Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a653430303a3a2f33322d3332203d3e203530353830.roa
File:                     326131333a653430303a3a2f33322d3332203d3e203530353830.roa (raw, json)
Hash identifier:          rFtvfsVQHKCdQAqKZM/z0xrzFdBj+H8lvhfwWrdW4dw=
Subject key identifier:   E8:79:32:51:94:AC:50:24:B6:24:4A:2F:59:47:24:18:0E:D9:15:88
Certificate issuer:       /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial:       777CEA8C0FC56DF1A13E71EB3F98080327BF9DAE
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a653430303a3a2f33322d3332203d3e203530353830.roa
Signing time:             Mon 10 Mar 2025 18:37:49 +0000
ROA not before:           Mon 10 Mar 2025 18:32:49 +0000
ROA not after:            Mon 09 Mar 2026 18:37:49 +0000
asID:                     50580
IP address blocks:        2a13:e400::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:7c:ea:8c:0f:c5:6d:f1:a1:3e:71:eb:3f:98:08:03:27:bf:9d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
        Validity
            Not Before: Mar 10 18:32:49 2025 GMT
            Not After : Mar  9 18:37:49 2026 GMT
        Subject: CN=E879325194AC5024B6244A2F594724180ED91588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:32:1f:07:9e:50:b1:02:8f:4b:d1:f2:6e:ba:
                    85:e9:03:b5:57:03:19:ce:1d:e0:58:9b:c5:5e:92:
                    d0:04:94:77:50:09:39:7b:e1:01:82:1a:e3:04:29:
                    05:31:13:4c:e5:5e:40:09:b0:0f:3e:cb:b0:cf:ee:
                    3c:3d:41:d1:d8:43:89:c8:36:f1:54:2c:ab:a9:2f:
                    e6:0a:54:3d:f6:b2:ab:bc:a2:25:7d:98:64:50:58:
                    bd:02:51:3a:14:6d:94:86:29:01:d6:1b:e9:6a:13:
                    85:3c:b0:81:17:7b:9a:3b:62:4e:9c:77:f7:3a:6a:
                    f0:3f:15:05:e0:97:4f:2f:ed:ce:6d:25:46:b3:5d:
                    20:3a:74:e8:1f:a6:83:08:7e:7f:f5:89:0a:a8:e4:
                    8c:1c:41:88:70:96:68:35:48:cb:31:04:76:a1:ce:
                    5d:65:d1:04:f7:50:f6:65:7a:ae:ec:c4:c2:a7:bd:
                    e5:2f:b5:62:8c:1e:3e:b4:1c:70:66:5d:74:4e:7c:
                    84:4d:7c:c0:50:31:72:24:40:b4:f5:dc:5c:05:de:
                    89:4f:75:42:c5:32:a3:35:fc:e6:a2:26:3d:fc:9e:
                    91:ad:b1:96:fa:d9:c1:2c:e7:d8:1d:42:59:7b:16:
                    4b:ba:1e:3a:89:d0:66:8e:b7:b3:0f:fd:21:70:a9:
                    41:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:79:32:51:94:AC:50:24:B6:24:4A:2F:59:47:24:18:0E:D9:15:88
            X509v3 Authority Key Identifier:
                keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a653430303a3a2f33322d3332203d3e203530353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:e400::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:cf:1a:0e:bd:4b:78:7e:2a:64:28:3a:bd:78:ba:47:f6:f5:
         f7:e8:df:63:04:5d:c4:29:65:a4:05:8b:e8:74:43:41:16:0d:
         ed:34:d0:be:cf:4c:9a:c1:be:e6:80:56:d9:6c:77:87:86:4f:
         85:0f:31:77:e5:c5:3b:c0:b0:6b:d0:89:ef:25:0c:b8:e9:a9:
         9d:e8:72:2d:02:4e:90:b1:80:d0:ad:c7:29:ce:f1:b5:e1:c8:
         db:8e:74:b5:e2:d4:bb:cd:47:29:ed:d1:e3:cc:a0:b2:c9:9e:
         84:98:0e:09:37:16:06:87:48:5e:d6:75:f6:48:f9:cf:f4:98:
         64:82:1b:b7:20:ed:9a:d0:b0:c4:4a:77:e7:3a:62:e8:3a:43:
         48:49:b8:d0:82:b3:b1:e3:67:75:9f:a8:dd:0e:3d:e1:81:82:
         32:f2:3e:95:be:3b:bc:4a:7c:8c:9b:2f:97:9b:12:0a:84:64:
         bf:6f:e9:66:7a:37:d0:5c:15:09:f6:53:c1:07:92:12:2a:8b:
         a0:06:49:24:48:a4:cc:e9:ae:da:fa:7b:32:cc:c1:7a:32:d8:
         cb:72:cf:d2:07:5d:d2:c2:a2:53:fc:41:16:fb:e6:5d:ef:aa:
         bc:67:9d:f7:8f:4c:ab:83:99:c5:5c:be:e2:2a:26:f3:9c:a4:
         41:47:f0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----