Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/326130663a316363363a623130323a3a2f34382d3438203d3e20323034323131.roa
File:                     326130663a316363363a623130323a3a2f34382d3438203d3e20323034323131.roa (raw, json)
Hash identifier:          1/TM1C1CVtjSmW0AiY43HuRc4ozySLnLjfUC5sW87to=
Subject key identifier:   B6:D6:9A:27:0B:47:8F:57:B7:43:5C:04:9A:AB:B0:53:2C:55:18:BD
Certificate issuer:       /CN=9F7042C3B38A2A4DAB756337122AD2B927DD6DE0
Certificate serial:       0C73D2330A10A69A8505A5542D4E1A5D667EC5BC
Authority key identifier: 9F:70:42:C3:B3:8A:2A:4D:AB:75:63:37:12:2A:D2:B9:27:DD:6D:E0
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/326130663a316363363a623130323a3a2f34382d3438203d3e20323034323131.roa
Signing time:             Sun 07 Dec 2025 07:00:29 +0000
ROA not before:           Sun 07 Dec 2025 06:55:29 +0000
ROA not after:            Sun 06 Dec 2026 07:00:29 +0000
asID:                     204211
IP address blocks:        2a0f:1cc6:b102::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:73:d2:33:0a:10:a6:9a:85:05:a5:54:2d:4e:1a:5d:66:7e:c5:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F7042C3B38A2A4DAB756337122AD2B927DD6DE0
        Validity
            Not Before: Dec  7 06:55:29 2025 GMT
            Not After : Dec  6 07:00:29 2026 GMT
        Subject: CN=B6D69A270B478F57B7435C049AABB0532C5518BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:06:05:cb:4c:46:f2:fc:ef:5c:3a:3f:74:6d:
                    4f:36:a7:db:8a:dd:37:27:dd:22:04:2b:ce:e6:23:
                    13:11:f7:34:b2:4b:1b:f4:5b:26:2e:2a:09:a2:ab:
                    4b:e7:c2:50:e3:c0:b5:ed:48:60:bc:4f:ba:09:74:
                    35:a1:a1:ee:9d:7c:94:98:96:1e:83:75:83:96:76:
                    41:ab:76:ea:80:6a:e7:6d:0d:d2:68:1c:2c:94:f5:
                    e9:48:d5:03:c9:a3:22:60:6d:06:0d:b3:6e:9e:31:
                    ff:3e:d1:64:36:a7:b3:75:7b:8f:c4:ad:9f:26:77:
                    9e:f5:8b:45:b9:0c:05:6d:6f:d4:97:f7:62:f9:e5:
                    d1:ab:fd:d9:29:61:1b:52:49:ed:3a:74:25:e1:c9:
                    87:af:1e:f3:1f:c3:55:53:3b:df:86:16:da:d4:f3:
                    39:69:38:b7:0e:ef:5f:6a:18:35:b4:f3:e3:c2:a1:
                    b5:e3:45:a0:8f:47:ec:81:78:f9:38:fe:44:7c:b1:
                    f1:92:dd:38:79:6c:32:b0:13:20:45:40:ba:e3:70:
                    7b:c4:12:dd:38:37:1a:21:3b:42:df:62:5c:96:5b:
                    a9:9c:e6:70:ca:d4:00:fc:14:80:b2:00:ba:30:38:
                    ea:35:f8:34:bf:c9:dd:bb:5e:de:a5:d9:c0:32:2d:
                    24:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D6:9A:27:0B:47:8F:57:B7:43:5C:04:9A:AB:B0:53:2C:55:18:BD
            X509v3 Authority Key Identifier:
                keyid:9F:70:42:C3:B3:8A:2A:4D:AB:75:63:37:12:2A:D2:B9:27:DD:6D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/326130663a316363363a623130323a3a2f34382d3438203d3e20323034323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:1cc6:b102::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:73:cc:b4:b4:37:39:66:49:41:51:25:e4:c9:78:ab:6d:83:
         db:7d:bc:c1:85:be:45:9f:a7:e9:5c:2c:7e:bb:cc:82:d9:f5:
         a1:c7:47:e6:ba:1a:a2:b6:1d:65:d9:e5:14:17:7d:91:71:c7:
         dd:19:a1:e9:d0:4c:fd:d1:aa:07:c6:03:a9:1f:7d:19:52:82:
         65:e0:f6:66:cf:26:7a:33:1b:65:5c:90:5e:e6:4d:a6:26:d3:
         ab:50:92:9c:37:aa:17:dc:a1:07:df:38:0b:a2:38:01:0f:c8:
         8c:e1:ce:99:c9:b5:60:ec:6a:08:ec:c3:12:04:3e:6c:49:e7:
         07:94:76:10:c1:a3:65:69:e1:6e:3b:72:af:99:f3:1a:64:3b:
         9e:e4:e2:8e:6b:f6:fd:d8:47:60:7a:08:b3:b4:11:e2:a7:09:
         f4:32:6a:09:59:14:b7:75:64:39:91:57:50:34:0f:a6:d0:a6:
         44:96:e8:3a:26:80:6c:a1:22:7c:61:b5:7d:85:fe:8d:87:e8:
         7a:a2:bb:d8:ae:50:66:75:3a:f4:bf:d9:93:5c:28:55:fa:c9:
         43:1c:a9:2b:ca:8b:83:d3:74:dc:ce:81:f5:18:a8:99:70:2a:
         6c:f0:cd:0c:d0:13:dd:7e:7e:63:c9:53:5c:45:fa:cd:96:64:
         24:f7:7f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----