Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/326130663a336363363a3a2f33322d3332203d3e203630373335.roa
File:                     326130663a336363363a3a2f33322d3332203d3e203630373335.roa (raw, json)
Hash identifier:          Bvg0bczZRvr0hNeXj13n0Q8N1O34FXLeiihKmXvd96c=
Subject key identifier:   06:B8:C3:31:F4:BA:5B:03:8D:1C:CD:6C:47:C9:AD:78:CD:C1:76:25
Certificate issuer:       /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Certificate serial:       0A1C57A7CD94A5D32D2C452AB8C803A880F2223D
Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/326130663a336363363a3a2f33322d3332203d3e203630373335.roa
Signing time:             Sun 30 Mar 2025 05:13:34 +0000
ROA not before:           Sun 30 Mar 2025 05:08:34 +0000
ROA not after:            Sun 29 Mar 2026 05:13:34 +0000
asID:                     60735
IP address blocks:        2a0f:3cc6::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:1c:57:a7:cd:94:a5:d3:2d:2c:45:2a:b8:c8:03:a8:80:f2:22:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
        Validity
            Not Before: Mar 30 05:08:34 2025 GMT
            Not After : Mar 29 05:13:34 2026 GMT
        Subject: CN=06B8C331F4BA5B038D1CCD6C47C9AD78CDC17625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ac:d9:9c:df:f6:ae:c7:01:3e:d6:71:9a:b5:
                    0d:2b:a1:02:3e:78:50:f8:6a:96:e3:3c:e2:4a:ea:
                    0e:63:f0:12:7d:ce:57:13:73:4b:cc:29:a2:6c:ee:
                    24:c3:98:36:08:dd:2d:91:d3:b3:c2:83:06:e9:1a:
                    a0:a4:fd:32:0b:d1:4f:49:88:6c:f8:c2:e6:a7:98:
                    7e:8c:29:06:35:5e:1f:49:b6:12:87:2c:0a:1d:f2:
                    a6:70:d9:ae:85:c2:9b:6c:92:1e:e7:8f:b8:1c:b1:
                    25:31:d7:04:5f:b7:5c:e5:33:3e:8e:47:0d:b1:57:
                    4f:20:3e:dc:8c:8b:59:92:8c:9b:8a:c5:fa:1f:49:
                    03:bf:aa:5c:40:e7:8a:94:cb:4c:83:56:08:b7:52:
                    80:25:10:00:58:6b:32:f9:18:e8:62:4f:8e:62:04:
                    c0:22:a8:c3:f5:3f:b0:2c:f3:6c:5c:34:06:2b:02:
                    c6:8a:e6:aa:bf:cb:b5:82:01:59:eb:ee:f1:9d:4f:
                    d7:4f:c4:15:b3:e2:35:52:68:3b:f8:7a:88:e3:84:
                    6a:8b:eb:bb:4a:db:db:69:5c:80:18:6c:34:d9:8a:
                    ce:a1:be:e2:92:6f:cd:1e:df:78:14:c9:07:0c:30:
                    41:52:4e:b0:55:d2:39:94:31:11:26:36:7c:5d:fc:
                    78:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B8:C3:31:F4:BA:5B:03:8D:1C:CD:6C:47:C9:AD:78:CD:C1:76:25
            X509v3 Authority Key Identifier:
                keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/326130663a336363363a3a2f33322d3332203d3e203630373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:3cc6::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:bf:4d:8b:c4:38:69:01:28:93:90:a5:ed:b3:0a:d5:a9:b8:
         31:45:79:06:44:47:b2:3e:92:f3:5f:e2:25:2d:61:7b:91:9f:
         3b:b7:58:7f:3e:c6:85:d6:c8:dd:7a:b6:ac:c8:f3:40:b3:6d:
         e6:06:be:62:2b:24:00:e1:50:88:a9:60:93:e3:e1:32:cc:9a:
         4d:46:91:4f:55:cb:c5:a3:4d:26:d6:1e:1a:22:ce:9b:c2:db:
         bc:75:77:32:68:5e:8b:62:16:08:05:95:5f:85:94:6c:9e:97:
         c4:68:67:9f:b4:eb:fd:9d:c2:dd:4b:bb:54:ef:fa:5d:64:3f:
         39:bd:a3:3b:77:6f:86:67:99:63:21:88:49:b8:a2:1b:29:5a:
         1d:87:40:2f:87:6e:63:b7:83:51:f2:87:72:a5:cb:ed:89:f3:
         24:62:2c:f1:cf:96:7d:5c:b7:52:8a:0d:73:5f:d2:6d:33:6a:
         bf:e2:85:8f:ca:9c:d8:1e:06:de:e0:75:48:0d:9a:c1:02:9b:
         a9:3d:6d:83:13:1e:b1:ea:e5:7d:0d:93:93:85:8d:b7:2b:6e:
         66:a3:67:e1:a6:72:ae:79:f8:6b:79:2a:a2:02:63:89:b7:ec:
         69:a2:0a:0b:cf:f3:20:fd:22:0b:8c:17:e9:58:af:74:5a:09:
         b0:7c:41:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----