Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/1/326130623a346530373a363064303a3a2f34342d3438203d3e20323134373031.roa
File:                     326130623a346530373a363064303a3a2f34342d3438203d3e20323134373031.roa (raw, json)
Hash identifier:          Mbx64j7UAG35RxfrZTK8oOnl74ijH3kmO/U7xup2Tw0=
Subject key identifier:   AB:ED:E8:D3:BD:62:82:E4:5B:CF:BC:9C:E3:8D:EB:8A:D3:9D:2E:36
Certificate issuer:       /CN=1BD68BB33CF4B2C0746A88537A13578C0074B4E6
Certificate serial:       345C63319B6DCC0E2DB6DE0B94FC294C2426E008
Authority key identifier: 1B:D6:8B:B3:3C:F4:B2:C0:74:6A:88:53:7A:13:57:8C:00:74:B4:E6
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/1BD68BB33CF4B2C0746A88537A13578C0074B4E6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/1/326130623a346530373a363064303a3a2f34342d3438203d3e20323134373031.roa
Signing time:             Sun 23 Feb 2025 02:26:24 +0000
ROA not before:           Sun 23 Feb 2025 02:21:24 +0000
ROA not after:            Sun 22 Feb 2026 02:26:24 +0000
asID:                     214701
IP address blocks:        2a0b:4e07:60d0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:5c:63:31:9b:6d:cc:0e:2d:b6:de:0b:94:fc:29:4c:24:26:e0:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BD68BB33CF4B2C0746A88537A13578C0074B4E6
        Validity
            Not Before: Feb 23 02:21:24 2025 GMT
            Not After : Feb 22 02:26:24 2026 GMT
        Subject: CN=ABEDE8D3BD6282E45BCFBC9CE38DEB8AD39D2E36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cc:ad:66:d1:b3:25:84:e6:d2:a8:92:3d:32:
                    e1:a1:a1:06:e5:50:70:32:16:0e:15:a7:d2:17:94:
                    5d:8e:28:5e:1b:ef:d6:01:52:85:10:fb:1a:9d:2d:
                    56:48:27:24:ea:f8:4b:60:a9:ca:9f:fb:3e:9f:da:
                    49:58:92:5d:d4:b0:19:e4:60:a1:72:33:ce:d8:7a:
                    22:6d:b0:7b:84:0c:73:33:4a:dc:d7:01:16:ba:fc:
                    40:73:97:32:f6:de:0c:9c:c7:fa:30:58:09:82:25:
                    72:c9:be:98:76:9e:df:fc:f5:93:6a:e8:02:2d:71:
                    d2:54:02:0f:7f:1f:61:aa:21:85:c8:b0:58:94:e3:
                    d7:cd:86:1d:20:2a:6f:42:59:37:3b:c6:22:0b:88:
                    28:56:58:93:7a:45:3f:a9:6e:4f:1e:74:df:48:35:
                    28:ec:78:a6:cc:ff:7e:1e:fb:eb:4f:c1:30:7c:34:
                    1d:08:8e:f9:a2:6c:52:ef:cf:d4:64:a9:fd:ce:46:
                    92:3b:b4:1c:34:86:99:0e:db:d1:0b:b4:7b:74:15:
                    2c:11:c7:d9:b2:dd:7d:97:37:87:64:92:c4:87:da:
                    48:eb:42:7d:74:05:03:84:f4:05:9f:fb:03:a7:83:
                    f9:bf:a5:97:dd:78:43:52:5a:d1:9d:c6:40:81:79:
                    64:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:ED:E8:D3:BD:62:82:E4:5B:CF:BC:9C:E3:8D:EB:8A:D3:9D:2E:36
            X509v3 Authority Key Identifier:
                keyid:1B:D6:8B:B3:3C:F4:B2:C0:74:6A:88:53:7A:13:57:8C:00:74:B4:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/1/1BD68BB33CF4B2C0746A88537A13578C0074B4E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/1BD68BB33CF4B2C0746A88537A13578C0074B4E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/1/326130623a346530373a363064303a3a2f34342d3438203d3e20323134373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:60d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         7e:35:60:bc:5a:3a:6d:a7:45:2d:68:2f:51:e1:bf:e5:ef:4b:
         b9:9a:e6:82:6c:b2:aa:b0:56:c5:be:4b:3f:f8:12:54:48:a0:
         57:90:5d:30:95:be:69:f5:4a:d1:6c:0d:34:95:b5:41:09:61:
         ec:5a:cd:70:2b:af:c8:2c:a3:10:dc:4a:67:3e:2f:cb:e5:cf:
         3e:7e:3d:0f:18:cf:ef:5c:81:f5:84:38:d5:22:88:7c:21:dc:
         f1:71:24:40:a7:a4:a7:49:51:d5:a7:25:c3:54:14:f3:2c:99:
         1a:23:81:f0:c2:60:b0:41:98:ad:c0:b8:88:06:82:ea:08:60:
         b1:5b:71:7f:7e:6e:d0:4b:15:0a:29:4c:75:c3:37:06:37:10:
         b2:11:61:dd:6e:68:8e:7c:d8:fa:36:c0:78:64:87:16:01:ab:
         f3:02:b4:59:12:22:ed:db:7b:8b:65:7f:eb:e5:5b:e3:76:a8:
         b8:8a:68:41:13:43:55:bf:e5:cf:92:fb:ed:a2:d4:fd:aa:95:
         1f:b8:a3:62:5d:0b:65:ce:bd:ea:8a:d6:8b:9b:76:0d:50:d8:
         9a:a7:8a:11:05:fc:91:95:f7:6d:75:f9:ab:a7:37:73:fa:ad:
         b2:1a:20:48:3c:c1:97:ae:a8:a5:9c:b2:9e:c5:d3:35:8b:48:
         d3:dd:61:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----