Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a626230303a3a2f34382d3438203d3e20323135393536.roa
File:                     326130613a363034343a626230303a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          FG93GqakspTXbiqLNZAhXefhKYQoVNVnB2wrHlmUD2I=
Subject key identifier:   BE:0A:51:D8:77:8F:14:97:25:3F:59:41:33:79:BB:B9:A3:0A:BD:25
Certificate issuer:       /CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
Certificate serial:       0A606857796F482A7E13245475F72A7C166D8FC5
Authority key identifier: A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a626230303a3a2f34382d3438203d3e20323135393536.roa
Signing time:             Wed 12 Feb 2025 06:31:35 +0000
ROA not before:           Wed 12 Feb 2025 06:26:35 +0000
ROA not after:            Wed 11 Feb 2026 06:31:35 +0000
asID:                     215956
IP address blocks:        2a0a:6044:bb00::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:60:68:57:79:6f:48:2a:7e:13:24:54:75:f7:2a:7c:16:6d:8f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
        Validity
            Not Before: Feb 12 06:26:35 2025 GMT
            Not After : Feb 11 06:31:35 2026 GMT
        Subject: CN=BE0A51D8778F1497253F59413379BBB9A30ABD25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d6:bc:a6:28:c3:34:35:b0:07:ac:ba:f9:13:
                    21:05:ce:b8:14:6d:a6:a4:63:35:78:8a:0b:17:b5:
                    8a:c8:dc:41:89:d5:9f:9f:4c:56:08:ce:d6:61:01:
                    fe:d4:36:17:e4:0f:db:01:05:8c:0d:40:e9:fc:b6:
                    70:06:d9:ce:81:ae:94:41:0b:af:37:1c:af:d0:ae:
                    04:1b:e2:62:6d:12:a9:3a:cd:91:cb:77:a6:9f:7a:
                    cc:3e:27:2a:cf:10:aa:e9:d6:32:aa:bb:6d:31:d9:
                    b7:d4:c2:c1:07:da:9b:ab:2c:60:aa:81:17:ce:28:
                    f9:dc:e3:40:12:ea:5b:78:94:a7:5a:f8:df:46:e6:
                    a7:e0:2f:cd:bc:a8:cb:b8:d9:06:1f:4b:be:d4:30:
                    cb:c4:17:7e:e9:f4:26:ea:b0:1c:92:db:d6:36:57:
                    51:a8:68:ff:fa:61:b3:dc:93:52:fd:7f:6d:c5:1e:
                    e1:06:2c:ad:7c:e7:ba:6f:0c:f0:92:7a:f5:3c:5a:
                    d4:7d:3e:16:42:43:40:31:b8:70:97:96:b4:0a:d3:
                    67:3e:3b:74:2b:3d:d5:88:1d:e7:a2:c7:0a:91:a2:
                    4b:37:45:eb:ef:f0:ba:60:1d:c0:df:57:bf:bb:4b:
                    29:cd:0e:dd:17:90:c9:fe:f2:22:66:42:a2:c1:89:
                    02:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0A:51:D8:77:8F:14:97:25:3F:59:41:33:79:BB:B9:A3:0A:BD:25
            X509v3 Authority Key Identifier:
                keyid:A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/A6E0BBA193794B8146B360D50420A9C4DC77C845.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a626230303a3a2f34382d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:bb00::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:b6:4f:34:42:b3:76:14:0f:df:f3:fc:cb:a4:a8:99:15:4f:
         55:78:02:a8:39:4c:f4:16:d0:30:fb:25:9b:c4:c8:4d:70:e5:
         f1:83:5a:d7:af:2f:63:1e:36:6b:40:74:54:97:a5:28:04:90:
         df:a2:09:e3:af:08:f8:38:e4:a3:30:1c:30:44:22:d3:c2:a1:
         77:c4:a1:45:bb:e4:cf:e5:0e:fc:13:6d:db:28:c2:b3:84:4f:
         9d:6d:98:07:6b:e4:67:70:79:7a:cc:fd:bf:cf:f2:05:b1:bc:
         58:fb:e9:a5:e8:85:9a:db:cd:01:c1:54:e7:24:04:9d:d8:19:
         03:6a:49:0f:a5:6c:92:1a:71:86:88:dd:84:9e:cb:73:b3:fd:
         b6:88:ca:a1:45:98:1f:ad:48:a8:f5:15:9f:b2:f5:4d:ed:17:
         4d:d5:ad:76:d0:13:f2:63:8b:4f:39:28:d8:6e:5d:a6:21:75:
         09:3d:d5:e2:7b:6f:f7:97:13:e6:d2:7f:01:36:ab:0b:3e:ba:
         40:4f:57:6d:39:02:9d:8e:00:4c:77:60:24:28:c2:ed:30:e9:
         bf:a3:1c:5a:bc:f8:60:33:0a:a4:14:81:54:80:c5:9e:60:6f:
         ed:7d:11:79:51:61:cd:30:87:b3:56:a7:d3:ee:c6:9a:e8:b1:
         7f:bf:32:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----