Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/1/326131333a646638303a353730303a3a2f34382d3438203d3e20323136323635.roa
File:                     326131333a646638303a353730303a3a2f34382d3438203d3e20323136323635.roa (raw, json)
Hash identifier:          +cbkMtrfhcNx64GdbRs3uNpVIhBUVDKVZH5nXb3yvD8=
Subject key identifier:   8B:4E:80:79:84:57:BA:B7:E7:29:77:2A:1D:15:C6:E3:50:02:9A:35
Certificate issuer:       /CN=62DFE0F943896C6926C6A58A5CA112539167FA66
Certificate serial:       2E678BBC341F66EF343D597F53FB35091A7D955A
Authority key identifier: 62:DF:E0:F9:43:89:6C:69:26:C6:A5:8A:5C:A1:12:53:91:67:FA:66
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/62DFE0F943896C6926C6A58A5CA112539167FA66.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/1/326131333a646638303a353730303a3a2f34382d3438203d3e20323136323635.roa
Signing time:             Wed 10 Apr 2024 16:37:31 +0000
ROA not before:           Wed 10 Apr 2024 16:32:31 +0000
ROA not after:            Wed 09 Apr 2025 16:37:31 +0000
asID:                     216265
IP address blocks:        2a13:df80:5700::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:67:8b:bc:34:1f:66:ef:34:3d:59:7f:53:fb:35:09:1a:7d:95:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62DFE0F943896C6926C6A58A5CA112539167FA66
        Validity
            Not Before: Apr 10 16:32:31 2024 GMT
            Not After : Apr  9 16:37:31 2025 GMT
        Subject: CN=8B4E80798457BAB7E729772A1D15C6E350029A35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d2:25:ff:98:86:22:ec:ba:8e:20:d3:ef:61:
                    58:b6:43:31:fa:87:34:45:91:32:d4:5d:b7:b1:76:
                    57:d8:43:c5:c9:a7:17:3c:aa:98:b2:14:c7:94:b8:
                    5c:1d:29:69:b3:fd:20:b8:b0:8f:77:f2:eb:20:6b:
                    58:5d:94:f9:cd:04:fa:b6:51:8d:73:d8:87:37:70:
                    99:57:72:92:4e:4f:f2:c5:0c:34:ed:e4:ce:21:d5:
                    bd:6f:b1:98:f2:26:48:80:57:a8:a3:5b:bb:23:28:
                    5a:25:78:2b:3e:c9:ca:e2:4c:14:6a:b0:a2:65:30:
                    9d:4c:86:cf:2b:c1:a9:b9:87:c2:53:60:9d:8f:2a:
                    e7:67:47:3b:6c:cc:9d:75:cf:45:bc:8e:b9:95:3d:
                    77:6b:65:26:ef:11:ae:24:23:90:2a:b3:f2:eb:f1:
                    c4:36:28:c7:3d:2a:e7:8a:c4:21:9e:f8:54:43:17:
                    e8:46:ff:27:d8:05:c8:84:03:8e:fe:31:12:ce:ba:
                    02:f6:35:51:77:e9:b2:6a:8a:a4:fb:7d:37:f0:b9:
                    5c:05:6b:5c:50:eb:34:9a:c6:8e:ed:a3:ff:71:32:
                    16:06:05:63:15:54:35:3d:a2:bf:d8:15:41:18:84:
                    5f:d6:5a:8d:b3:f7:2e:bf:61:0e:9c:0f:a9:71:34:
                    f8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4E:80:79:84:57:BA:B7:E7:29:77:2A:1D:15:C6:E3:50:02:9A:35
            X509v3 Authority Key Identifier:
                keyid:62:DF:E0:F9:43:89:6C:69:26:C6:A5:8A:5C:A1:12:53:91:67:FA:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/1/62DFE0F943896C6926C6A58A5CA112539167FA66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/62DFE0F943896C6926C6A58A5CA112539167FA66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/1/326131333a646638303a353730303a3a2f34382d3438203d3e20323136323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:5700::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:10:d7:a8:33:ff:f8:0c:97:49:1e:65:33:0a:57:30:0b:5b:
         cc:4f:07:d4:50:06:f3:14:24:aa:39:15:59:68:6f:13:fb:6a:
         c6:38:b4:f6:7e:ed:ac:a9:bd:a1:d1:67:94:80:ef:4d:db:a9:
         4b:2b:6f:46:29:48:01:3b:04:04:b6:1a:d5:2c:b8:7e:66:66:
         ec:32:ac:81:42:94:76:86:c6:f8:4a:97:52:7e:fb:11:af:dc:
         6d:30:39:3f:9c:f8:46:08:fb:0e:c6:3e:d7:56:56:ab:11:9d:
         6d:53:16:63:3b:68:63:17:f6:4c:9a:bc:69:fe:64:5d:d0:57:
         3a:f3:9f:1e:78:de:12:17:a3:36:2f:5c:aa:c1:e1:a3:e5:62:
         6c:da:78:92:98:ef:5f:e9:69:b1:15:d6:92:f4:ed:a1:f0:32:
         6a:ba:83:58:70:2f:ee:65:10:54:64:5f:fc:c3:08:4b:9f:c4:
         a1:f1:4b:2e:d6:dd:f5:0d:46:e5:fe:5a:35:ff:43:f7:2e:ba:
         a4:1b:df:b2:a8:45:57:a7:59:21:70:66:23:be:d8:6f:51:7f:
         b5:68:18:14:b3:70:5a:7e:8c:bb:79:a5:9c:54:41:ca:5b:55:
         79:10:77:43:ba:40:9b:a3:6e:6f:f1:e0:af:34:1e:36:8b:b6:
         c2:58:51:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----