Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613533613a3a2f34382d3438203d3e20323135393536.roa
File:                     326130613a363034343a613533613a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          rlQ+cAD9z2LKjmfZq1Of+TqNXVkcZ7ZoApF3uGgh4yE=
Subject key identifier:   A1:69:0D:D8:66:BC:49:19:90:20:9F:FF:42:24:82:C3:C8:CA:34:D9
Certificate issuer:       /CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D
Certificate serial:       0D8A66CCC993FC013D0CB04874167C79D5EE3DB7
Authority key identifier: 13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613533613a3a2f34382d3438203d3e20323135393536.roa
Signing time:             Mon 16 Dec 2024 00:32:46 +0000
ROA not before:           Mon 16 Dec 2024 00:27:46 +0000
ROA not after:            Mon 15 Dec 2025 00:32:46 +0000
asID:                     215956
IP address blocks:        2a0a:6044:a53a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:8a:66:cc:c9:93:fc:01:3d:0c:b0:48:74:16:7c:79:d5:ee:3d:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D
        Validity
            Not Before: Dec 16 00:27:46 2024 GMT
            Not After : Dec 15 00:32:46 2025 GMT
        Subject: CN=A1690DD866BC491990209FFF422482C3C8CA34D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1f:ee:02:cc:b6:6b:2f:87:4d:a1:f4:c9:3f:
                    26:76:f2:b8:b6:ad:d9:32:25:dd:4a:89:9c:21:9c:
                    6c:53:fe:76:fb:da:0a:61:ef:80:6e:10:27:d9:57:
                    7f:0d:ad:4b:88:38:bb:45:b0:86:a4:4f:e2:97:3b:
                    19:43:3a:fe:46:7f:0a:5d:94:03:7e:19:1b:40:22:
                    9a:f5:cc:5b:d5:71:0a:0d:7b:1f:cc:2d:e8:85:9a:
                    5d:7c:3d:62:c0:7d:20:1b:65:ff:01:fc:2a:9a:39:
                    27:21:3b:e5:77:57:35:11:81:43:74:ea:68:db:9e:
                    49:24:75:9b:4a:66:b6:11:5a:a4:45:bc:39:d0:ec:
                    b0:0d:7f:7f:b7:e7:11:db:7b:04:f4:82:bd:53:ca:
                    1e:7d:5f:df:57:1b:b7:2c:9c:4d:1e:39:4d:85:d3:
                    45:ac:42:9d:12:c8:d9:71:0c:cf:b8:d1:f7:07:b9:
                    c1:a1:27:83:74:99:68:c1:09:97:c8:2d:25:07:ee:
                    e9:7f:1a:7a:5a:cb:76:8c:8d:5a:8b:d4:29:77:e9:
                    3e:8f:ff:2b:e1:2d:62:5e:b5:65:a9:0f:7e:26:24:
                    09:98:90:8e:b3:93:53:28:fb:72:94:3e:80:f8:90:
                    bc:32:95:66:23:5d:f9:0f:c4:e2:6a:d6:bf:33:ba:
                    3a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:69:0D:D8:66:BC:49:19:90:20:9F:FF:42:24:82:C3:C8:CA:34:D9
            X509v3 Authority Key Identifier:
                keyid:13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613533613a3a2f34382d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a53a::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:f9:28:da:63:dc:5b:ff:4d:6b:38:8b:b2:6e:3a:1a:fd:e4:
         96:d2:af:62:e6:ac:d7:f5:b9:c0:32:13:6d:2f:5e:c3:77:aa:
         1b:29:fc:b2:af:e5:3a:5e:56:30:f8:e1:77:00:41:17:3b:8a:
         6d:f4:bd:b4:39:b2:de:14:0b:e4:6a:35:22:14:c0:c6:b8:dd:
         40:a1:14:c0:30:b9:ce:6e:b4:18:c2:dc:b3:2a:0a:85:40:15:
         aa:23:86:3e:aa:3e:0c:49:84:da:b9:ef:0c:a3:94:f1:e2:7b:
         4e:6b:b4:35:e2:5e:fc:7f:bc:f8:a5:ba:5c:42:e3:6a:97:42:
         dd:e3:59:f7:b1:45:f3:e4:90:36:3e:45:4b:3e:62:96:54:b2:
         de:3b:86:db:32:e6:51:10:5f:d2:45:41:e2:f9:4b:3c:f3:ae:
         b8:dc:48:a6:19:81:36:1f:10:6a:bd:74:67:66:a5:bb:4a:c7:
         bb:82:96:a3:8c:25:b7:bf:e0:e4:96:c0:a0:b4:26:ad:b4:67:
         ae:94:0a:e6:ac:ee:90:b8:80:13:39:76:99:a6:62:9b:25:81:
         9c:1a:53:a8:f2:fe:fa:6c:38:92:c5:98:3a:14:00:86:f9:0e:
         57:9d:e3:54:72:f1:7f:99:5a:4b:d0:22:a9:1e:b0:28:fe:15:
         ae:48:38:a2
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUDYpmzMmT/AE9DLBIdBZ8edXuPbcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMwM0JCODgwOEY3NjZCNzNENTQ3M0NGQTdCODg0RTk4
QkNGRTk3RDAeFw0yNDEyMTYwMDI3NDZaFw0yNTEyMTUwMDMyNDZaMDMxMTAvBgNV
BAMTKEExNjkwREQ4NjZCQzQ5MTk5MDIwOUZGRjQyMjQ4MkMzQzhDQTM0RDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqH+4CzLZrL4dNofTJPyZ28ri2
rdkyJd1KiZwhnGxT/nb72gph74BuECfZV38NrUuIOLtFsIakT+KXOxlDOv5Gfwpd
lAN+GRtAIpr1zFvVcQoNex/MLeiFml18PWLAfSAbZf8B/CqaOSchO+V3VzURgUN0
6mjbnkkkdZtKZrYRWqRFvDnQ7LANf3+35xHbewT0gr1Tyh59X99XG7csnE0eOU2F
00WsQp0SyNlxDM+40fcHucGhJ4N0mWjBCZfILSUH7ul/Gnpay3aMjVqL1Cl36T6P
/yvhLWJetWWpD34mJAmYkI6zk1Mo+3KUPoD4kLwylWYjXfkPxOJq1r8zujpfAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUoWkN2Ga8SRmQIJ//QiSCw8jKNNkwHwYDVR0j
BBgwFoAUEwO7iAj3Zrc9VHPPp7iE6YvP6X0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj
OTEyLzEvMTMwM0JCODgwOEY3NjZCNzNENTQ3M0NGQTdCODg0RTk4QkNGRTk3RC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC8xMzAzQkI4ODA4Rjc2NkI3M0Q1NDczQ0ZB
N0I4ODRFOThCQ0ZFOTdELmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTYxMzUzMzYxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRKU6MA0GCSqGSIb3DQEBCwUAA4IBAQBf
+SjaY9xb/01rOIuybjoa/eSW0q9i5qzX9bnAMhNtL17Dd6obKfyyr+U6XlYw+OF3
AEEXO4pt9L20ObLeFAvkajUiFMDGuN1AoRTAMLnObrQYwtyzKgqFQBWqI4Y+qj4M
SYTaue8Mo5Tx4ntOa7Q14l78f7z4pbpcQuNql0Ld41n3sUXz5JA2PkVLPmKWVLLe
O4bbMuZREF/SRUHi+Us886643EimGYE2HxBqvXRnZqW7Sse7gpajjCW3v+DklsCg
tCattGeulArmrO6QuIATOXaZpmKbJYGcGlOo8v76bDiSxZg6FACG+Q5XneNUcvF/
mVpL0CKpHrAo/hWuSDii
-----END CERTIFICATE-----