f9:43:79:0d:6e:fe:be:4f:4d:54:0f:ac:ad:c4:c5:
                    09:f6:43:37:8c:a6:cd:ec:8c:2b:62:bd:b4:4f:ce:
                    e2:a6:3e:d4:74:6c:2e:be:ab:70:a3:11:be:43:f3:
                    6b:4a:41:2c:b2:b3:95:22:0f:f8:16:b8:9d:b8:0a:
                    51:f9:30:31:d1:55:d1:f8:74:e8:e9:00:9f:96:f8:
                    30:3f:48:f7:01:05:c6:98:00:da:e5:7b:c5:7e:ca:
                    33:6e:71:ac:e6:90:37:0f:7d:7d:ae:5e:84:45:d3:
                    ab:d1:bc:51:46:99:4b:a2:ee:d7:4f:da:a7:f1:29:
                    06:aa:e7:d5:78:40:2a:f3:8f:6f:05:05:0f:26:78:
                    03:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D4:EC:AF:8C:E7:4A:29:84:55:E7:31:CE:ED:A5:5A:34:A3:CE:A8
            X509v3 Authority Key Identifier:
                keyid:13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613530343a3a2f34362d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a504::/46

    Signature Algorithm: sha256WithRSAEncryption
         6f:85:3a:fd:d7:54:d3:87:81:51:cb:74:74:1d:2d:f8:fd:d6:
         6f:3e:2e:00:3b:3e:5c:62:52:17:c9:90:d5:2f:7f:3f:b2:25:
         f2:bc:d6:a5:95:6d:c4:5e:de:5d:dc:7b:ed:65:d3:de:80:c5:
         2e:ef:6c:d8:32:f0:2e:eb:37:c6:0a:67:c5:71:7a:30:c0:e5:
         e4:f9:e7:7a:16:2e:6a:6e:dd:56:38:14:03:cc:8c:5f:77:12:
         be:8a:cb:3f:65:4f:05:97:19:00:53:ff:af:78:06:64:3d:ba:
         2e:3c:07:a1:52:74:07:88:47:0f:3f:c2:14:7c:fc:90:45:51:
         ec:44:0b:82:b5:7a:4f:eb:b4:74:f5:cb:ce:10:f0:61:16:32:
         65:a9:79:f6:42:77:48:02:98:3d:02:87:7f:bd:1c:ff:af:ed:
         1f:9e:2c:9e:d1:70:4d:4c:81:6b:f9:bd:f4:96:74:eb:64:5b:
         3f:63:73:6e:15:e2:c0:de:e8:3e:ca:8f:b9:41:54:40:53:aa:
         a5:22:4f:3d:3b:d1:11:37:56:56:71:27:90:c9:ac:07:34:03:
         b6:ac:d9:9f:5b:e8:74:df:04:c1:73:69:c9:75:60:4a:10:e1:
         48:f0:a1:99:2a:64:04:34:fe:26:57:b3:dc:39:b0:6a:a6:5a:
         c4:7b:c1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----