Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337613a3a2f34382d3438203d3e20323134373537.roa
File:                     326130613a363034343a616337613a3a2f34382d3438203d3e20323134373537.roa (raw, json)
Hash identifier:          z6qIHA2uDJN/CJWDMAY75y9bVKnyJm9r8StWN8GafuE=
Subject key identifier:   1F:42:AC:B7:C6:96:FD:74:8E:C9:E2:9D:33:13:0F:0D:B1:D4:47:FA
Certificate issuer:       /CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
Certificate serial:       2BAE33CFCEF40606FAA3979ADCEB62A174B525EB
Authority key identifier: 5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337613a3a2f34382d3438203d3e20323134373537.roa
Signing time:             Sat 08 Jun 2024 14:02:19 +0000
ROA not before:           Sat 08 Jun 2024 13:57:19 +0000
ROA not after:            Sat 07 Jun 2025 14:02:19 +0000
asID:                     214757
IP address blocks:        2a0a:6044:ac7a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ae:33:cf:ce:f4:06:06:fa:a3:97:9a:dc:eb:62:a1:74:b5:25:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
        Validity
            Not Before: Jun  8 13:57:19 2024 GMT
            Not After : Jun  7 14:02:19 2025 GMT
        Subject: CN=1F42ACB7C696FD748EC9E29D33130F0DB1D447FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f1:c8:bd:a6:61:c0:3f:40:48:c2:26:ac:78:
                    99:bc:d7:36:f5:43:6c:99:89:36:c0:67:40:2a:bd:
                    04:0a:1e:d4:ab:49:da:4e:25:7e:4d:06:2a:78:26:
                    95:e6:de:0d:9f:fb:33:d7:d2:56:26:8d:94:f8:52:
                    dc:92:1e:28:fd:36:2e:66:f5:aa:da:0b:dc:74:96:
                    6e:25:9d:b0:c3:88:70:76:da:34:da:5e:d8:19:5b:
                    16:72:3c:f4:e9:79:4f:bf:0f:5c:97:54:99:6e:0f:
                    a7:2f:f4:cd:97:e4:13:8d:fa:34:81:29:54:da:d5:
                    52:f2:91:fe:b8:ee:98:eb:b8:27:ab:59:59:28:9d:
                    5b:f3:09:5a:d2:f1:5e:c9:d4:94:7e:2d:64:6b:e7:
                    84:38:17:31:d8:cd:66:8d:bd:6f:99:3b:68:5d:74:
                    d5:4f:27:37:46:11:a0:17:89:d7:66:03:84:8c:6f:
                    57:af:d6:3d:04:2a:98:98:4c:fc:87:06:e5:bf:fa:
                    c9:73:75:8f:f7:31:2b:df:79:65:34:ca:03:a1:31:
                    08:7a:fa:8a:86:fb:b0:da:df:dc:70:e2:d6:f0:02:
                    bc:19:96:0a:4b:52:5e:9b:15:83:3b:9f:92:7c:8d:
                    ff:34:6e:35:2c:8e:e5:49:08:b1:74:73:5e:0a:de:
                    11:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:42:AC:B7:C6:96:FD:74:8E:C9:E2:9D:33:13:0F:0D:B1:D4:47:FA
            X509v3 Authority Key Identifier:
                keyid:5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337613a3a2f34382d3438203d3e20323134373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ac7a::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:14:f8:14:72:43:04:d5:90:ed:2e:e0:eb:94:a8:6b:41:c3:
         a8:1c:30:04:2a:79:bd:df:df:25:7d:d4:52:98:0d:e4:e3:64:
         4a:df:39:9b:2a:55:9b:3b:14:39:46:91:fc:7b:04:93:88:73:
         cb:1a:5f:81:08:41:86:cb:b1:63:a8:63:90:d2:ab:dc:44:30:
         8e:79:3d:12:77:da:e0:e3:af:20:9d:bc:f0:37:6a:1f:0d:99:
         15:fb:22:fd:e5:c6:68:ba:95:3c:f3:e4:35:06:e7:90:74:d5:
         18:2a:f9:39:44:1e:0f:7d:76:4d:f1:59:ea:b9:f6:64:91:df:
         7b:7f:7e:7f:2b:77:a6:3d:09:b1:f8:94:b4:92:de:af:f9:9f:
         77:d8:97:13:25:9f:a2:ad:db:80:2a:26:82:8e:88:ba:7b:f8:
         e1:74:5d:59:06:5d:9c:16:cc:2a:9c:cf:77:b1:0d:89:85:23:
         e9:19:49:bf:c5:e0:30:9b:59:57:d8:d4:e9:58:61:0a:ab:ac:
         34:41:f5:66:ac:69:60:bc:6a:a7:e9:50:1c:78:36:0d:a4:87:
         f0:27:26:3b:42:8e:a1:46:c2:b9:87:6b:aa:fe:a4:46:b2:23:
         19:78:32:ac:66:19:ca:8a:5a:9d:bd:2f:5a:5b:37:1d:c5:68:
         db:ca:81:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----