Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530343a3a2f34382d3438203d3e20323135393536.roa
File:                     326131343a373538303a656530343a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          qFn0d4vgZpr42MvH9npN3Ed4JlO5bGVpqsApKnKzWjc=
Subject key identifier:   AD:65:B0:6A:E5:94:08:D0:4E:73:BB:62:72:AE:CE:FA:55:46:95:04
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       7CC930CF319CE067A156C8E567F8103BC96FCFFB
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530343a3a2f34382d3438203d3e20323135393536.roa
Signing time:             Mon 03 Mar 2025 00:07:04 +0000
ROA not before:           Mon 03 Mar 2025 00:02:04 +0000
ROA not after:            Mon 02 Mar 2026 00:07:04 +0000
asID:                     215956
IP address blocks:        2a14:7580:ee04::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c9:30:cf:31:9c:e0:67:a1:56:c8:e5:67:f8:10:3b:c9:6f:cf:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar  3 00:02:04 2025 GMT
            Not After : Mar  2 00:07:04 2026 GMT
        Subject: CN=AD65B06AE59408D04E73BB6272AECEFA55469504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1a:fd:d8:14:20:8f:9b:07:33:a7:12:ea:b8:
                    31:aa:07:f5:e7:d0:e2:36:a0:9b:f4:7b:32:f8:12:
                    90:3e:37:df:b4:71:a1:cf:82:15:63:e9:ed:b9:22:
                    1b:4f:69:c0:9e:4e:af:e6:42:33:e4:bd:d9:cb:ea:
                    f7:b2:e1:3c:ec:ac:87:7d:27:5b:47:e3:e5:03:61:
                    8f:c1:ca:98:79:68:c2:be:c3:38:2d:f4:50:dc:b3:
                    ed:1c:0b:c1:01:a0:c3:64:41:40:3a:10:87:f8:e2:
                    52:5f:1c:82:6b:13:b3:c6:bd:ef:f0:7c:d3:30:a5:
                    2e:07:8a:b6:ef:91:aa:6d:64:4d:e2:28:b8:87:61:
                    c5:4d:05:e0:f0:c3:99:7f:62:88:43:f0:85:1d:4b:
                    e0:ee:42:c0:f3:ef:36:a4:6c:79:bf:78:51:36:4e:
                    8d:09:7b:17:bc:26:81:c3:1f:b5:22:ad:16:f0:4d:
                    b6:ed:9e:9b:2a:7e:9f:77:90:a5:99:8e:a8:2b:6b:
                    df:0b:f9:f9:87:c9:7a:12:cd:0b:fd:a1:0b:b4:25:
                    89:4a:3f:c1:42:90:01:35:89:3a:e0:01:ec:f0:a5:
                    c9:07:1b:41:02:c1:b8:e1:f7:f0:17:5a:9b:8e:17:
                    b5:7f:03:e6:da:0b:e4:fe:79:ad:e1:ff:b5:10:41:
                    b5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:65:B0:6A:E5:94:08:D0:4E:73:BB:62:72:AE:CE:FA:55:46:95:04
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530343a3a2f34382d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ee04::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:0e:31:59:8a:e2:a9:dc:bc:a4:e0:85:bb:9e:80:96:8d:84:
         5a:af:52:dd:0f:fb:78:e1:ba:48:0b:9c:06:eb:da:03:75:5f:
         66:61:8a:1f:11:35:1c:ae:fc:db:d1:2e:c4:13:e4:73:51:57:
         43:ce:7d:5a:b6:4f:0f:c3:6f:d4:bf:a2:18:e4:56:bc:24:05:
         4d:ec:36:d8:62:f7:82:67:88:fb:53:e8:4c:83:2e:83:a8:d9:
         da:78:c1:e9:75:8c:de:54:9b:72:44:2e:92:eb:08:93:50:4a:
         e5:36:31:af:ee:57:4c:04:87:c7:74:c8:24:d4:ca:97:14:a2:
         04:63:bc:a6:a6:f8:f9:44:73:92:71:19:3b:fc:5e:24:ce:35:
         19:d7:4b:fc:f4:4d:42:26:04:dc:9f:7b:3b:c6:00:b9:bc:d1:
         b8:7e:a5:93:1c:fe:6e:56:bd:27:2d:a4:c2:19:6d:5a:ac:dd:
         7f:99:76:0e:4d:15:61:91:aa:c8:1c:21:6e:3e:20:71:34:e1:
         71:a6:3a:4f:61:ba:c8:07:98:b1:fb:a8:0f:cc:c7:c6:18:78:
         d8:17:3e:9b:57:c5:7d:cb:2c:10:b9:6b:14:39:ef:69:07:30:
         5f:bf:9e:c0:76:ae:34:28:46:9e:b6:d5:9d:ef:8f:bd:27:21:
         68:ce:a3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----