Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0ecedb9d-2891-4374-b608-bffeb63513c9/1/326130363a396634343a663030303a3a2f33362d3437203d3e20313530323439.roa
File:                     326130363a396634343a663030303a3a2f33362d3437203d3e20313530323439.roa (raw, json)
Hash identifier:          4dxP3F8+OHqENsIZn2+Bzq/djaApbUCiVqGtu+j82UA=
Subject key identifier:   7E:9E:A3:1A:85:53:93:52:42:CC:7E:C1:57:5A:43:8F:DC:8B:6E:CA
Certificate issuer:       /CN=B72956867F19F825FD8FD7FBC976E87C1A97B5A5
Certificate serial:       2ED4633651E0BB71069E048D8CCF3530B0D4B27F
Authority key identifier: B7:29:56:86:7F:19:F8:25:FD:8F:D7:FB:C9:76:E8:7C:1A:97:B5:A5
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B72956867F19F825FD8FD7FBC976E87C1A97B5A5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0ecedb9d-2891-4374-b608-bffeb63513c9/1/326130363a396634343a663030303a3a2f33362d3437203d3e20313530323439.roa
Signing time:             Tue 28 Nov 2023 23:00:37 +0000
ROA not before:           Tue 28 Nov 2023 22:55:37 +0000
ROA not after:            Tue 26 Nov 2024 23:00:37 +0000
asID:                     150249
IP address blocks:        2a06:9f44:f000::/36 maxlen: 47
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:d4:63:36:51:e0:bb:71:06:9e:04:8d:8c:cf:35:30:b0:d4:b2:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B72956867F19F825FD8FD7FBC976E87C1A97B5A5
        Validity
            Not Before: Nov 28 22:55:37 2023 GMT
            Not After : Nov 26 23:00:37 2024 GMT
        Subject: CN=7E9EA31A8553935242CC7EC1575A438FDC8B6ECA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b5:44:66:72:16:b4:a3:43:09:61:12:c2:9a:
                    73:30:38:48:ab:26:a8:72:2c:87:d8:96:15:a3:fb:
                    8e:7b:bd:71:09:c2:ef:02:fd:8e:42:5b:5c:40:2c:
                    10:f6:ec:c9:43:9c:9e:40:d2:b1:46:a2:aa:1c:27:
                    0e:33:e4:24:cb:75:9e:fa:3d:7d:84:69:19:5b:bd:
                    60:93:df:f7:4b:d1:6b:0a:9d:d6:03:93:6b:59:13:
                    c2:cf:b9:1e:c7:97:41:7d:1b:60:d2:e8:55:44:6f:
                    46:f4:18:ff:8b:fd:8c:41:75:d4:25:d1:e3:78:c1:
                    5e:3b:35:53:50:54:f7:1d:17:b0:24:68:bd:f5:25:
                    ac:e3:33:26:af:60:07:6e:96:f3:05:68:93:3a:70:
                    11:be:69:ba:95:45:b5:20:3b:dd:4e:f0:83:79:d1:
                    09:9e:a9:eb:77:17:91:0e:70:43:bc:da:79:14:a2:
                    58:68:21:72:5b:46:de:2b:40:17:f7:17:68:27:2c:
                    04:04:2c:e6:71:08:ec:5f:ed:6f:9c:ca:99:01:37:
                    f1:fa:4a:72:d5:34:b5:07:3d:26:69:83:ee:ce:b5:
                    59:57:9c:24:b6:49:23:d3:e5:20:dc:20:6c:5d:bd:
                    85:39:dc:5d:f3:88:e3:d4:22:87:6e:26:ac:2c:b0:
                    55:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9E:A3:1A:85:53:93:52:42:CC:7E:C1:57:5A:43:8F:DC:8B:6E:CA
            X509v3 Authority Key Identifier:
                keyid:B7:29:56:86:7F:19:F8:25:FD:8F:D7:FB:C9:76:E8:7C:1A:97:B5:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0ecedb9d-2891-4374-b608-bffeb63513c9/1/B72956867F19F825FD8FD7FBC976E87C1A97B5A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B72956867F19F825FD8FD7FBC976E87C1A97B5A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0ecedb9d-2891-4374-b608-bffeb63513c9/1/326130363a396634343a663030303a3a2f33362d3437203d3e20313530323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f44:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         67:24:8b:23:08:3c:da:5a:56:e4:aa:73:1e:f2:06:e6:46:c2:
         7f:aa:32:ab:9a:45:c0:c8:bf:b5:b5:19:bd:82:2a:b2:0e:e9:
         9d:1d:8d:11:d5:b8:33:d5:53:a2:05:43:79:50:b9:ad:4f:29:
         63:2d:0a:aa:87:94:03:4b:e9:aa:5a:4a:92:91:35:40:d2:06:
         1d:c8:13:ee:40:9d:62:28:56:f3:bc:6e:44:38:d7:68:6d:af:
         25:84:f7:ef:a9:5a:13:5b:69:80:bd:d1:a5:53:be:5d:75:4d:
         cb:4d:d6:a2:0e:64:fa:8a:3e:24:5b:43:98:ac:76:8f:93:a0:
         65:35:49:79:6c:50:62:c5:f9:34:93:74:ab:ab:be:30:db:81:
         fb:c1:5a:6c:e2:3b:52:53:77:5a:27:78:84:7a:48:0c:c6:4f:
         74:9d:f6:ff:73:61:b0:50:51:0f:7c:34:c6:0e:f9:17:21:50:
         81:c2:cc:1e:b5:17:53:9e:09:9f:89:9f:ea:d6:72:b6:4d:b2:
         09:2a:26:3d:d9:5d:32:ef:7f:2d:8b:c3:18:c8:fd:88:ae:34:
         db:25:69:4e:4e:eb:06:c8:2f:ea:76:19:bb:65:8f:3c:7d:04:
         6f:b1:3d:df:ab:02:0b:61:59:e3:d4:d9:c8:fc:6c:7e:6d:64:
         63:a1:9d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----