Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613530383a3a2f34362d3438203d3e20323135393536.roa
File:                     326130613a363034343a613530383a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          uiMI1V9iDBnc4aeyFy7FdroRMl1LET62eWCxVC0ETqw=
Subject key identifier:   18:F3:5B:6B:AD:97:71:5A:F3:DE:91:CF:7E:17:F5:C1:91:B5:56:8F
Certificate issuer:       /CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D
Certificate serial:       7CB0A4CFE99B5BEE5FA9A71B7A0AB498F59EC2CA
Authority key identifier: 13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613530383a3a2f34362d3438203d3e20323135393536.roa
Signing time:             Fri 12 Jul 2024 15:06:32 +0000
ROA not before:           Fri 12 Jul 2024 15:01:32 +0000
ROA not after:            Fri 11 Jul 2025 15:06:32 +0000
asID:                     215956
IP address blocks:        2a0a:6044:a508::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b0:a4:cf:e9:9b:5b:ee:5f:a9:a7:1b:7a:0a:b4:98:f5:9e:c2:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D
        Validity
            Not Before: Jul 12 15:01:32 2024 GMT
            Not After : Jul 11 15:06:32 2025 GMT
        Subject: CN=18F35B6BAD97715AF3DE91CF7E17F5C191B5568F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:57:1a:a7:cc:bf:56:7a:3d:6a:b2:7f:1a:3c:
                    21:db:c0:2b:ec:97:1f:f5:9d:9b:e0:88:86:73:45:
                    e6:0b:5f:ce:43:2a:bb:e3:70:e9:09:4d:f6:76:f4:
                    0a:b0:1b:92:de:49:99:72:6b:20:a1:f5:0d:af:0a:
                    26:b8:4f:8b:aa:49:4d:98:0a:26:a4:ed:90:d0:aa:
                    5f:2c:fd:31:26:48:fa:d0:53:34:e2:d4:0a:e4:63:
                    9a:9a:7f:65:02:f9:e4:05:87:32:c1:d4:9e:5d:b4:
                    03:5c:d1:fc:94:8c:a4:17:72:a7:79:b1:6e:3b:66:
                    06:e5:28:8f:17:84:ff:cb:37:05:ca:fe:32:a0:19:
                    7f:82:61:1e:32:4f:84:78:0d:5b:a8:43:6c:46:79:
                    f2:5c:bc:3e:f8:16:bd:16:18:09:8a:bc:db:ba:f2:
                    70:33:98:2a:36:5f:ea:28:71:24:50:c2:a3:71:96:
                    52:b3:e3:48:a2:11:ad:8b:e8:dc:83:fe:de:41:52:
                    e4:ba:bb:6d:a3:0b:42:69:a3:f3:61:ac:ba:8c:66:
                    b9:20:2d:a8:14:eb:8a:1d:43:91:5a:4b:0a:b2:09:
                    a6:c4:6c:3f:31:07:88:5b:16:80:9d:35:7c:35:de:
                    23:51:47:a9:6b:36:d8:00:51:45:51:36:71:04:fb:
                    28:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F3:5B:6B:AD:97:71:5A:F3:DE:91:CF:7E:17:F5:C1:91:B5:56:8F
            X509v3 Authority Key Identifier:
                keyid:13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613530383a3a2f34362d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a508::/46

    Signature Algorithm: sha256WithRSAEncryption
         aa:b0:76:1e:1b:e1:95:0c:4f:d7:8f:f6:e0:10:86:de:8e:fd:
         ca:7c:35:f5:62:f7:83:1c:5e:80:61:1e:5f:1b:f0:b3:61:bf:
         f5:d3:ab:d8:f6:95:00:76:ad:9c:60:60:8c:36:96:03:af:05:
         dd:be:ed:f6:7d:86:69:55:49:62:25:bd:b3:cc:78:df:c8:7f:
         bd:12:22:b5:b9:ec:ce:a2:d2:57:bb:dc:a3:1d:5f:ec:4a:08:
         75:ff:64:04:20:a9:06:56:33:8b:10:6f:fd:50:c6:62:3d:02:
         6d:67:16:5b:e9:4d:bf:e7:e8:37:ee:87:c1:eb:7a:78:85:4f:
         5e:63:57:49:46:49:21:36:8b:39:6c:c2:91:c6:de:b2:22:79:
         90:9d:5d:0d:52:83:06:6f:94:a4:47:d3:54:7a:16:40:30:ce:
         fc:49:51:46:d7:8a:38:7e:f0:64:e1:a8:f1:d3:d7:04:e1:3a:
         fc:1a:07:17:df:95:3f:32:e2:37:de:29:e6:d4:44:d0:e0:55:
         ac:34:ee:db:e1:65:0f:f4:1f:1a:4e:0f:b4:92:ac:64:b0:0f:
         a3:24:e6:4a:55:63:d4:7f:81:b7:2a:8f:38:ae:14:9e:0b:76:
         55:db:4a:f6:0c:8b:bf:2c:3d:b8:f8:62:7a:25:6e:30:94:e8:
         86:1d:78:d4
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUfLCkz+mbW+5fqacbegq0mPWewsowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMwM0JCODgwOEY3NjZCNzNENTQ3M0NGQTdCODg0RTk4
QkNGRTk3RDAeFw0yNDA3MTIxNTAxMzJaFw0yNTA3MTExNTA2MzJaMDMxMTAvBgNV
BAMTKDE4RjM1QjZCQUQ5NzcxNUFGM0RFOTFDRjdFMTdGNUMxOTFCNTU2OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsVxqnzL9Wej1qsn8aPCHbwCvs
lx/1nZvgiIZzReYLX85DKrvjcOkJTfZ29AqwG5LeSZlyayCh9Q2vCia4T4uqSU2Y
Ciak7ZDQql8s/TEmSPrQUzTi1ArkY5qaf2UC+eQFhzLB1J5dtANc0fyUjKQXcqd5
sW47ZgblKI8XhP/LNwXK/jKgGX+CYR4yT4R4DVuoQ2xGefJcvD74Fr0WGAmKvNu6
8nAzmCo2X+oocSRQwqNxllKz40iiEa2L6NyD/t5BUuS6u22jC0Jpo/NhrLqMZrkg
LagU64odQ5FaSwqyCabEbD8xB4hbFoCdNXw13iNRR6lrNtgAUUVRNnEE+yg9AgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUGPNba62XcVrz3pHPfhf1wZG1Vo8wHwYDVR0j
BBgwFoAUEwO7iAj3Zrc9VHPPp7iE6YvP6X0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj
OTEyLzEvMTMwM0JCODgwOEY3NjZCNzNENTQ3M0NGQTdCODg0RTk4QkNGRTk3RC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC8xMzAzQkI4ODA4Rjc2NkI3M0Q1NDczQ0ZB
N0I4ODRFOThCQ0ZFOTdELmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTYxMzUzMDM4M2EzYTJmMzQzNjJkMzQzODIwM2QzZTIwMzIz
MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcCKgpgRKUIMA0GCSqGSIb3DQEBCwUAA4IBAQCq
sHYeG+GVDE/Xj/bgEIbejv3KfDX1YveDHF6AYR5fG/CzYb/106vY9pUAdq2cYGCM
NpYDrwXdvu32fYZpVUliJb2zzHjfyH+9EiK1uezOotJXu9yjHV/sSgh1/2QEIKkG
VjOLEG/9UMZiPQJtZxZb6U2/5+g37ofB63p4hU9eY1dJRkkhNos5bMKRxt6yInmQ
nV0NUoMGb5SkR9NUehZAMM78SVFG14o4fvBk4ajx09cE4Tr8GgcX35U/MuI33inm
1ETQ4FWsNO7b4WUP9B8aTg+0kqxksA+jJOZKVWPUf4G3Ko84rhSeC3ZV20r2DIu/
LD24+GJ6JW4wlOiGHXjU
-----END CERTIFICATE-----