Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337633a3a2f34382d3438203d3e20323134373537.roa
File:                     326130613a363034343a616337633a3a2f34382d3438203d3e20323134373537.roa (raw, json)
Hash identifier:          J1trLqZ0R4nfFksElNVcaeuxac0qAHDB9fiQ05Z/Bqs=
Subject key identifier:   73:4A:E3:C8:9D:6E:8A:51:72:5E:83:42:E2:CF:79:BD:1E:42:6C:19
Certificate issuer:       /CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
Certificate serial:       061E2CBB59CA879BCF8C833E1B9A92D6D938C961
Authority key identifier: 5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337633a3a2f34382d3438203d3e20323134373537.roa
Signing time:             Sat 08 Jun 2024 14:02:33 +0000
ROA not before:           Sat 08 Jun 2024 13:57:33 +0000
ROA not after:            Sat 07 Jun 2025 14:02:33 +0000
asID:                     214757
IP address blocks:        2a0a:6044:ac7c::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:1e:2c:bb:59:ca:87:9b:cf:8c:83:3e:1b:9a:92:d6:d9:38:c9:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
        Validity
            Not Before: Jun  8 13:57:33 2024 GMT
            Not After : Jun  7 14:02:33 2025 GMT
        Subject: CN=734AE3C89D6E8A51725E8342E2CF79BD1E426C19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:da:16:33:d3:74:9b:15:1f:26:8d:b1:9e:02:
                    ed:00:96:11:f6:d6:f3:09:fd:b2:22:3b:29:91:54:
                    56:ae:91:f1:4b:98:11:b9:29:73:2c:5e:3c:68:7d:
                    2e:fb:b3:e5:79:59:04:4b:e7:23:a9:47:f6:50:9a:
                    a6:5d:2b:33:a0:a0:6d:b6:00:2c:dc:52:46:1a:19:
                    93:cd:16:b3:3d:82:60:14:e1:64:d0:7e:0f:42:da:
                    e5:9c:80:78:a0:f0:b3:d1:44:06:40:e0:a6:01:c3:
                    9c:46:d7:fc:34:86:7c:22:e8:54:1d:36:e3:ea:c9:
                    19:a0:ff:1c:68:8a:9b:3d:2b:3e:9e:d6:e5:a9:81:
                    68:56:73:d2:8f:76:ce:40:25:35:5a:9e:7b:05:71:
                    83:8a:7b:52:7a:1d:b6:fc:fd:75:02:12:42:23:64:
                    a8:15:c0:bd:fa:e8:fc:dd:b1:44:6a:63:13:9d:ed:
                    8b:de:e2:7f:62:af:fa:11:f6:07:73:df:6c:1b:cc:
                    70:24:a3:91:64:79:00:5f:91:5c:2c:91:41:80:0b:
                    5d:d5:96:20:88:f8:89:bd:82:84:f2:1b:09:22:86:
                    97:30:a0:9e:16:a1:69:9a:1a:aa:35:b1:61:f5:3f:
                    69:3c:2d:b5:4e:c8:9d:93:9b:ca:a1:fa:92:8d:0d:
                    0d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4A:E3:C8:9D:6E:8A:51:72:5E:83:42:E2:CF:79:BD:1E:42:6C:19
            X509v3 Authority Key Identifier:
                keyid:5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337633a3a2f34382d3438203d3e20323134373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ac7c::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:bc:76:9e:6c:d5:e8:f4:d5:99:34:8c:fc:fe:79:a9:97:11:
         df:35:0c:df:fe:e9:3a:cd:a9:15:22:5e:02:20:c9:61:e9:f6:
         b4:3e:b7:dd:45:55:28:27:c5:96:80:95:4e:be:2b:db:60:53:
         97:44:d4:36:f2:74:64:00:c6:f8:61:78:31:e3:5b:8e:aa:49:
         a3:b7:fe:40:19:c5:8b:ca:06:2d:e8:80:f5:eb:7b:b4:e6:ec:
         77:f1:db:f4:94:47:a6:2d:24:82:3b:dd:73:9b:28:10:a2:bf:
         8b:9c:d9:bb:f6:15:8b:c3:85:c1:52:61:68:b0:2b:ac:6f:e2:
         72:cd:6b:74:17:25:d0:47:8f:fd:ff:8d:10:4e:b2:7c:68:a3:
         1f:7a:8f:5e:06:93:11:d0:56:4d:52:34:d5:30:06:22:8a:02:
         a1:db:28:8e:cf:4c:18:bf:f9:fc:cd:7c:df:d6:d4:09:82:0c:
         1b:e5:11:8d:6a:15:4d:d8:76:81:ae:92:10:f4:74:0f:ee:34:
         9e:07:5e:01:f4:09:19:73:9f:af:ca:33:bb:d2:e3:38:13:a3:
         63:9e:8f:20:e3:4e:f2:eb:89:d5:6a:2a:78:ba:77:2e:b4:ef:
         c9:da:65:68:1c:5f:b9:92:19:d2:7f:22:0e:6d:79:7d:5e:86:
         3c:ed:a7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----