Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613533343a3a2f34362d3438203d3e20323135393536.roa
File:                     326130613a363034343a613533343a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          SnbhKY22psUS47GQ60UVwpwtJlKc6Ii08BKhBZV+k7E=
Subject key identifier:   7A:9C:2C:53:A7:B0:FF:B9:75:CD:84:F0:15:A2:E2:77:D5:16:8B:E8
Certificate issuer:       /CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D
Certificate serial:       761DA1D281F71E6B71ED49BD7DC48AF5F6CB37C6
Authority key identifier: 13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613533343a3a2f34362d3438203d3e20323135393536.roa
Signing time:             Wed 04 Dec 2024 01:20:04 +0000
ROA not before:           Wed 04 Dec 2024 01:15:04 +0000
ROA not after:            Wed 03 Dec 2025 01:20:04 +0000
asID:                     215956
IP address blocks:        2a0a:6044:a534::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:1d:a1:d2:81:f7:1e:6b:71:ed:49:bd:7d:c4:8a:f5:f6:cb:37:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D
        Validity
            Not Before: Dec  4 01:15:04 2024 GMT
            Not After : Dec  3 01:20:04 2025 GMT
        Subject: CN=7A9C2C53A7B0FFB975CD84F015A2E277D5168BE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f0:b0:d1:e5:f1:b0:a2:88:2d:b6:f7:af:42:
                    67:26:68:30:dd:79:b1:62:70:09:15:8b:30:33:4b:
                    c3:3a:48:8e:4b:c1:70:40:93:12:e4:9c:05:95:b1:
                    00:74:f5:b9:05:0a:5c:7d:89:4f:d1:b7:fc:72:9c:
                    24:95:da:10:0c:63:7d:9b:25:64:aa:99:8d:57:6d:
                    5a:a5:35:0f:29:92:14:15:87:48:a3:d6:56:23:7f:
                    3e:ca:fc:ab:24:f8:cd:a4:37:9f:0a:c8:b6:11:b1:
                    7a:99:46:19:65:60:c7:e2:5f:8b:86:b3:c1:92:3c:
                    87:7c:c9:f2:7c:e6:4d:67:24:3c:dd:51:55:51:d2:
                    39:bb:7c:a7:94:df:1a:cc:9b:28:dc:ae:25:db:79:
                    31:73:4b:10:d3:de:3b:02:ad:24:1a:8e:9f:31:51:
                    2d:e6:61:b7:cf:ca:ba:ea:e0:a7:f9:e0:0d:0c:91:
                    09:90:2b:fb:d3:dc:c6:d6:32:ef:39:ea:1b:43:0c:
                    f8:b7:60:7c:94:3e:88:97:c7:e7:41:c2:fb:28:a9:
                    ce:56:5a:7b:d5:b0:c7:e6:b7:17:6f:dd:fd:d6:26:
                    38:ea:58:c8:ee:01:07:0a:16:e7:85:ef:7d:34:b5:
                    55:f1:0a:53:13:99:38:79:c5:f8:ef:15:90:be:ba:
                    27:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9C:2C:53:A7:B0:FF:B9:75:CD:84:F0:15:A2:E2:77:D5:16:8B:E8
            X509v3 Authority Key Identifier:
                keyid:13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613533343a3a2f34362d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a534::/46

    Signature Algorithm: sha256WithRSAEncryption
         d9:e0:20:40:ae:66:12:3c:51:4e:70:a8:3b:00:cf:e2:d4:5d:
         8a:ee:55:1a:de:a0:ff:7e:68:8f:99:25:b2:55:f5:80:67:dc:
         58:98:e8:fc:53:80:98:3c:f7:d8:28:c9:95:90:a5:f0:73:ce:
         75:69:6d:24:bb:61:a1:63:21:52:0a:7f:93:83:8d:60:c8:ca:
         f5:f1:20:18:c6:1b:0f:80:ac:58:58:33:0e:7f:e7:99:17:aa:
         55:a1:08:89:f4:ac:cf:cd:65:7f:f4:aa:0d:bf:90:86:fc:f9:
         5f:17:13:d6:d8:16:33:f5:4e:d0:8e:f7:47:cd:db:49:5f:51:
         17:cb:54:0c:30:b9:a8:bc:b7:60:9e:6d:20:f6:13:74:7a:66:
         b2:62:25:02:71:05:32:0c:af:7d:d5:05:14:69:20:3a:29:db:
         1b:1b:74:04:ec:e6:ef:1e:7f:e0:95:2c:2c:6d:e0:ba:9d:6e:
         ba:7a:ea:e8:d8:51:93:fe:55:bc:8d:63:17:07:02:0f:d1:23:
         21:7c:68:32:66:a7:6f:2e:2b:f7:e4:90:df:d9:54:8e:08:5e:
         2d:5c:05:56:f2:fa:21:cd:33:86:55:28:80:f3:d8:12:bc:45:
         05:18:c7:c3:b5:38:d2:ca:02:8e:36:7c:cf:4a:30:22:4e:69:
         26:b9:89:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----