Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a386430303a3a2f34302d3438203d3e20323131303636.roa
File:                     326130363a313238333a386430303a3a2f34302d3438203d3e20323131303636.roa (raw, json)
Hash identifier:          viX/3SQM4nfUuWRAgbcq7qnkCzLamDSQbyAAFuwSt0E=
Subject key identifier:   66:73:E4:9B:16:21:53:67:0B:C9:B6:6A:74:BB:AC:24:D8:5D:49:F9
Certificate issuer:       /CN=B6366F3DD14AC5399103961C30642E6779892C6C
Certificate serial:       335619AF0850CAF47AAE265ECFFB8B727700B245
Authority key identifier: B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a386430303a3a2f34302d3438203d3e20323131303636.roa
Signing time:             Wed 02 Apr 2025 19:35:01 +0000
ROA not before:           Wed 02 Apr 2025 19:30:01 +0000
ROA not after:            Wed 01 Apr 2026 19:35:01 +0000
asID:                     211066
IP address blocks:        2a06:1283:8d00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:56:19:af:08:50:ca:f4:7a:ae:26:5e:cf:fb:8b:72:77:00:b2:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6366F3DD14AC5399103961C30642E6779892C6C
        Validity
            Not Before: Apr  2 19:30:01 2025 GMT
            Not After : Apr  1 19:35:01 2026 GMT
        Subject: CN=6673E49B162153670BC9B66A74BBAC24D85D49F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:74:b0:c5:ca:01:8a:ef:03:45:5b:86:9d:42:
                    de:0d:d2:a1:b2:20:4c:22:a0:a5:32:88:82:63:4c:
                    15:14:b2:e3:38:a2:ed:81:ea:03:2b:3f:71:8e:3f:
                    42:4c:a4:41:d8:67:ab:ed:8b:38:65:33:11:c1:1b:
                    0e:07:e2:a9:1f:50:b6:de:5a:12:d1:ee:68:e6:03:
                    0f:eb:ba:ad:6e:53:58:89:55:fa:ae:2e:96:f4:fd:
                    c2:16:f1:26:ed:af:82:a8:df:ac:18:c8:55:ad:cc:
                    30:81:fe:6e:8c:f6:a4:4c:c2:97:ff:1b:5d:85:62:
                    ee:ab:04:1f:8f:18:ba:bf:e7:ea:89:2e:5f:74:01:
                    ec:79:ea:e2:5f:45:e5:04:d4:5c:e0:ea:4e:f3:34:
                    92:72:ce:d3:db:00:10:07:22:d6:57:f6:2f:12:a3:
                    9a:ec:2e:9f:f5:c9:55:f4:f9:8a:2e:3d:a8:88:23:
                    82:2b:52:f2:aa:c8:6d:25:d0:1d:7d:55:b9:d4:fb:
                    11:2d:6d:eb:d1:34:50:c4:40:40:f8:3f:f0:d2:bf:
                    fd:8f:31:ce:1a:b0:8b:f8:6b:d8:eb:ab:65:10:26:
                    43:ad:8e:69:86:81:c5:cb:4a:54:b1:2c:f4:b9:50:
                    d2:6f:f1:c7:73:da:07:3e:b3:3f:3e:76:0d:11:a1:
                    ad:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:73:E4:9B:16:21:53:67:0B:C9:B6:6A:74:BB:AC:24:D8:5D:49:F9
            X509v3 Authority Key Identifier:
                keyid:B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a386430303a3a2f34302d3438203d3e20323131303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:8d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         05:a3:f3:2b:32:bd:8e:df:73:c9:9c:83:09:4c:d3:fe:bf:56:
         ed:09:9a:cf:a9:7a:a4:6a:fc:95:cc:fa:d6:be:b6:61:45:9b:
         bd:da:d1:38:e1:6f:a0:c7:e1:f0:b6:4e:3f:36:33:79:49:1b:
         1f:ef:13:ce:a3:8d:e9:28:bd:7e:6b:7a:d7:c2:a5:ff:b1:35:
         07:69:93:32:32:b3:cc:90:74:35:87:f0:9d:3b:89:a8:d2:93:
         0e:a4:d2:63:d1:7c:f1:72:3a:84:2f:09:da:c0:38:6e:a5:d2:
         2d:0d:2c:af:36:aa:e5:21:ea:14:b2:e2:3a:ff:db:22:41:a3:
         77:74:12:3a:37:3c:05:fa:6f:c7:fe:27:d0:64:f5:77:aa:17:
         fb:5d:a4:b5:53:35:13:bf:3d:ef:66:0a:5e:98:56:35:cb:f9:
         da:a4:71:65:36:4f:d1:a5:f9:73:28:08:72:6a:99:7b:f1:43:
         b6:32:de:df:67:84:19:b6:88:4b:33:9c:0f:69:44:e9:c6:09:
         d5:9b:68:4a:f7:f9:1f:2e:68:f6:b7:73:c2:e0:47:b2:19:41:
         96:69:04:0b:31:4c:39:84:98:b1:01:c2:d5:9e:fc:2a:66:46:
         86:52:fb:d5:17:33:b8:5b:44:4d:c2:3e:bb:35:9d:74:b6:6b:
         fe:17:4a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----