Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530313a3a2f34382d3438203d3e20323135393536.roa
File:                     326131343a373538303a656530313a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          vBl7IXwFBo4Sxmx2SsyJCIVYCQUo0Q3xRTpMUdJLInY=
Subject key identifier:   BD:24:F4:3C:FB:AF:47:75:BE:BD:CD:FB:B8:1B:35:98:F0:E4:93:48
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       520BD0DF37CD5E3672245998A0C659B3B30381B6
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530313a3a2f34382d3438203d3e20323135393536.roa
Signing time:             Mon 03 Mar 2025 00:05:50 +0000
ROA not before:           Mon 03 Mar 2025 00:00:50 +0000
ROA not after:            Mon 02 Mar 2026 00:05:50 +0000
asID:                     215956
IP address blocks:        2a14:7580:ee01::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:0b:d0:df:37:cd:5e:36:72:24:59:98:a0:c6:59:b3:b3:03:81:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar  3 00:00:50 2025 GMT
            Not After : Mar  2 00:05:50 2026 GMT
        Subject: CN=BD24F43CFBAF4775BEBDCDFBB81B3598F0E49348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cd:d4:e4:55:ef:9d:96:d6:bc:7f:81:5c:f1:
                    d7:57:74:36:01:76:9d:02:96:7f:11:7d:19:41:54:
                    1d:6d:a2:bc:c4:f8:ec:e8:b2:50:e6:dc:75:1a:cd:
                    df:98:38:37:02:2c:5b:e8:ab:84:a8:a8:86:b0:cb:
                    47:62:11:f4:ab:e6:aa:8c:73:ed:6c:e3:17:0c:8f:
                    f3:98:7c:64:53:fd:b7:86:9c:a4:0e:e9:e4:0e:8c:
                    d8:e8:35:84:82:ed:32:24:97:cc:f1:51:fc:a8:5e:
                    4d:a3:1d:ba:93:3f:5a:63:65:35:0c:99:95:03:54:
                    2a:88:af:90:1a:d9:96:dd:b8:58:60:26:56:a3:0e:
                    10:20:d3:13:2c:b4:f1:90:96:e5:be:b4:c1:cb:f0:
                    84:2c:be:e3:a8:8c:f9:f1:e6:01:83:98:fe:32:88:
                    f2:0d:55:77:97:5c:70:09:fe:9f:50:7d:f9:1b:da:
                    36:e3:db:93:9c:03:f8:df:21:57:c4:8f:2a:09:62:
                    ce:b1:6e:87:c5:38:b7:28:ce:db:02:64:2c:e5:fc:
                    4d:5b:31:a9:e3:a9:25:6a:ec:84:8a:7e:3e:1a:75:
                    d4:08:69:e7:06:4f:3d:f8:2c:99:3b:83:7f:ed:b3:
                    be:a2:80:fe:a7:32:7b:3d:1e:47:4a:58:9a:18:03:
                    3a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:24:F4:3C:FB:AF:47:75:BE:BD:CD:FB:B8:1B:35:98:F0:E4:93:48
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530313a3a2f34382d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ee01::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:a4:54:46:84:30:9f:98:ae:82:83:6d:49:9d:a6:f0:4a:4b:
         03:e3:c8:49:8e:ec:a0:db:89:0d:6c:37:5e:a7:4d:05:c4:bd:
         81:b0:12:7a:c0:15:ad:49:f6:a3:4e:43:ac:46:f3:fe:ee:be:
         b6:3a:fb:33:1f:40:ae:a9:4d:27:12:2e:1c:02:7c:8c:a4:40:
         4b:ed:30:31:35:fa:37:f6:aa:a0:d8:8f:b0:bd:d2:2d:8f:75:
         cf:ab:48:b2:4b:bf:4c:7b:44:83:42:35:60:7c:e1:90:20:03:
         5d:22:d3:08:a7:24:8c:86:3e:41:79:6e:33:d4:94:4d:12:79:
         11:39:96:1d:10:f8:e4:bb:41:1e:d9:47:00:a1:94:91:6a:b9:
         96:37:c4:5b:c2:44:d2:36:d9:e1:8f:8e:45:dd:60:3d:ae:b9:
         e8:86:07:06:e6:4a:e0:6a:27:11:47:88:13:0c:cc:3d:e3:4d:
         b6:b1:30:48:ba:ae:06:57:69:94:8d:7e:8e:d7:5c:f5:fd:f5:
         74:00:bb:12:a3:de:e1:2f:a5:55:44:80:92:ec:90:b2:19:a6:
         f1:31:e4:79:86:8b:3e:3c:cf:8b:ce:f2:4b:ff:6a:95:c7:98:
         fe:26:ab:d0:b9:f4:49:48:b9:22:2a:1c:4a:6d:53:f2:f1:25:
         fa:1a:be:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----