Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a386330303a3a2f34302d3438203d3e20323131303636.roa
File:                     326130363a313238333a386330303a3a2f34302d3438203d3e20323131303636.roa (raw, json)
Hash identifier:          Fozivs5VK4pgLoGEsqoGlUwV1cuRecwfPaBUsSrDB4Y=
Subject key identifier:   41:C1:C2:CC:75:C2:00:C2:E0:4A:C0:5F:41:CA:8C:F0:19:A5:07:D3
Certificate issuer:       /CN=B6366F3DD14AC5399103961C30642E6779892C6C
Certificate serial:       6D640227D4BF8057102FD6EACABB7DDDF7C6E979
Authority key identifier: B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a386330303a3a2f34302d3438203d3e20323131303636.roa
Signing time:             Wed 02 Apr 2025 19:35:22 +0000
ROA not before:           Wed 02 Apr 2025 19:30:22 +0000
ROA not after:            Wed 01 Apr 2026 19:35:22 +0000
asID:                     211066
IP address blocks:        2a06:1283:8c00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:64:02:27:d4:bf:80:57:10:2f:d6:ea:ca:bb:7d:dd:f7:c6:e9:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6366F3DD14AC5399103961C30642E6779892C6C
        Validity
            Not Before: Apr  2 19:30:22 2025 GMT
            Not After : Apr  1 19:35:22 2026 GMT
        Subject: CN=41C1C2CC75C200C2E04AC05F41CA8CF019A507D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a7:5b:18:f4:fd:47:92:ba:df:c4:e1:46:f5:
                    8b:1d:8c:72:77:11:bc:12:44:e3:8d:fd:33:b1:f5:
                    63:21:7b:c8:e2:03:83:b0:de:12:e4:90:85:d1:f9:
                    fd:de:b2:71:69:b6:19:84:5c:21:bb:89:9a:d4:90:
                    32:f5:14:59:40:93:9e:6d:1e:07:50:18:bf:0c:31:
                    37:6d:1f:f5:a7:c0:78:94:14:64:13:ba:b2:51:c0:
                    b0:d5:c2:13:1b:09:54:be:3f:49:65:fd:bc:d2:74:
                    64:bb:3b:15:16:4b:f6:e1:92:08:5f:79:bc:3e:a6:
                    78:d1:d0:96:f4:3d:a2:ff:1c:8d:2a:37:a4:a7:d2:
                    2f:98:6b:26:7b:e4:bf:5f:18:25:a6:da:44:b8:28:
                    40:97:6a:c1:47:70:a9:9b:6d:55:40:09:70:29:82:
                    c0:5b:a8:05:de:8d:83:5d:7e:28:23:03:9e:e4:8b:
                    9a:17:76:a2:5e:78:5e:1f:88:7e:c4:ed:da:4d:7d:
                    30:70:94:05:73:70:43:d6:6e:f9:dd:4b:98:34:97:
                    ba:e7:31:fb:27:21:c8:37:ad:c8:7d:e9:27:c6:d8:
                    12:f7:05:84:b6:68:48:3e:ad:be:ed:81:21:05:4b:
                    d6:78:b1:44:92:fe:1f:d6:dc:ea:51:50:51:9f:20:
                    9f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C1:C2:CC:75:C2:00:C2:E0:4A:C0:5F:41:CA:8C:F0:19:A5:07:D3
            X509v3 Authority Key Identifier:
                keyid:B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a386330303a3a2f34302d3438203d3e20323131303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:8c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         37:34:16:f6:a7:4b:d0:27:9c:21:38:e4:60:b6:d5:1d:33:03:
         9d:bf:76:5f:f9:77:1d:73:b7:3e:4f:ea:ef:c9:8f:85:ea:0b:
         c5:d3:a0:86:da:d9:c2:5f:9e:6e:42:30:e4:24:04:95:ca:ee:
         e3:3e:c6:97:dc:40:5b:d1:8b:b0:84:b9:7c:64:e0:b9:d7:29:
         83:bb:ae:e5:19:1b:e7:45:67:6a:99:02:0d:d5:5d:d9:9c:53:
         01:db:49:c9:0c:ba:a3:97:cf:0e:10:c0:9d:49:a1:03:5c:d1:
         18:61:82:00:7c:76:cf:42:58:9c:f8:16:d1:d1:f6:f9:a5:3a:
         2a:c9:fe:90:1b:a3:fa:34:0a:7d:d2:bf:1d:c6:6d:a4:6a:53:
         39:76:11:e0:3a:e6:b9:ed:94:24:da:04:de:70:60:e9:2f:11:
         13:f5:4a:1c:40:88:fd:97:53:54:12:f3:7e:11:59:8e:2d:8d:
         a4:b6:b3:96:46:5e:3f:13:a2:98:b8:7d:81:85:2d:e9:ac:43:
         7c:93:1e:18:2a:da:b3:2e:b8:07:08:a8:22:f4:69:0e:95:7d:
         36:76:18:c7:55:ac:ae:10:b4:8f:8d:54:18:0a:d7:5d:c5:ae:
         f4:6f:04:ff:d0:66:0d:b2:bc:fb:7e:72:37:89:16:5d:b0:89:
         0a:0d:6b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----