Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/326130613a363034343a363430313a3a2f34382d3438203d3e20323134323233.roa
File:                     326130613a363034343a363430313a3a2f34382d3438203d3e20323134323233.roa (raw, json)
Hash identifier:          9NYGqo2Ls6hbV6+1P7vXYDKtF8hmmGEM+wvhFByd8+4=
Subject key identifier:   C3:92:14:1C:9D:E2:5A:5A:D7:CF:21:1F:C3:01:8B:1F:09:BB:4E:81
Certificate issuer:       /CN=ED0B8AE03D6250D59EF8E7BE556D94EB49415429
Certificate serial:       1E989C4A4163AD24888E48E5E40830BDB0B09346
Authority key identifier: ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/326130613a363034343a363430313a3a2f34382d3438203d3e20323134323233.roa
Signing time:             Sun 06 Apr 2025 16:08:59 +0000
ROA not before:           Sun 06 Apr 2025 16:03:59 +0000
ROA not after:            Sun 05 Apr 2026 16:08:59 +0000
asID:                     214223
IP address blocks:        2a0a:6044:6401::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:98:9c:4a:41:63:ad:24:88:8e:48:e5:e4:08:30:bd:b0:b0:93:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED0B8AE03D6250D59EF8E7BE556D94EB49415429
        Validity
            Not Before: Apr  6 16:03:59 2025 GMT
            Not After : Apr  5 16:08:59 2026 GMT
        Subject: CN=C392141C9DE25A5AD7CF211FC3018B1F09BB4E81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:04:c1:ce:6c:76:27:5c:ac:ac:9a:be:23:a1:
                    32:87:16:0b:47:32:ac:8a:67:b9:54:a6:4e:4e:1b:
                    4c:5a:77:1f:9e:ac:97:de:b6:71:b7:be:29:65:41:
                    4a:7d:08:14:d0:82:8f:f0:50:54:5b:11:9d:fa:f5:
                    a6:77:ed:c9:be:95:eb:2b:74:d2:8e:97:b3:36:86:
                    aa:05:60:6a:ac:70:11:3e:0c:42:45:d2:f2:83:8a:
                    fd:38:fe:8d:65:70:2f:e4:88:dc:77:17:af:ae:e7:
                    01:ca:2a:b5:dc:88:38:99:ea:83:fb:6a:1e:8c:fd:
                    dd:5f:93:f6:c6:9d:19:03:1e:9f:a1:6f:5b:59:8b:
                    05:8d:a9:fc:0c:21:a4:3e:8c:82:08:7b:24:92:af:
                    37:9b:27:9b:c5:87:62:a3:8a:d1:48:43:f0:28:34:
                    de:a9:2c:5c:d9:3e:ef:88:7c:1f:24:a8:84:2f:2e:
                    0e:df:68:1e:aa:02:e5:11:18:9f:7b:62:c0:86:ab:
                    46:ae:66:ed:0d:7b:5c:cc:ff:a3:91:03:02:c4:9d:
                    e7:4a:ab:3a:eb:f1:3a:0f:57:f1:7f:ec:2d:97:e4:
                    1c:cf:53:71:15:33:22:09:47:c9:a8:b0:da:1b:4c:
                    99:f9:69:5f:35:80:fa:5f:c7:c4:5c:76:20:b3:18:
                    f8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:92:14:1C:9D:E2:5A:5A:D7:CF:21:1F:C3:01:8B:1F:09:BB:4E:81
            X509v3 Authority Key Identifier:
                keyid:ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/326130613a363034343a363430313a3a2f34382d3438203d3e20323134323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:6401::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:b6:40:a4:b2:a1:d3:d1:1a:91:e6:8b:65:29:90:9d:79:97:
         d6:8c:66:58:71:d7:37:79:fd:07:bb:e6:d1:fa:76:fa:bd:8d:
         06:24:04:c5:34:80:58:06:24:b4:be:25:b7:58:37:fb:eb:c3:
         9c:73:32:b8:b9:ee:0a:41:4d:4b:9e:72:52:f8:4e:e7:39:c4:
         e1:32:7c:17:e1:b4:c1:7f:2a:07:8b:cc:0d:f0:f4:f9:0f:48:
         09:2a:78:53:68:66:ff:4c:65:b5:10:29:23:22:10:9b:0c:23:
         bd:b0:90:6a:b8:aa:f4:e8:ce:1b:75:65:68:c1:70:54:43:ee:
         5e:81:ba:31:a9:55:f1:f9:f6:18:7e:e0:3b:d4:46:2c:bf:ce:
         69:b9:53:3c:0a:34:d5:5b:37:a3:40:30:48:59:ee:55:88:ef:
         ea:75:f8:fe:09:80:ae:e6:75:fb:25:f9:a5:91:ba:5f:72:46:
         13:7a:b8:50:e5:5f:3a:eb:e7:77:21:d5:83:09:be:38:5b:9f:
         47:8a:3a:ae:86:2a:92:e5:59:d3:6f:90:14:5e:ce:f6:fe:69:
         dc:50:30:a3:74:50:97:e4:10:67:ba:e4:0e:57:f2:df:ee:a8:
         55:1e:dc:bc:95:4e:d6:4b:34:c9:6a:c8:27:8a:35:c8:4a:af:
         8d:1d:67:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----