Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613533343a3a2f34362d3438203d3e20323135393536.roa
File:                     326130613a363034343a613533343a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          2QtBLJH+83HKi4WSF9QnEl7/3FkbBuSSt1yUitsiE4I=
Subject key identifier:   CC:16:EF:42:98:0C:40:A6:3D:48:38:94:A6:95:B3:96:E1:EE:0D:EC
Certificate issuer:       /CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
Certificate serial:       4A572F648A4C905D40036384ACFAAA9784F6774A
Authority key identifier: A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613533343a3a2f34362d3438203d3e20323135393536.roa
Signing time:             Sat 08 Feb 2025 19:35:57 +0000
ROA not before:           Sat 08 Feb 2025 19:30:57 +0000
ROA not after:            Sat 07 Feb 2026 19:35:57 +0000
asID:                     215956
IP address blocks:        2a0a:6044:a534::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:57:2f:64:8a:4c:90:5d:40:03:63:84:ac:fa:aa:97:84:f6:77:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
        Validity
            Not Before: Feb  8 19:30:57 2025 GMT
            Not After : Feb  7 19:35:57 2026 GMT
        Subject: CN=CC16EF42980C40A63D483894A695B396E1EE0DEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:de:fd:3d:7e:f9:e7:ed:7b:70:9d:08:67:ea:
                    05:fb:25:97:2c:35:54:37:d0:ad:40:4a:43:f5:8f:
                    e9:38:14:7e:42:b0:b8:dc:0f:54:ff:c7:f6:15:58:
                    71:a9:3f:44:cc:9c:13:d9:e1:23:63:ff:9b:70:80:
                    d2:de:e3:cb:ab:4c:1d:80:05:02:da:f6:10:e8:1e:
                    70:b5:79:6b:37:4d:f1:8f:eb:8e:cc:0b:d3:a7:b1:
                    5e:e8:6f:28:8f:90:73:8c:60:29:3d:a4:b0:57:a3:
                    2d:0e:66:4f:ea:23:8e:44:5c:0b:5d:c6:6d:d8:40:
                    66:91:f2:94:60:ee:f9:70:8d:56:cd:04:1c:e0:33:
                    e2:15:67:a1:bc:a4:26:ae:9f:e5:1c:54:ad:2b:cb:
                    2e:50:d9:ad:b4:48:0d:5d:74:96:ae:95:92:31:31:
                    81:6f:1e:1a:09:4d:e8:f2:ae:37:bf:2a:6c:29:c3:
                    64:fc:4a:a4:18:56:b1:b0:6d:58:24:36:47:fd:af:
                    05:62:38:99:36:57:b7:27:f8:62:e4:35:12:1d:58:
                    0f:5c:40:cd:bb:56:6b:74:4a:3d:ad:f3:86:67:64:
                    91:ee:07:c1:70:6c:2e:6e:2a:ef:30:a8:92:3f:89:
                    b3:ba:91:f9:7f:2d:07:cc:20:4b:ad:14:63:73:90:
                    b6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:16:EF:42:98:0C:40:A6:3D:48:38:94:A6:95:B3:96:E1:EE:0D:EC
            X509v3 Authority Key Identifier:
                keyid:A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/A6E0BBA193794B8146B360D50420A9C4DC77C845.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613533343a3a2f34362d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a534::/46

    Signature Algorithm: sha256WithRSAEncryption
         19:1b:45:23:1c:c6:6b:43:87:ee:53:7e:a3:be:d2:80:da:9f:
         3f:43:8c:b0:4b:3f:40:a2:c8:3a:da:a3:e5:40:aa:95:e6:45:
         0b:5d:36:15:bc:f6:a9:28:25:dd:f7:21:f8:ba:95:fd:04:60:
         8f:8e:b0:39:7d:23:f9:b7:04:86:36:5f:67:fd:b8:37:da:18:
         3d:9c:36:08:02:d5:4a:89:ec:53:51:7c:5e:1b:b1:bb:9f:11:
         ec:4f:a4:49:05:94:9a:d2:25:40:03:db:01:0c:fb:b8:20:09:
         82:76:47:45:d3:d8:de:68:0b:9c:5c:91:0a:0b:53:00:0d:54:
         d1:24:7d:e8:8d:37:85:b9:6e:69:c1:e5:34:d7:4c:89:f4:9b:
         24:7d:95:8c:97:71:6b:ee:95:ff:d9:dd:b8:50:e1:2b:86:b3:
         92:e5:cb:27:07:7c:b2:b4:ab:bb:95:89:05:d2:90:c9:14:8b:
         3d:37:83:bf:e2:0b:78:1a:fe:70:4f:f3:d4:a7:86:0b:4b:4d:
         58:69:e3:ac:2c:67:8f:53:37:9e:92:78:32:55:69:60:c5:a2:
         bf:69:aa:bf:ee:44:7a:c3:70:e5:e0:73:2d:b4:9f:04:e1:0a:
         05:4b:b8:e6:34:6c:c5:61:2b:92:7a:4d:60:0b:bb:32:7c:66:
         fc:8b:17:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----