Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613533383a3a2f34372d3438203d3e20323135393536.roa
File:                     326130613a363034343a613533383a3a2f34372d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          cJB4eQXPhFCr/YPL/LinkPDcz6zk+HEkBNOD1y2OKX4=
Subject key identifier:   4D:7C:6C:EE:21:E5:92:DA:4B:43:4C:1A:A1:5F:D0:6D:D6:55:BD:75
Certificate issuer:       /CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D
Certificate serial:       016E8EF4F50630F3B6B80660F82A6FD7437BB616
Authority key identifier: 13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613533383a3a2f34372d3438203d3e20323135393536.roa
Signing time:             Wed 04 Dec 2024 01:30:04 +0000
ROA not before:           Wed 04 Dec 2024 01:25:04 +0000
ROA not after:            Wed 03 Dec 2025 01:30:04 +0000
asID:                     215956
IP address blocks:        2a0a:6044:a538::/47 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:6e:8e:f4:f5:06:30:f3:b6:b8:06:60:f8:2a:6f:d7:43:7b:b6:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D
        Validity
            Not Before: Dec  4 01:25:04 2024 GMT
            Not After : Dec  3 01:30:04 2025 GMT
        Subject: CN=4D7C6CEE21E592DA4B434C1AA15FD06DD655BD75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:46:36:82:f3:0a:26:70:ff:90:f1:8a:4a:c5:
                    16:0f:15:53:55:29:14:3e:a8:55:12:e3:f9:41:5e:
                    31:e6:04:c5:a1:58:4a:87:60:d7:64:d1:c3:5e:11:
                    4d:31:de:bd:45:fe:28:95:20:a6:6e:ac:3d:94:f7:
                    52:f8:01:4c:9b:72:af:74:f4:07:c0:f9:10:f7:aa:
                    5b:87:3d:c6:98:d7:62:31:ba:3c:bd:07:3c:df:94:
                    50:e2:aa:1f:0f:09:b7:63:b1:c0:a3:48:41:8b:4a:
                    7f:73:a8:1a:b3:b7:9d:d0:e0:c5:a6:91:05:e3:ce:
                    63:5d:e0:36:7e:bb:09:55:82:53:1d:d5:ad:dd:3d:
                    e3:a8:51:00:93:6e:cf:ba:d6:7a:be:af:38:af:0a:
                    a7:1f:30:24:82:de:3b:2a:26:52:47:91:69:ef:83:
                    06:77:d5:7a:81:9e:d4:e9:19:de:18:ee:4e:7e:ba:
                    ab:4e:1f:4a:4a:41:15:8a:40:b3:40:e3:6a:79:df:
                    7f:08:2e:ca:84:2e:aa:34:63:24:fc:74:0d:db:8b:
                    3f:a7:41:30:13:27:a8:8b:af:f6:a4:ad:8f:8d:20:
                    8d:0e:44:11:75:a5:95:1a:07:e1:3e:b9:cb:d1:5d:
                    88:ab:03:6f:b6:96:e3:f1:58:76:10:5a:a6:bf:88:
                    e3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:7C:6C:EE:21:E5:92:DA:4B:43:4C:1A:A1:5F:D0:6D:D6:55:BD:75
            X509v3 Authority Key Identifier:
                keyid:13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613533383a3a2f34372d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a538::/47

    Signature Algorithm: sha256WithRSAEncryption
         37:72:01:67:49:02:a2:70:5c:b7:61:c6:7c:05:20:b9:88:b4:
         70:72:7c:0b:09:73:16:e8:65:66:28:3c:ab:30:91:1e:3f:45:
         5d:3e:a9:e9:3d:68:95:f3:82:bd:40:a5:56:e7:02:3c:d0:2c:
         11:9f:4a:25:ab:73:4f:0e:23:18:f2:a3:49:50:ae:2f:79:5b:
         fc:bf:12:d6:0d:37:ac:df:81:c4:36:08:c6:46:8d:4f:ce:12:
         92:b3:f2:f0:9f:25:94:b5:3a:07:4f:0c:1c:8a:11:e1:64:b8:
         42:bb:79:e3:15:46:73:75:50:51:93:00:5e:5e:17:4b:68:b0:
         a0:1a:8c:34:10:50:63:16:e0:da:44:74:fc:03:64:a5:01:a8:
         f7:77:ad:3d:2b:74:e8:e1:d6:55:2f:27:35:4f:20:65:69:ea:
         0a:eb:bb:b5:28:e5:d2:52:30:a2:45:fb:a2:b5:15:bf:a8:cd:
         54:7a:4b:51:92:be:75:a7:16:dd:d4:1c:79:b5:11:95:4c:a3:
         7c:dc:f9:68:89:32:db:6a:77:53:7e:7e:1e:8e:fe:21:ac:1b:
         3c:22:bf:c1:18:aa:05:5c:2d:ab:e1:a8:da:d4:36:3b:9f:76:
         0d:1e:33:aa:b9:04:79:a7:57:88:3f:87:cc:23:e1:8a:1e:a9:
         d1:7b:85:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----