Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a386230343a3a2f34382d313238203d3e20323136323936.roa
File:                     326130363a313238333a386230343a3a2f34382d313238203d3e20323136323936.roa (raw, json)
Hash identifier:          hRJAy8rfYMb9fIetyL4Aovif4w62DytXdeUN5J+59g8=
Subject key identifier:   A7:F2:D3:16:D4:0B:78:78:EB:6C:03:68:7A:E7:16:C1:D8:2E:EE:DB
Certificate issuer:       /CN=B6366F3DD14AC5399103961C30642E6779892C6C
Certificate serial:       76D82503CA0AAE08BD4D6C4DF0749F23687657B1
Authority key identifier: B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a386230343a3a2f34382d313238203d3e20323136323936.roa
Signing time:             Tue 24 Jun 2025 13:57:50 +0000
ROA not before:           Tue 24 Jun 2025 13:52:50 +0000
ROA not after:            Tue 23 Jun 2026 13:57:50 +0000
asID:                     216296
IP address blocks:        2a06:1283:8b04::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d8:25:03:ca:0a:ae:08:bd:4d:6c:4d:f0:74:9f:23:68:76:57:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6366F3DD14AC5399103961C30642E6779892C6C
        Validity
            Not Before: Jun 24 13:52:50 2025 GMT
            Not After : Jun 23 13:57:50 2026 GMT
        Subject: CN=A7F2D316D40B7878EB6C03687AE716C1D82EEEDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:be:73:ab:69:18:cf:47:f2:21:00:a3:84:3e:
                    8e:3b:17:0a:1b:c6:42:55:5f:1b:2f:4d:9d:d4:b5:
                    8e:8a:5a:db:2d:76:59:12:28:62:52:3e:49:ea:61:
                    85:2e:4d:f6:d1:1f:cd:94:2f:73:6f:e3:c0:0c:bc:
                    24:54:22:02:ca:a9:58:f5:1a:ab:8a:a9:83:84:0c:
                    b2:4c:22:19:5b:65:fc:78:fc:d0:f9:a1:28:c3:90:
                    36:f8:2a:e6:b6:27:f8:92:51:10:dd:d3:bd:1d:28:
                    80:87:0b:ea:d0:b6:3d:ee:c4:33:77:83:df:45:11:
                    8b:93:cb:88:cc:89:17:76:8c:7c:ed:a3:c3:1a:3b:
                    2c:a4:0a:ee:2c:33:e4:fd:cc:73:fc:83:6d:94:44:
                    22:7c:72:3d:27:0e:64:56:01:d0:b6:8c:b5:10:e5:
                    97:bd:9a:db:59:96:8c:15:c3:25:f6:dc:ff:39:f7:
                    14:09:d5:40:62:f1:c7:fc:e9:f4:ba:aa:f2:10:3b:
                    60:6c:be:24:de:5f:cb:8e:f5:1f:57:26:e6:e2:dd:
                    0a:fa:84:5d:db:52:97:9f:0d:61:e0:b7:32:3f:b9:
                    7e:da:b1:bc:bf:c0:cb:14:68:57:3c:ab:37:1e:65:
                    b7:48:2d:ae:dd:d8:02:52:0b:dc:8a:05:e6:ac:2c:
                    80:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F2:D3:16:D4:0B:78:78:EB:6C:03:68:7A:E7:16:C1:D8:2E:EE:DB
            X509v3 Authority Key Identifier:
                keyid:B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a386230343a3a2f34382d313238203d3e20323136323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:8b04::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:a6:cc:a8:1d:9d:9a:c3:84:f3:12:63:4a:c1:30:5e:95:ea:
         57:c2:df:85:b5:c6:50:08:34:fa:b1:e3:0d:08:5e:68:cb:2a:
         c4:ef:48:87:da:a7:14:ac:6a:de:58:54:85:8e:f9:17:35:5d:
         91:f1:5d:8b:75:bc:47:51:d3:89:9c:06:ee:eb:57:7f:5e:a0:
         39:5f:43:27:c3:53:11:7b:66:7a:42:ae:2e:ef:0f:90:95:98:
         07:50:91:27:8b:7d:b5:cc:05:a9:6c:52:27:56:38:ce:57:65:
         a1:2a:15:2d:48:c4:f2:34:56:c4:a2:7a:eb:f5:c2:19:22:98:
         9b:d7:78:54:81:17:40:ea:ad:8f:58:13:31:50:79:3d:8a:c6:
         7c:fd:75:39:71:cf:33:36:e9:c8:0b:17:ae:e1:f5:74:bd:44:
         5e:0a:47:e4:5e:08:a6:05:f2:94:48:7f:29:7c:d0:57:28:09:
         2d:b6:2a:28:a0:15:dd:80:09:98:d6:01:7d:39:83:ab:8d:35:
         3d:89:10:d9:1e:e8:c6:41:f1:3f:aa:70:0d:48:62:8e:4d:3a:
         84:9e:85:06:86:a1:09:27:9f:3a:31:ed:36:fc:e5:25:5d:f3:
         da:24:ba:5a:3f:85:0c:f9:e3:72:cc:e0:7a:be:98:3e:21:fc:
         80:82:37:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----