Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fb30d3de-e574-4a23-a1bd-5f1fa05c53be/0/326130623a346530343a626565663a3a2f34382d3438203d3e20323135373531.roa
File:                     326130623a346530343a626565663a3a2f34382d3438203d3e20323135373531.roa (raw, json)
Hash identifier:          zUyWoxX6q0gS/zhogxqU74TaFk5fWp6KH87Bqqij54w=
Subject key identifier:   75:94:88:9F:92:7B:7D:B1:D8:65:1C:D9:EE:A1:96:AA:6A:55:DF:3F
Certificate issuer:       /CN=fc59950e49df88985ab0727278320c684d2074be
Certificate serial:       6805300950145A7F9AF4D255A8A3E2E565998A0D
Authority key identifier: FC:59:95:0E:49:DF:88:98:5A:B0:72:72:78:32:0C:68:4D:20:74:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_FmVDknfiJhasHJyeDIMaE0gdL4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fb30d3de-e574-4a23-a1bd-5f1fa05c53be/0/326130623a346530343a626565663a3a2f34382d3438203d3e20323135373531.roa
Signing time:             Sat 27 Apr 2024 15:41:51 +0000
ROA not before:           Sat 27 Apr 2024 15:36:51 +0000
ROA not after:            Sat 26 Apr 2025 15:41:51 +0000
asID:                     215751
IP address blocks:        2a0b:4e04:beef::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:05:30:09:50:14:5a:7f:9a:f4:d2:55:a8:a3:e2:e5:65:99:8a:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc59950e49df88985ab0727278320c684d2074be
        Validity
            Not Before: Apr 27 15:36:51 2024 GMT
            Not After : Apr 26 15:41:51 2025 GMT
        Subject: CN=7594889F927B7DB1D8651CD9EEA196AA6A55DF3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d8:2e:38:53:bc:77:16:5e:d0:ff:45:18:52:
                    cd:9d:eb:85:10:e7:fb:e8:0e:2b:f0:12:81:d6:d8:
                    05:ba:eb:75:e1:23:7f:1c:17:88:05:93:d9:38:2a:
                    4e:4a:c8:77:0c:4c:24:36:05:4a:2c:84:8c:e9:dd:
                    15:68:2e:88:5c:27:8b:6d:ae:99:85:3b:2e:c0:c2:
                    7f:dd:ee:1b:f6:8e:87:c8:a9:e5:11:6d:7e:04:41:
                    9f:90:c8:7b:9f:0c:65:04:92:ff:b0:cd:15:0b:fc:
                    3a:ea:b8:e9:26:a8:39:bd:a3:91:f9:36:7e:93:76:
                    47:e2:02:38:a5:1c:5c:b7:72:3f:4b:3f:82:45:39:
                    be:4b:44:e0:46:c7:88:99:56:ed:54:75:5a:f8:6c:
                    10:f2:20:a5:92:9b:51:a6:0b:05:8e:7e:f9:af:5b:
                    8b:82:5d:cb:f9:4e:c3:70:aa:ea:7c:34:85:b0:69:
                    09:4a:3d:32:e8:4c:00:2a:e5:3a:73:c6:2a:ae:ff:
                    09:39:be:59:97:ce:be:53:3a:aa:1e:71:02:55:54:
                    b1:37:61:75:4e:32:38:4f:fd:b7:5c:1b:e7:fd:2b:
                    31:fc:b7:8e:11:87:36:1b:fc:d6:cb:de:c9:e9:59:
                    6a:6a:78:f2:a9:b1:f9:df:6a:8f:8b:bc:35:c6:ae:
                    2e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:94:88:9F:92:7B:7D:B1:D8:65:1C:D9:EE:A1:96:AA:6A:55:DF:3F
            X509v3 Authority Key Identifier:
                keyid:FC:59:95:0E:49:DF:88:98:5A:B0:72:72:78:32:0C:68:4D:20:74:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fb30d3de-e574-4a23-a1bd-5f1fa05c53be/0/FC59950E49DF88985AB0727278320C684D2074BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FmVDknfiJhasHJyeDIMaE0gdL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fb30d3de-e574-4a23-a1bd-5f1fa05c53be/0/326130623a346530343a626565663a3a2f34382d3438203d3e20323135373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e04:beef::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:5c:c1:f7:7a:0e:41:66:30:73:e5:d0:02:a8:ea:49:e8:7f:
         da:97:cb:e3:80:da:b5:1d:76:ad:5d:6f:b7:16:3d:40:5d:69:
         3b:e1:8c:46:db:29:f4:30:62:80:3a:64:79:cc:b8:ea:ed:6d:
         1c:ef:ae:5d:27:78:74:0f:a0:0b:15:ce:88:61:d0:e3:70:e2:
         74:f9:2d:58:5b:31:2b:f4:ec:06:ff:20:c1:63:00:69:e1:da:
         97:57:7e:f5:46:48:87:6e:15:26:ee:23:d9:3a:ae:ca:af:b3:
         5f:e9:f2:db:c5:4e:59:14:d5:c6:09:33:a8:e2:7c:7a:ca:02:
         40:d1:4c:90:a8:d4:7f:13:d8:37:62:23:c6:f0:10:00:ec:09:
         7a:1a:95:66:37:40:75:8f:65:78:a2:27:2d:33:db:4c:14:17:
         52:a5:ee:ea:9d:33:f8:39:45:fc:b4:4c:7f:cf:6a:97:cd:4c:
         25:84:85:71:7e:34:2d:18:67:0a:a0:14:eb:7a:60:04:a8:84:
         59:f1:ce:09:e9:6d:02:20:f4:15:f0:1a:ee:cf:50:41:4e:0a:
         4b:3e:1f:c9:4d:a9:f4:59:50:7b:ae:80:60:79:83:80:c3:63:
         25:df:89:89:e3:0f:9c:a2:0c:d2:9b:ad:e4:c8:de:64:ad:5c:
         99:e9:db:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----