Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/326130663a336363373a3a2f33322d3332203d3e203539383133.roa
File:                     326130663a336363373a3a2f33322d3332203d3e203539383133.roa (raw, json)
Hash identifier:          0XA7loK9zcLZ4LH8gJRLIhKhFochpbrC40dXD0XEE/8=
Subject key identifier:   F0:D4:51:CC:81:35:23:EC:16:75:D1:00:F8:6E:E5:65:DE:79:20:C3
Certificate issuer:       /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Certificate serial:       2C92FE75AE489749481A91031144208336624075
Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/326130663a336363373a3a2f33322d3332203d3e203539383133.roa
Signing time:             Sun 30 Mar 2025 05:13:38 +0000
ROA not before:           Sun 30 Mar 2025 05:08:38 +0000
ROA not after:            Sun 29 Mar 2026 05:13:38 +0000
asID:                     59813
IP address blocks:        2a0f:3cc7::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:92:fe:75:ae:48:97:49:48:1a:91:03:11:44:20:83:36:62:40:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
        Validity
            Not Before: Mar 30 05:08:38 2025 GMT
            Not After : Mar 29 05:13:38 2026 GMT
        Subject: CN=F0D451CC813523EC1675D100F86EE565DE7920C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cf:4a:b9:23:dd:39:cd:b9:d2:67:8d:86:e4:
                    b0:9d:19:a8:c5:3d:db:e4:e6:34:bc:c5:7c:8c:2d:
                    a1:69:bf:5d:f4:82:67:f3:29:01:5c:3d:ed:60:de:
                    f8:8f:28:8f:8e:bb:bc:9d:c7:2c:2a:a3:ad:fd:35:
                    91:b9:ed:ae:d2:b3:6f:69:c0:35:6f:e0:23:fa:a6:
                    39:50:ae:2b:56:f9:96:81:1a:5d:d9:19:46:cf:1a:
                    9e:87:01:1c:a3:8b:f6:36:13:82:9f:2e:cf:3f:50:
                    3c:df:f0:00:8c:44:c3:c6:ea:3d:e3:d4:22:88:df:
                    81:55:f7:00:2c:67:af:04:33:d4:7f:34:2f:24:07:
                    0e:2b:6b:1b:28:b3:97:36:44:66:a1:92:b3:25:a3:
                    73:2a:90:dc:7f:79:74:30:47:b0:62:26:93:47:d0:
                    c4:65:d9:6b:fd:c2:ea:59:30:26:07:d3:a2:0c:25:
                    78:e5:bb:21:1e:62:16:f0:83:29:b2:7c:30:75:7a:
                    0c:a6:9e:91:9e:6f:02:c2:c6:5e:4e:2a:59:1c:ad:
                    d6:c3:8f:7a:6c:23:4b:42:1b:f3:df:f3:35:d2:c3:
                    f3:4a:d1:3f:fb:39:cc:ab:90:48:86:3f:8f:3c:96:
                    4f:31:42:4f:99:d8:4c:d9:24:ce:95:3f:9b:0c:25:
                    f0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D4:51:CC:81:35:23:EC:16:75:D1:00:F8:6E:E5:65:DE:79:20:C3
            X509v3 Authority Key Identifier:
                keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/326130663a336363373a3a2f33322d3332203d3e203539383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:3cc7::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:93:56:20:54:17:23:57:31:8f:19:b5:36:05:fc:b0:58:01:
         d1:10:1c:b8:7b:c6:89:28:40:1b:b8:70:c8:9a:80:87:3d:ea:
         49:a7:5e:3f:f5:31:9e:f3:c8:cc:d8:e6:bf:7a:2c:c9:be:9d:
         a5:61:b9:0f:1d:d9:7f:1d:36:ef:05:26:29:02:dd:0d:e1:8e:
         a4:0c:46:a3:c2:79:ae:b5:11:42:98:aa:fd:8d:3e:b7:8a:ae:
         e0:97:a1:b9:77:1f:98:0d:f6:1a:9c:74:19:7c:5f:45:3c:fb:
         1a:e2:6d:f7:61:5a:e7:3b:fe:19:e9:05:ed:71:07:62:e6:64:
         98:37:c0:c2:74:61:76:21:c0:bc:5a:c2:a7:9b:87:a4:30:87:
         0f:f9:02:a3:07:80:8f:d2:dd:df:08:b2:f0:d5:6d:b7:95:c0:
         6c:6f:f0:49:ab:34:36:aa:7e:8f:b8:5b:aa:be:83:8b:ab:3f:
         d6:62:fc:05:2f:41:0e:53:67:cd:0e:35:8e:02:e8:02:1a:6c:
         0b:6f:f1:f0:10:29:84:e0:47:82:e3:7f:b0:db:e0:a3:92:46:
         bd:a2:fa:f7:34:05:85:d9:59:4e:70:49:25:dc:40:71:32:d3:
         2f:43:2c:60:91:34:c2:d9:2a:2b:ef:c2:24:5d:57:13:e8:94:
         7b:3c:e5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----