Route Origin Authorization

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa
File:                     326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa (raw, json)
Hash identifier:          MohLLX8Sy/zW2nWkcZiofRJsITCqYsBthAW1Nb7L2Hw=
Subject key identifier:   33:6D:6C:9C:54:7E:E0:23:74:F3:2B:4C:66:0A:7C:7D:2B:C8:46:9E
Certificate issuer:       /CN=BBED14E9793905EC1EA5CE10AA03C497D737B115
Certificate serial:       48D06D71F75B9F7E2A19316500F1843EF743FF95
Authority key identifier: BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa
Signing time:             Sun 07 Jul 2024 19:08:46 +0000
ROA not before:           Sun 07 Jul 2024 19:03:46 +0000
ROA not after:            Sun 06 Jul 2025 19:08:46 +0000
asID:                     205589
IP address blocks:        2a11:f2c0:ffc0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d0:6d:71:f7:5b:9f:7e:2a:19:31:65:00:f1:84:3e:f7:43:ff:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBED14E9793905EC1EA5CE10AA03C497D737B115
        Validity
            Not Before: Jul  7 19:03:46 2024 GMT
            Not After : Jul  6 19:08:46 2025 GMT
        Subject: CN=336D6C9C547EE02374F32B4C660A7C7D2BC8469E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3e:4d:a5:2c:bb:df:65:5d:06:5b:e3:a2:ad:
                    23:83:41:c9:b4:d3:b9:37:45:fe:8f:ec:06:a7:2a:
                    54:3f:ff:1f:a8:de:9d:e2:62:bf:02:39:c9:06:fe:
                    31:3f:a4:48:2c:82:ab:53:99:98:3d:c8:03:c8:1f:
                    04:6b:05:76:f5:91:2f:40:a3:f5:5a:24:80:9f:4b:
                    08:b9:07:34:cb:91:4e:97:fa:7a:41:90:2d:fc:de:
                    e0:e4:aa:ef:b8:d3:54:36:07:04:ec:80:af:be:9e:
                    81:ac:88:d1:43:50:24:78:af:36:b0:8a:04:04:39:
                    86:46:45:8e:b2:6a:46:bb:1b:72:8d:bd:8b:9e:d6:
                    e9:fd:ba:e2:a0:db:bf:6a:f7:ba:ce:cb:52:24:69:
                    42:62:04:14:71:db:ac:d1:05:4a:73:7b:d3:e6:36:
                    9c:92:e9:01:a3:e1:7d:33:33:13:dd:65:01:73:42:
                    d0:40:9b:51:39:37:6c:95:6f:a8:29:6e:ed:32:8e:
                    75:b5:0b:3e:0c:09:c4:23:11:03:42:41:66:dd:ec:
                    c8:b3:81:7c:39:68:fa:09:9e:e4:71:6a:ec:52:35:
                    06:96:c2:90:e7:2e:c1:12:14:e9:23:bd:8e:ed:ea:
                    2a:87:55:f5:10:b8:8a:11:9e:44:3b:62:8c:ca:35:
                    3e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6D:6C:9C:54:7E:E0:23:74:F3:2B:4C:66:0A:7C:7D:2B:C8:46:9E
            X509v3 Authority Key Identifier:
                keyid:BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:ffc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         c2:ee:f7:16:e0:78:f6:98:9b:1b:66:88:7b:2a:9f:09:87:ee:
         a3:70:06:e2:85:33:85:ae:98:c9:6a:53:09:93:4c:e6:a0:6c:
         e3:fe:6f:7f:4d:69:a6:7d:bd:63:c3:19:fa:57:b1:40:7c:c3:
         08:2b:85:6e:eb:4d:3f:c1:58:45:31:6a:cf:fe:7b:01:04:c6:
         da:c2:72:06:ca:04:ce:df:e3:2b:d8:86:e9:71:ad:16:56:01:
         8c:10:1c:b7:86:50:b9:05:20:99:79:81:e6:2b:40:2d:d0:8e:
         4b:13:e9:ed:ba:71:c6:b5:c6:9c:0d:68:de:2f:cc:9b:ba:d5:
         ee:35:44:37:89:f7:e1:81:97:26:d3:7c:d9:fd:01:9e:0b:9e:
         b5:20:a7:1c:c7:5d:84:55:17:73:ad:70:6e:cf:2d:18:79:a4:
         f9:65:fa:96:75:85:ef:4d:00:a7:11:91:5a:44:ab:f7:55:61:
         58:a7:04:7c:e0:bb:a0:55:6c:41:b3:6e:ad:fb:c1:47:9e:cf:
         9b:9b:66:72:3f:73:e7:be:bf:f5:ed:b6:7b:4c:7f:e2:b5:32:
         61:71:6f:70:5e:db:12:15:60:99:9c:4d:ca:ad:e0:37:02:13:
         85:90:4e:ad:a5:38:72:61:25:e6:1c:1e:a1:cc:f5:e9:af:a1:
         fc:b1:1f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----