Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/326131343a373538313a366665303a3a2f34342d3434203d3e20323134383431.roa
File:                     326131343a373538313a366665303a3a2f34342d3434203d3e20323134383431.roa (raw, json)
Hash identifier:          bkcmt94VX2qT5AatBWPB20wqy19gXukXDxeJ3DXH2P8=
Subject key identifier:   0B:68:69:3E:E0:06:49:40:52:89:A9:F4:96:C4:5A:4B:A9:7B:DA:D4
Certificate issuer:       /CN=893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B
Certificate serial:       464B8C8C78CA3E45CCC298682BA957BD8190979B
Authority key identifier: 89:3F:D4:1B:DE:22:6C:54:F2:AD:2B:3D:DA:19:C1:A0:B8:F1:20:6B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/326131343a373538313a366665303a3a2f34342d3434203d3e20323134383431.roa
Signing time:             Sat 12 Apr 2025 16:45:51 +0000
ROA not before:           Sat 12 Apr 2025 16:40:51 +0000
ROA not after:            Sat 11 Apr 2026 16:45:51 +0000
asID:                     214841
IP address blocks:        2a14:7581:6fe0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:4b:8c:8c:78:ca:3e:45:cc:c2:98:68:2b:a9:57:bd:81:90:97:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B
        Validity
            Not Before: Apr 12 16:40:51 2025 GMT
            Not After : Apr 11 16:45:51 2026 GMT
        Subject: CN=0B68693EE00649405289A9F496C45A4BA97BDAD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bc:ea:f4:dc:b9:10:26:88:dd:d3:09:80:b4:
                    5f:8c:d4:54:87:94:39:29:46:f1:72:65:6f:ed:c7:
                    22:c8:f0:34:87:48:73:36:8d:75:f5:e3:d7:1b:80:
                    74:21:78:09:17:67:9f:3a:d1:68:8e:96:bd:5f:5f:
                    22:15:9b:84:15:a8:90:1e:08:83:e1:cc:09:11:0a:
                    3d:2b:4a:3a:a0:c6:dd:2e:7e:68:2f:0e:5c:70:31:
                    04:b6:2f:ec:68:01:51:49:90:a1:f4:4a:c9:08:4c:
                    ed:7a:cf:e5:24:bc:ae:dc:e5:f5:66:88:38:3e:18:
                    0d:de:58:71:df:55:e1:80:7a:da:60:8d:94:b9:65:
                    d1:6d:03:b0:e6:3b:bf:aa:4b:04:ad:64:34:b1:af:
                    90:e7:71:68:7d:d1:f7:bf:c1:23:ba:f9:ba:3b:77:
                    cd:3c:f8:e1:09:4e:20:16:12:c0:73:d0:0f:02:29:
                    43:0a:3a:f7:45:c1:5f:55:b9:46:53:16:d9:5b:c7:
                    7e:b9:18:8c:da:1a:07:1c:55:0d:93:a0:ad:d1:5f:
                    43:02:c1:50:e3:b5:d8:de:83:82:7e:2b:d0:ea:d3:
                    09:7c:31:0d:4e:c9:21:14:04:9b:39:65:64:8b:d4:
                    77:b6:f6:bc:7a:9d:03:c9:f0:e7:aa:3e:99:36:a1:
                    b4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:68:69:3E:E0:06:49:40:52:89:A9:F4:96:C4:5A:4B:A9:7B:DA:D4
            X509v3 Authority Key Identifier:
                keyid:89:3F:D4:1B:DE:22:6C:54:F2:AD:2B:3D:DA:19:C1:A0:B8:F1:20:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/326131343a373538313a366665303a3a2f34342d3434203d3e20323134383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:6fe0::/44

    Signature Algorithm: sha256WithRSAEncryption
         48:70:49:56:4c:e0:3d:7e:ca:a3:1d:23:f2:13:f3:4a:45:c0:
         0b:ed:7c:ed:b4:e1:7f:33:ba:ed:bb:b6:be:8d:14:74:b4:8c:
         cd:4e:91:db:07:16:cf:df:bc:03:c4:c4:75:1e:e3:13:3d:97:
         ca:d0:3b:b1:5d:ef:a0:44:2f:01:41:59:75:b8:7d:41:9c:24:
         d3:7c:a0:92:d3:25:ea:8a:99:74:e3:ed:45:f1:f5:f8:9b:6a:
         3d:3c:de:2e:c8:5c:44:09:ea:66:72:d1:2f:c6:61:bd:e6:09:
         bf:28:3d:02:d7:31:40:1f:20:1e:68:e9:93:23:eb:4d:aa:51:
         c7:ec:30:35:2a:37:b6:98:e5:be:2c:3a:a7:81:c9:47:4b:34:
         64:5a:02:92:cd:88:c6:75:c6:b6:9d:4d:8e:08:01:2d:26:b1:
         7b:41:80:7d:4e:c0:c9:21:bc:29:d2:62:a1:f2:de:49:bb:9c:
         e8:86:b2:38:9b:d8:3b:32:68:e0:b6:55:ab:07:b6:1d:ef:2b:
         27:c1:54:41:24:ec:96:38:ac:da:8d:f0:ca:c6:a6:a2:73:38:
         ac:ca:a0:45:ff:4e:cc:82:8a:da:f5:fa:36:40:a6:3c:c1:fc:
         7d:9f:86:8c:6c:38:2c:13:80:7c:45:c1:04:6e:53:54:21:3d:
         84:d0:a9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----