Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613533383a3a2f34372d3438203d3e20323135393536.roa
File:                     326130613a363034343a613533383a3a2f34372d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          rPSDGVuTVruIjvRfksdF4Y+fTmI+HVOgQaDh/y5/7Uw=
Subject key identifier:   01:FE:30:5C:35:19:62:B1:BE:59:88:43:F8:4B:62:D7:E4:F4:10:87
Certificate issuer:       /CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
Certificate serial:       72F8DD9D5A6BBBA54396578ADA52423734FADCD8
Authority key identifier: A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613533383a3a2f34372d3438203d3e20323135393536.roa
Signing time:             Sat 08 Feb 2025 19:35:55 +0000
ROA not before:           Sat 08 Feb 2025 19:30:55 +0000
ROA not after:            Sat 07 Feb 2026 19:35:55 +0000
asID:                     215956
IP address blocks:        2a0a:6044:a538::/47 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f8:dd:9d:5a:6b:bb:a5:43:96:57:8a:da:52:42:37:34:fa:dc:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
        Validity
            Not Before: Feb  8 19:30:55 2025 GMT
            Not After : Feb  7 19:35:55 2026 GMT
        Subject: CN=01FE305C351962B1BE598843F84B62D7E4F41087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:30:d6:49:87:b9:ce:e1:12:18:4b:59:4e:3e:
                    1b:a5:a2:09:b8:7f:a6:52:17:a8:5e:f4:a0:0b:7e:
                    a3:d4:dd:43:ff:46:1f:ae:cf:4f:e0:ac:22:70:96:
                    9d:11:bd:0b:86:34:e4:b5:5b:59:02:0f:b8:e0:31:
                    2b:19:ea:1b:1c:e0:73:75:9b:6c:5a:e2:75:c9:02:
                    3d:91:37:53:9e:27:3d:9e:fa:68:89:16:58:29:af:
                    8f:5f:1d:73:48:9a:a9:4c:19:1f:a0:8d:fc:3b:2f:
                    f0:57:ee:0e:85:0d:29:08:8e:29:fc:7f:46:c3:14:
                    e1:45:2d:2a:64:af:c8:e8:3e:5e:05:15:66:9f:e6:
                    dc:50:33:05:c3:1d:e0:fe:6a:fe:39:c9:29:91:f4:
                    4a:89:9a:d5:a2:46:df:f4:35:8e:e3:8d:c3:04:a3:
                    0c:1a:0c:85:0d:90:af:0e:57:1a:57:db:c4:1c:62:
                    1f:ff:39:1a:df:41:0c:52:18:32:85:51:39:9c:16:
                    ed:97:d5:ba:21:45:69:4c:7a:c8:3b:3e:d1:ad:ef:
                    5d:07:05:1c:0e:84:37:c8:98:7b:cc:53:74:5b:ae:
                    72:30:6c:56:24:88:b5:9c:ef:97:ab:e4:7e:be:cd:
                    8c:ea:9e:bf:70:5c:04:1d:d2:26:c0:7d:43:97:cc:
                    5a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FE:30:5C:35:19:62:B1:BE:59:88:43:F8:4B:62:D7:E4:F4:10:87
            X509v3 Authority Key Identifier:
                keyid:A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/A6E0BBA193794B8146B360D50420A9C4DC77C845.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613533383a3a2f34372d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a538::/47

    Signature Algorithm: sha256WithRSAEncryption
         45:24:0f:7b:66:43:51:29:08:fc:d5:0e:51:90:f6:65:49:fc:
         14:2d:99:01:ac:38:1e:9e:9e:3d:7e:3e:d7:a6:f9:35:da:f9:
         44:5e:d2:e6:2b:03:62:bf:f0:d5:a5:68:5e:68:89:7e:a4:32:
         30:70:25:b8:a2:01:49:78:2c:58:51:1e:cf:87:7d:b9:a2:80:
         d4:e9:96:3a:62:0a:7f:ad:2b:87:51:56:53:ba:51:76:f4:32:
         51:64:01:f7:fa:15:8b:b8:8d:03:e0:b9:26:a6:d3:6c:81:2f:
         e1:6e:83:95:80:79:60:34:0b:4f:34:35:2e:63:6a:dd:9b:10:
         da:33:9e:0d:57:fa:47:33:78:74:a6:0e:41:c1:9d:c7:9b:8f:
         c3:9f:59:13:5d:5d:d7:27:16:ba:4b:6a:37:aa:9b:7f:64:ac:
         eb:e5:c7:28:ab:39:ba:d0:e8:e9:6a:55:23:95:bb:c3:cc:e7:
         f9:c2:18:59:e6:74:a0:34:55:46:19:33:0c:20:23:79:8d:41:
         17:e9:61:34:34:f6:09:99:77:81:96:04:64:e6:d1:db:7d:58:
         70:ba:b4:79:57:d4:3b:60:39:d1:2d:d0:d7:8e:05:82:e0:0a:
         ab:95:4b:ad:ef:5f:a2:a4:83:62:71:b5:f0:1c:87:8d:9f:7a:
         8c:44:bf:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----