Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/1/326131333a646638303a353730313a3a2f34382d3438203d3e20323136323635.roa
File:                     326131333a646638303a353730313a3a2f34382d3438203d3e20323136323635.roa (raw, json)
Hash identifier:          EEEq60JecvCR4jXpGbJpvDdp1trBNpt5h75BDiW0JCU=
Subject key identifier:   2F:72:A4:AB:54:A8:44:34:CD:A4:B6:A3:D3:51:E1:D3:BE:7A:CE:27
Certificate issuer:       /CN=62DFE0F943896C6926C6A58A5CA112539167FA66
Certificate serial:       556F5043D00AC0F0D9E78A4560DBBA63C6B9951F
Authority key identifier: 62:DF:E0:F9:43:89:6C:69:26:C6:A5:8A:5C:A1:12:53:91:67:FA:66
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/62DFE0F943896C6926C6A58A5CA112539167FA66.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/1/326131333a646638303a353730313a3a2f34382d3438203d3e20323136323635.roa
Signing time:             Wed 10 Apr 2024 16:38:17 +0000
ROA not before:           Wed 10 Apr 2024 16:33:17 +0000
ROA not after:            Wed 09 Apr 2025 16:38:17 +0000
asID:                     216265
IP address blocks:        2a13:df80:5701::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:6f:50:43:d0:0a:c0:f0:d9:e7:8a:45:60:db:ba:63:c6:b9:95:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62DFE0F943896C6926C6A58A5CA112539167FA66
        Validity
            Not Before: Apr 10 16:33:17 2024 GMT
            Not After : Apr  9 16:38:17 2025 GMT
        Subject: CN=2F72A4AB54A84434CDA4B6A3D351E1D3BE7ACE27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ef:1f:48:4f:1a:c5:a3:c8:97:6f:10:d0:cc:
                    ed:76:9e:ad:a4:77:55:a6:bf:a2:eb:a4:4c:59:e5:
                    4a:e5:b1:14:8c:b6:29:e4:38:94:12:e7:31:58:4c:
                    d0:fa:81:42:3d:a2:37:13:03:b5:e2:82:73:36:5a:
                    b7:07:52:0c:b6:83:98:b9:56:7b:14:71:70:7e:d8:
                    9b:32:5f:1d:f9:2d:b5:e2:ef:53:9a:bc:d4:71:c9:
                    67:78:f7:62:04:8c:61:2c:f7:5d:f3:98:22:e3:be:
                    62:03:fe:42:a1:73:98:dc:a0:2f:c6:bf:68:eb:51:
                    53:e9:bb:ea:2a:97:1e:87:98:ed:c7:d3:dc:54:13:
                    c7:aa:d4:00:f8:81:12:13:ae:e4:81:16:a7:a4:ca:
                    d3:44:72:3a:57:6d:19:5c:c4:4e:ab:84:db:b6:8a:
                    1f:30:54:c4:b7:a6:30:45:21:56:06:04:70:8c:a0:
                    c9:cf:c6:43:a9:f1:5b:82:d5:8a:32:aa:f9:af:68:
                    ed:83:76:6e:b9:80:59:6b:eb:31:ca:24:58:b8:8e:
                    61:e5:c1:52:48:6d:65:dc:81:74:e0:96:3d:5e:8f:
                    9b:33:8a:e9:30:f7:c8:39:db:6e:b2:3f:be:c4:0b:
                    ba:25:a5:8a:14:e1:86:c2:39:c9:cd:2e:c6:e8:d4:
                    8c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:72:A4:AB:54:A8:44:34:CD:A4:B6:A3:D3:51:E1:D3:BE:7A:CE:27
            X509v3 Authority Key Identifier:
                keyid:62:DF:E0:F9:43:89:6C:69:26:C6:A5:8A:5C:A1:12:53:91:67:FA:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/1/62DFE0F943896C6926C6A58A5CA112539167FA66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/62DFE0F943896C6926C6A58A5CA112539167FA66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/1/326131333a646638303a353730313a3a2f34382d3438203d3e20323136323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:5701::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:37:7b:d2:54:11:c0:f2:32:3f:7d:69:35:17:08:5f:73:e9:
         2c:55:0c:f9:f5:8b:20:b1:f0:76:32:89:75:4d:8a:03:90:10:
         61:3a:7b:0d:33:d7:1d:b8:98:65:f5:1b:44:68:07:5c:d8:5d:
         fc:bb:84:8c:d3:75:af:cc:d3:59:95:d9:7d:f0:95:d7:62:dd:
         04:b0:ef:e5:6e:b6:ff:5c:db:8e:06:a0:01:0b:a8:22:76:ee:
         b2:d7:ae:f5:44:b7:0e:74:9e:6d:2c:16:f8:8a:69:15:72:79:
         10:f2:c8:2b:8c:11:b3:1d:fe:fa:8f:b2:da:c0:34:a6:75:5c:
         7f:f0:4a:84:91:8f:fb:9c:bb:d3:5d:ce:f8:27:ac:f2:62:7d:
         96:2e:bb:73:2c:45:09:b7:f2:f7:a7:9c:4a:06:c0:ed:22:bd:
         9d:39:a8:c4:3d:31:18:f8:f7:24:09:f4:e5:32:83:84:56:df:
         06:1b:94:9d:a7:81:f7:15:36:2b:4f:27:e3:fc:13:ba:1e:22:
         50:17:b3:d6:da:92:a7:58:62:b2:32:85:a4:de:ed:bb:31:1f:
         b5:ca:19:1b:c7:c4:11:30:69:4c:80:09:08:df:9d:d3:8a:f4:
         65:16:48:27:0f:bd:05:43:ef:d2:e8:98:f8:f5:9f:74:9b:bc:
         21:0b:18:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----