Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656463303a3a2f34372d3438203d3e20323135393536.roa
File:                     326131343a373538303a656463303a3a2f34372d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          AQQOMxbyHdi/QRQwL8IjR0uC20BOBfCMyVbTLYDkWm4=
Subject key identifier:   96:09:12:62:1C:85:50:D1:E3:89:00:53:70:F8:5F:8B:1F:C0:A9:06
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       77279E789AB6218E9E989C0F6428FA9F51294C40
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656463303a3a2f34372d3438203d3e20323135393536.roa
Signing time:             Sat 08 Mar 2025 00:16:55 +0000
ROA not before:           Sat 08 Mar 2025 00:11:55 +0000
ROA not after:            Sat 07 Mar 2026 00:16:55 +0000
asID:                     215956
IP address blocks:        2a14:7580:edc0::/47 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:27:9e:78:9a:b6:21:8e:9e:98:9c:0f:64:28:fa:9f:51:29:4c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar  8 00:11:55 2025 GMT
            Not After : Mar  7 00:16:55 2026 GMT
        Subject: CN=960912621C8550D1E389005370F85F8B1FC0A906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:43:9e:91:7c:16:5c:8a:d5:9c:a2:0b:6b:fb:
                    2c:c7:c5:98:0a:71:18:72:95:fc:c7:4e:51:5e:86:
                    2c:5a:d2:d3:ec:45:62:fb:91:ae:7e:b7:27:4d:9f:
                    ef:02:ba:7b:f2:9b:3c:d2:7e:b9:72:e0:3e:c9:0c:
                    24:fa:95:a5:0d:c0:99:20:7a:b3:82:3b:15:0b:b8:
                    04:35:2b:db:d1:ac:37:35:a6:55:df:23:df:51:48:
                    4d:ba:96:4f:b7:03:77:91:f6:74:ac:db:4d:ca:e5:
                    35:8c:f9:85:dc:d9:ea:7f:1d:8c:a0:68:34:d7:ba:
                    4c:98:49:4a:c9:48:4e:42:de:58:c5:eb:3a:2a:a9:
                    ce:e2:e2:e4:f7:83:9c:db:d8:5f:ad:4b:74:f8:bb:
                    66:ad:a6:24:52:da:04:a1:50:4c:26:37:4a:6f:30:
                    f2:9c:6a:87:50:4a:22:90:e5:c6:fb:f8:e2:4f:e9:
                    cd:90:64:84:9d:2c:c9:0a:58:85:d6:ed:d5:5d:2d:
                    03:37:d8:11:32:ee:c4:85:35:b0:cf:33:2b:a5:65:
                    2c:8c:54:67:8e:85:5b:7a:6d:d1:79:6d:76:06:8e:
                    51:eb:0a:f8:36:c7:da:33:b3:71:35:8f:db:54:2d:
                    aa:df:08:57:9f:9a:34:09:a1:5c:bf:2f:f4:e0:01:
                    c7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:09:12:62:1C:85:50:D1:E3:89:00:53:70:F8:5F:8B:1F:C0:A9:06
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656463303a3a2f34372d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:edc0::/47

    Signature Algorithm: sha256WithRSAEncryption
         8f:8b:0f:81:bd:d9:3b:00:d7:66:47:18:93:07:a9:0f:8d:c7:
         e1:27:89:bc:8a:5b:7d:4d:0a:98:e1:33:4e:d1:03:17:c8:0a:
         a1:ba:d9:da:6d:0d:24:cb:90:49:30:18:11:7b:b6:dc:d2:2a:
         65:fa:67:20:b8:43:1f:24:2a:f9:c3:ea:e6:df:5d:2e:e4:f2:
         6d:7d:ff:3f:0d:d3:89:f7:68:82:84:fb:f9:83:7f:ee:ad:54:
         63:ed:c4:22:fa:8c:d8:b3:13:b8:7e:5b:a5:9e:f2:f2:98:e1:
         57:2e:fe:35:c4:d0:31:c0:a2:58:e7:30:86:53:bd:21:c5:ad:
         07:97:eb:a7:2d:a6:db:bb:e0:fc:c7:c2:ca:30:77:c4:06:b1:
         11:5c:1e:8d:ab:74:b7:a9:f0:81:61:f5:45:40:95:6e:b1:19:
         68:c8:59:d9:4c:77:f5:db:a4:79:05:66:32:d7:4f:18:a1:af:
         87:de:f9:1f:6e:b7:a5:4b:a0:d4:74:b2:6a:28:5e:60:b0:50:
         e4:79:df:42:c4:32:5e:a2:14:69:1d:dd:fc:d0:f2:e5:75:c3:
         20:85:e0:7d:2c:a9:2e:e9:88:8f:35:13:13:fa:8b:03:f5:eb:
         81:0b:6d:31:10:98:89:b1:b3:1e:00:ae:30:66:8a:37:4e:65:
         79:6a:e0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----