Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/326130663a336363303a3a2f33322d3332203d3e20323037393336.roa
File:                     326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (raw, json)
Hash identifier:          E+WPtm+HS9AVsakqcLrBjACoAm/NbChhrd4PG4s+X5o=
Subject key identifier:   2E:FA:2B:57:EF:1A:9B:E0:78:6A:CF:5C:85:B4:57:A1:94:94:53:4F
Certificate issuer:       /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Certificate serial:       4E4D49F35C9D82350EB54C2651D844BC1204B0DF
Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/326130663a336363303a3a2f33322d3332203d3e20323037393336.roa
Signing time:             Sun 30 Mar 2025 05:13:24 +0000
ROA not before:           Sun 30 Mar 2025 05:08:24 +0000
ROA not after:            Sun 29 Mar 2026 05:13:24 +0000
asID:                     207936
IP address blocks:        2a0f:3cc0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:4d:49:f3:5c:9d:82:35:0e:b5:4c:26:51:d8:44:bc:12:04:b0:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
        Validity
            Not Before: Mar 30 05:08:24 2025 GMT
            Not After : Mar 29 05:13:24 2026 GMT
        Subject: CN=2EFA2B57EF1A9BE0786ACF5C85B457A19494534F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:33:a5:15:98:e1:b5:62:59:86:f8:6a:6d:e7:
                    fa:9c:ee:19:2f:d1:fe:6d:d4:c2:73:7f:d1:77:d6:
                    18:b8:e4:a4:d8:07:fd:ec:4a:4f:8a:e6:1c:f7:7e:
                    7a:05:71:a3:85:a3:e3:f6:87:a0:dc:0e:92:10:94:
                    75:43:a3:8d:7d:b0:ca:b2:e1:34:1e:81:73:8b:9c:
                    6b:4d:89:3b:79:5f:15:b9:ae:1b:4e:29:03:9f:08:
                    e4:b5:25:30:0f:33:8b:bc:32:4e:d4:37:39:0d:a6:
                    73:a3:43:c0:a0:54:f1:b6:e9:b8:29:65:23:35:b4:
                    a8:ee:94:25:bb:39:27:92:c7:eb:51:be:9d:86:59:
                    d2:71:7f:c2:fd:b8:1e:76:0b:39:9e:38:c7:e9:a1:
                    98:9e:06:c1:1a:83:10:4c:70:33:16:00:bd:50:74:
                    4c:3a:47:54:f4:39:75:e9:96:45:1c:ed:23:e1:a6:
                    8f:65:2b:8d:d7:30:71:b9:69:49:33:35:b7:a1:43:
                    4f:48:3a:e2:a7:a6:c4:7b:17:64:3c:3d:d8:38:be:
                    8c:f3:5c:c4:97:9c:7d:32:e6:40:80:95:32:41:56:
                    ea:42:d7:7e:a2:19:96:e7:1b:42:c4:79:f3:2e:18:
                    20:74:27:05:80:46:5c:8d:83:60:ee:1e:41:8c:b0:
                    1a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:FA:2B:57:EF:1A:9B:E0:78:6A:CF:5C:85:B4:57:A1:94:94:53:4F
            X509v3 Authority Key Identifier:
                keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/326130663a336363303a3a2f33322d3332203d3e20323037393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:3cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:a5:a6:1c:bc:93:6b:3a:b7:61:75:86:68:8a:d5:a2:dc:ea:
         66:2f:1b:c6:90:b2:69:b7:96:35:42:aa:da:f7:fd:d3:af:50:
         d0:e5:a0:48:24:8a:d8:5b:06:06:a2:6a:e8:e7:d1:0e:86:02:
         2a:fd:b2:60:29:6f:6c:75:43:db:fd:f0:83:89:ef:7d:94:21:
         79:80:4b:61:f1:45:bd:1c:58:e3:38:c2:63:c0:e3:a9:5e:58:
         34:44:8e:90:95:f1:91:f3:b9:dd:eb:69:6b:d4:da:78:74:ec:
         f8:55:60:eb:37:a8:63:e5:c1:02:0d:a0:f5:81:fc:e9:61:cb:
         0b:7d:e8:e6:66:91:76:03:8a:eb:49:83:45:5c:e0:ae:20:69:
         cb:b6:b0:46:7c:ef:5c:1e:fa:19:c8:98:0d:b3:9e:69:d4:4f:
         e4:b1:9d:b1:17:ff:05:88:fe:58:5c:ea:3a:f0:b5:d7:3c:81:
         32:ca:5b:ff:4f:71:48:90:25:60:42:e8:0d:c7:f6:c9:2a:44:
         b9:bc:55:ce:2f:16:a0:ce:fc:a4:ac:f0:d7:66:46:ce:3b:2b:
         52:28:63:ec:cc:69:fc:e2:f3:62:45:c2:16:f2:da:ce:05:cb:
         58:1a:1d:cb:f8:7c:92:e4:ca:43:8c:81:db:10:41:63:9e:41:
         9c:d3:d5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----