Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613533303a3a2f34362d3438203d3e20323135393536.roa
File:                     326130613a363034343a613533303a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          CK3PS9j38uaVPLBRoVvR4Rt55/HO6enhIH3okOIphew=
Subject key identifier:   D1:7B:1F:77:2A:36:E8:A7:D7:CF:C5:6C:CC:01:6A:A4:ED:A2:66:BB
Certificate issuer:       /CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
Certificate serial:       29E4833A65D3BC99CDDCB8A9B2C49EEB46CC12
Authority key identifier: A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613533303a3a2f34362d3438203d3e20323135393536.roa
Signing time:             Sat 08 Feb 2025 19:36:00 +0000
ROA not before:           Sat 08 Feb 2025 19:31:00 +0000
ROA not after:            Sat 07 Feb 2026 19:36:00 +0000
asID:                     215956
IP address blocks:        2a0a:6044:a530::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e4:83:3a:65:d3:bc:99:cd:dc:b8:a9:b2:c4:9e:eb:46:cc:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
        Validity
            Not Before: Feb  8 19:31:00 2025 GMT
            Not After : Feb  7 19:36:00 2026 GMT
        Subject: CN=D17B1F772A36E8A7D7CFC56CCC016AA4EDA266BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b1:d7:2e:ff:51:64:69:45:87:57:97:7c:7e:
                    76:f8:8b:04:2f:b1:59:07:e8:0a:50:40:fb:68:d2:
                    31:c5:79:db:d3:0a:09:00:e3:f7:15:e9:12:ee:c2:
                    71:2d:53:e4:3b:cc:55:cf:ad:fb:ba:76:97:b6:a7:
                    a7:d2:30:41:83:9f:df:50:44:3a:9e:5c:90:87:53:
                    67:c8:4c:39:a3:b7:de:fd:7c:03:52:b1:5f:4c:9f:
                    47:1e:78:48:29:81:f0:73:00:27:6c:c7:05:24:c4:
                    cd:b3:b3:06:53:ac:11:38:af:6f:f3:80:a9:9a:e4:
                    63:0f:55:6a:dc:10:10:79:97:8b:b5:86:54:b1:78:
                    a3:89:62:d1:7f:33:aa:1d:89:ac:33:06:2d:24:38:
                    57:55:2c:94:eb:6a:2b:15:35:7b:47:52:45:d8:4a:
                    58:3c:67:1f:26:56:7c:c4:02:1b:71:de:87:74:3b:
                    3b:63:a7:ad:39:3b:de:3d:22:01:d1:43:c0:6e:98:
                    01:ec:3c:db:48:54:de:06:de:2a:28:5a:5e:13:f7:
                    b3:95:ac:90:73:54:5c:cc:f0:7d:4b:14:8b:d6:4a:
                    08:be:14:15:e8:8c:d1:e5:01:2a:07:e8:a6:da:e4:
                    d6:5c:18:ba:34:d7:80:b1:4a:54:2c:04:62:52:9c:
                    ad:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7B:1F:77:2A:36:E8:A7:D7:CF:C5:6C:CC:01:6A:A4:ED:A2:66:BB
            X509v3 Authority Key Identifier:
                keyid:A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/A6E0BBA193794B8146B360D50420A9C4DC77C845.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613533303a3a2f34362d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a530::/46

    Signature Algorithm: sha256WithRSAEncryption
         72:89:89:c1:cf:e0:f8:41:b8:99:ed:59:70:48:c5:43:9b:74:
         15:49:2d:61:8d:38:8e:36:9d:34:36:a2:97:17:8b:4d:0a:c2:
         31:08:3c:d9:44:68:16:5d:f6:5b:b7:38:19:52:58:09:43:07:
         db:7e:c5:6b:0f:05:d3:5d:d3:f2:7c:1c:9e:13:8e:98:3f:6f:
         bc:40:ec:09:8d:fc:d8:07:4c:79:fb:49:10:cf:84:7d:a7:6c:
         07:2d:93:18:30:e8:52:ae:4f:26:ca:87:74:0b:c0:d5:f0:e9:
         65:49:e6:a0:be:a8:af:80:77:ee:7c:de:2d:24:dd:a9:1e:c9:
         7d:88:aa:66:d8:1a:f0:61:7f:31:77:9e:7b:ab:97:31:6d:37:
         b3:1d:ef:f6:83:3a:56:af:d5:cf:ab:20:c5:6b:2b:bb:6f:55:
         0c:65:a4:3e:37:3e:5b:c3:06:5d:72:0f:91:f6:99:66:a5:8d:
         df:e8:0c:4a:39:f7:8d:92:36:c2:27:84:20:c4:89:79:77:29:
         a2:a1:55:a1:cd:0e:a9:79:f7:c9:3b:76:bb:bd:e0:70:a9:77:
         fd:e9:8e:76:47:d8:66:8c:2c:4d:c9:24:4c:9a:19:1b:49:d9:
         eb:9a:b8:9e:c6:df:79:67:8f:4a:92:de:f8:78:e1:74:53:c3:
         f7:63:56:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----