Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a626230363a3a2f34372d3438203d3e20323134383138.roa
File:                     326130613a363034343a626230363a3a2f34372d3438203d3e20323134383138.roa (raw, json)
Hash identifier:          BQEFYhhmnTwncZQhPRr0TLTLCzfel4wLCPYZmdLDvgI=
Subject key identifier:   FB:14:62:F5:A3:7D:18:E2:C4:8E:54:5E:BC:44:8D:01:21:D7:82:AC
Certificate issuer:       /CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
Certificate serial:       034A4467FE15320533ADFF4A8BD3FBBF2EF212FE
Authority key identifier: A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a626230363a3a2f34372d3438203d3e20323134383138.roa
Signing time:             Wed 12 Feb 2025 06:31:35 +0000
ROA not before:           Wed 12 Feb 2025 06:26:35 +0000
ROA not after:            Wed 11 Feb 2026 06:31:35 +0000
asID:                     214818
IP address blocks:        2a0a:6044:bb06::/47 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:4a:44:67:fe:15:32:05:33:ad:ff:4a:8b:d3:fb:bf:2e:f2:12:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
        Validity
            Not Before: Feb 12 06:26:35 2025 GMT
            Not After : Feb 11 06:31:35 2026 GMT
        Subject: CN=FB1462F5A37D18E2C48E545EBC448D0121D782AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:db:ab:ac:70:4f:b9:0a:c8:74:a6:01:56:ba:
                    e3:2f:18:b8:47:d2:84:bc:ea:f8:d2:cb:df:78:87:
                    24:a2:40:42:a2:ce:a6:c9:86:ef:7c:4d:4a:e9:36:
                    29:69:dd:6d:38:19:eb:c2:8e:70:0a:55:97:f9:e3:
                    29:cb:1c:9f:1a:0b:70:8a:d4:b3:a9:65:3c:51:0a:
                    70:d5:9f:fe:ea:8d:1b:b2:e5:c8:e5:80:c7:d1:09:
                    22:f1:90:0e:64:b5:40:db:44:ea:4f:07:a9:95:19:
                    6c:99:70:94:ac:4f:52:cd:34:05:ec:eb:66:09:ac:
                    4d:75:77:e3:47:76:0d:da:12:7e:80:31:3d:70:05:
                    13:57:00:6b:cc:5b:c2:df:05:07:14:5c:df:5c:32:
                    e8:25:41:ad:77:1c:12:9b:69:b6:01:df:2c:57:8f:
                    b4:3e:dd:27:aa:0b:f7:22:b4:44:a1:82:5c:2a:69:
                    29:c3:ed:67:9a:c4:a7:fd:bf:3c:f2:89:37:2d:44:
                    28:ba:ce:81:97:70:3d:68:f9:ff:bb:6a:2e:d5:d3:
                    06:7f:db:e8:68:c0:3f:e1:2b:04:59:28:4a:6b:7d:
                    57:67:af:7c:4e:92:1e:3b:0d:35:cb:4c:8f:68:57:
                    4f:67:fd:df:7e:7c:42:41:d3:c9:f4:d2:41:41:ea:
                    b4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:14:62:F5:A3:7D:18:E2:C4:8E:54:5E:BC:44:8D:01:21:D7:82:AC
            X509v3 Authority Key Identifier:
                keyid:A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/A6E0BBA193794B8146B360D50420A9C4DC77C845.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a626230363a3a2f34372d3438203d3e20323134383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:bb06::/47

    Signature Algorithm: sha256WithRSAEncryption
         4f:1e:f5:fe:53:48:80:17:66:0b:68:f5:82:3a:0b:d1:7b:f0:
         06:e3:2b:de:12:9e:48:0f:49:66:b5:46:8c:a4:6a:fc:37:18:
         a6:5e:86:30:9c:84:a1:89:b1:ad:48:0e:c9:d2:e1:77:6e:63:
         ea:d9:56:be:5c:e5:e9:b7:51:9e:f4:3c:ea:49:be:b1:1e:76:
         54:de:44:67:9f:27:c3:13:81:42:b0:ac:e1:24:4f:d1:36:20:
         8f:11:1a:aa:7b:7d:95:4b:f3:ef:70:5a:f0:ce:d6:38:07:58:
         68:b4:20:24:51:87:5a:ad:6d:27:77:16:ac:8d:a3:5c:fe:87:
         2e:81:0e:f1:9d:bb:38:df:99:b8:ca:3e:77:17:f9:8f:88:45:
         e2:96:fa:c2:d5:07:48:13:5b:b5:d4:b8:f3:06:60:68:a7:b4:
         45:71:b5:02:9a:be:45:c7:90:c9:32:ae:55:a2:e4:7a:d7:72:
         89:0e:d7:b9:90:d5:ca:5d:7e:e1:22:21:0e:b6:e2:16:51:7a:
         94:0f:a6:a6:4f:aa:de:f1:3a:57:57:c7:a0:bd:7e:52:2f:52:
         76:3b:a7:19:a1:a2:36:43:be:4f:f0:be:15:5b:f6:9a:23:dc:
         68:7c:27:fb:bc:84:2d:a0:bb:f9:38:d8:63:ab:e4:93:c2:cd:
         7e:05:4a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----