Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613531343a3a2f34362d3438203d3e20323135393536.roa
File:                     326130613a363034343a613531343a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          An3weI5sh1v+2HCkfcKmjiLDtuLOvk2dLg8uCCNefsA=
Subject key identifier:   42:60:16:C6:8F:7B:50:19:03:EE:CD:19:5A:78:95:C0:A7:02:ED:D7
Certificate issuer:       /CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D
Certificate serial:       01976B820AE4B6E50F13EEC304D589C453CC9183
Authority key identifier: 13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613531343a3a2f34362d3438203d3e20323135393536.roa
Signing time:             Fri 12 Jul 2024 15:07:19 +0000
ROA not before:           Fri 12 Jul 2024 15:02:19 +0000
ROA not after:            Fri 11 Jul 2025 15:07:19 +0000
asID:                     215956
IP address blocks:        2a0a:6044:a514::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:82:0a:e4:b6:e5:0f:13:ee:c3:04:d5:89:c4:53:cc:91:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D
        Validity
            Not Before: Jul 12 15:02:19 2024 GMT
            Not After : Jul 11 15:07:19 2025 GMT
        Subject: CN=426016C68F7B501903EECD195A7895C0A702EDD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b4:cf:f2:a7:c9:ec:4a:b3:ac:15:ea:17:64:
                    79:f5:d1:b7:af:2a:c4:36:b6:9f:96:12:86:be:63:
                    de:cb:41:dc:e4:07:15:9f:3e:44:88:b8:32:3a:0d:
                    91:cc:bd:eb:c9:0d:ed:8a:0e:b6:39:22:00:cf:d1:
                    94:d5:d6:23:16:46:89:af:bd:7e:0b:fc:e2:35:2e:
                    f8:f4:f6:7a:f6:d1:0a:58:73:e0:e9:7f:3d:b7:43:
                    2d:8b:fe:aa:a5:2d:ef:99:2a:fb:05:c6:0f:74:26:
                    04:11:82:50:c5:e9:ac:b7:ca:eb:8c:d6:85:00:4d:
                    94:26:c7:85:39:e7:9e:1a:f7:b2:2a:2f:c4:1c:80:
                    12:9d:00:04:0b:2a:1f:25:92:fd:47:d3:e0:65:0b:
                    97:41:80:67:ca:68:85:5f:cb:be:51:4a:89:bc:35:
                    68:5a:36:75:8f:40:7e:e9:b9:48:18:38:d4:8e:18:
                    8e:e7:5c:8c:12:fc:33:13:b3:81:b9:de:0c:c0:ce:
                    67:02:a6:00:e5:0b:06:ec:48:e5:2c:36:a3:de:d8:
                    dd:f9:94:12:0c:f2:ef:41:17:79:06:da:2d:9c:90:
                    78:2e:6b:1e:9a:fa:92:ea:36:8b:dc:e2:ca:18:e5:
                    3a:ad:b7:0e:3f:35:46:d2:b0:df:e0:81:f4:33:5b:
                    f1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:60:16:C6:8F:7B:50:19:03:EE:CD:19:5A:78:95:C0:A7:02:ED:D7
            X509v3 Authority Key Identifier:
                keyid:13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613531343a3a2f34362d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a514::/46

    Signature Algorithm: sha256WithRSAEncryption
         37:16:0d:bf:79:aa:26:d5:d5:70:83:65:41:29:ca:cd:cc:3a:
         6f:ec:5a:d4:0f:2e:51:68:d8:a0:51:35:40:87:92:ef:05:b7:
         f3:44:f7:64:71:04:32:38:9c:12:ef:31:31:6f:33:95:8c:1f:
         4d:a7:26:33:f5:04:a7:49:d0:ea:57:ff:93:22:00:7a:e8:da:
         4e:df:20:cb:ad:da:c2:73:9c:8e:de:d9:cc:fb:ef:93:52:83:
         d3:ff:d2:51:40:35:23:88:c5:62:78:96:cf:08:0c:79:27:ef:
         08:68:ac:b0:33:93:68:47:2d:56:36:9e:4b:15:f9:1a:d8:e9:
         58:5d:63:3b:b1:d8:0a:25:d3:cb:67:1a:db:57:c0:9d:75:72:
         c1:d9:f2:da:cd:6b:cf:1b:ac:b3:e2:ad:3d:fb:6a:ad:58:28:
         c5:f9:2e:2e:90:e4:4e:42:b6:e9:18:13:61:e4:52:35:60:25:
         2a:82:d8:89:48:41:bd:67:84:e4:83:0f:11:8f:47:d9:4f:3a:
         74:46:7b:cf:d5:b9:08:a2:c0:9c:85:8a:cf:85:fe:ee:92:17:
         0e:3a:fb:47:24:e9:ff:e6:a5:18:32:9d:18:bc:b5:4a:c9:fd:
         57:e3:d5:29:09:41:4f:a0:35:5a:81:f9:40:cd:cf:43:8b:3e:
         28:92:5e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----