Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/326131343a373538343a343030303a3a2f33362d3438203d3e2036353137.roa
File:                     326131343a373538343a343030303a3a2f33362d3438203d3e2036353137.roa (raw, json)
Hash identifier:          nIC6lswk91hjl6KPMQ+RZfHgO+0KGr/fDFoPo3gap1k=
Subject key identifier:   10:2C:D8:BC:B8:83:8B:E3:4D:B6:B2:37:9E:46:C0:D8:5B:8A:DA:34
Certificate issuer:       /CN=3A3BE14D0868E39E43E27B585676DF5B82A122E3
Certificate serial:       0EF8ED20B31DCDB5CF9BCB4FB1B8001D96EEE3DC
Authority key identifier: 3A:3B:E1:4D:08:68:E3:9E:43:E2:7B:58:56:76:DF:5B:82:A1:22:E3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/3A3BE14D0868E39E43E27B585676DF5B82A122E3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/326131343a373538343a343030303a3a2f33362d3438203d3e2036353137.roa
Signing time:             Sat 01 Mar 2025 17:42:57 +0000
ROA not before:           Sat 01 Mar 2025 17:37:57 +0000
ROA not after:            Sat 28 Feb 2026 17:42:57 +0000
asID:                     6517
IP address blocks:        2a14:7584:4000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f8:ed:20:b3:1d:cd:b5:cf:9b:cb:4f:b1:b8:00:1d:96:ee:e3:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A3BE14D0868E39E43E27B585676DF5B82A122E3
        Validity
            Not Before: Mar  1 17:37:57 2025 GMT
            Not After : Feb 28 17:42:57 2026 GMT
        Subject: CN=102CD8BCB8838BE34DB6B2379E46C0D85B8ADA34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:74:6b:36:91:82:13:af:9f:be:23:98:b1:a3:
                    d1:0e:9d:23:d2:4b:d0:fa:48:a6:de:44:c7:2f:08:
                    93:f6:a4:36:4c:d2:c5:56:6b:9e:68:9c:22:3f:86:
                    55:ca:8d:62:7c:df:2b:45:e8:75:b1:a5:89:c7:6e:
                    09:34:b5:48:4b:19:de:f7:6e:c9:a3:00:06:f7:f5:
                    5a:dc:20:53:34:59:44:86:3f:ca:a2:9d:5a:a1:47:
                    7b:b8:97:eb:e2:78:1f:71:f0:f5:dc:4f:6d:cd:07:
                    d9:b2:7d:03:e2:c7:e9:68:66:0f:56:cc:06:91:bd:
                    14:b1:38:b8:59:8c:a0:9b:64:30:d6:19:54:0c:39:
                    76:f4:48:f3:17:d2:8e:4b:b9:c7:2b:83:be:61:47:
                    23:82:9e:88:b8:ce:ed:bd:cd:91:ba:97:bd:15:13:
                    6a:90:1b:08:6c:2c:4e:cc:70:79:c3:c9:6a:86:22:
                    d4:4c:38:aa:3a:f9:f5:61:44:a4:b6:a9:e5:95:cf:
                    5f:27:54:40:40:3d:07:55:9f:cb:0c:93:ee:eb:da:
                    11:cd:4e:7f:e3:b0:a5:ed:8f:f7:b2:4f:7e:e1:64:
                    de:1d:3f:b3:af:fc:04:26:87:40:26:78:12:44:86:
                    f8:54:f7:99:e1:74:d0:6c:b6:30:dc:af:6b:71:9a:
                    01:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2C:D8:BC:B8:83:8B:E3:4D:B6:B2:37:9E:46:C0:D8:5B:8A:DA:34
            X509v3 Authority Key Identifier:
                keyid:3A:3B:E1:4D:08:68:E3:9E:43:E2:7B:58:56:76:DF:5B:82:A1:22:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/3A3BE14D0868E39E43E27B585676DF5B82A122E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/326131343a373538343a343030303a3a2f33362d3438203d3e2036353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         28:71:88:5a:8c:28:fd:42:b7:34:a4:85:17:f6:d5:6f:60:c1:
         47:8e:ce:11:8e:e8:ac:18:4b:72:f9:92:d7:b7:9e:5a:a1:ab:
         f0:a4:b1:fd:a8:5d:a6:9b:de:f3:5f:2e:80:ad:49:91:9e:ad:
         f7:88:2b:05:4e:7f:26:02:7b:1d:dd:52:b8:15:25:bc:09:7a:
         08:f2:45:e4:c9:d3:df:eb:7c:09:33:cd:d6:77:4b:b5:9d:ab:
         6b:32:b8:c8:0b:cb:32:bb:39:9f:cc:1b:65:fc:37:1c:97:fa:
         c4:43:fa:83:3f:31:ac:fd:8c:a0:5a:71:57:28:d4:b4:1b:98:
         05:0d:1d:2b:9e:d5:44:3f:ee:81:42:95:11:98:d7:b5:e6:6b:
         67:76:93:5b:75:8b:66:be:61:cf:a4:3c:e4:31:92:6d:ca:f2:
         33:f5:24:69:1e:39:f6:fd:cf:6d:4e:88:5b:97:0e:a9:c9:8b:
         e1:7f:7b:79:b5:fd:ff:0d:2e:fd:d1:0f:ac:8e:96:81:0a:07:
         76:de:d5:42:96:d5:43:b1:a8:11:b1:e0:ba:38:43:78:62:70:
         87:90:ad:2e:09:d3:50:88:31:97:f7:5a:1b:23:20:27:32:59:
         91:b1:37:99:16:c0:5a:c7:c7:8a:c9:ba:98:e4:87:19:0b:77:
         97:22:3c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----