Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/1/326131333a646638303a353830333a3a2f34382d3438203d3e20323136323635.roa
File:                     326131333a646638303a353830333a3a2f34382d3438203d3e20323136323635.roa (raw, json)
Hash identifier:          a4Mv8YxD5ZKTD+h6uU6suEKtSBrH2jFTHOOfWE2KogA=
Subject key identifier:   C6:EC:7F:6E:26:C3:E7:04:CF:DC:E0:F7:83:3B:2F:FB:5A:5B:50:C4
Certificate issuer:       /CN=62DFE0F943896C6926C6A58A5CA112539167FA66
Certificate serial:       4EACE390DAFCAF4A4F8EC8DB853A4BAED2149C0B
Authority key identifier: 62:DF:E0:F9:43:89:6C:69:26:C6:A5:8A:5C:A1:12:53:91:67:FA:66
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/62DFE0F943896C6926C6A58A5CA112539167FA66.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/1/326131333a646638303a353830333a3a2f34382d3438203d3e20323136323635.roa
Signing time:             Wed 10 Apr 2024 16:30:33 +0000
ROA not before:           Wed 10 Apr 2024 16:25:33 +0000
ROA not after:            Wed 09 Apr 2025 16:30:33 +0000
asID:                     216265
IP address blocks:        2a13:df80:5803::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ac:e3:90:da:fc:af:4a:4f:8e:c8:db:85:3a:4b:ae:d2:14:9c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62DFE0F943896C6926C6A58A5CA112539167FA66
        Validity
            Not Before: Apr 10 16:25:33 2024 GMT
            Not After : Apr  9 16:30:33 2025 GMT
        Subject: CN=C6EC7F6E26C3E704CFDCE0F7833B2FFB5A5B50C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:85:f2:11:ca:31:30:f4:db:47:a7:79:e1:86:
                    c3:7c:57:c0:c5:cf:10:48:b1:88:f2:30:56:d9:fd:
                    14:65:1f:c1:76:80:cf:7d:09:ac:14:36:77:b3:b7:
                    0d:f2:0e:d3:20:8a:23:58:4b:d7:ab:89:5c:c4:53:
                    7e:37:59:7a:4d:a4:ac:1e:a8:8f:ca:55:58:c1:d6:
                    56:a4:d0:12:92:e4:b5:6b:52:bf:42:cc:f0:ab:7b:
                    2a:a6:26:2e:f5:53:3a:17:0d:cd:f4:c9:3f:ed:b4:
                    d2:28:66:32:7b:58:6e:c2:4a:d9:75:20:79:18:44:
                    94:c6:c2:82:84:be:df:02:44:9f:60:72:a3:22:aa:
                    e8:9e:27:b2:57:4d:c1:04:20:32:6b:63:9d:22:32:
                    5f:19:fb:14:b5:ba:44:fa:0a:49:5d:0d:75:aa:6a:
                    58:72:f0:a7:e0:cc:fa:d9:6b:00:14:83:a5:fd:2b:
                    7c:88:9c:14:85:a4:ea:30:46:ad:34:54:0c:74:fc:
                    05:5f:d1:36:47:c9:b8:69:e6:1e:23:90:cf:98:96:
                    91:44:f6:43:47:3b:09:49:50:02:49:f8:cd:54:f1:
                    a7:a4:8e:33:32:c8:0b:67:72:8a:7b:02:2c:5f:71:
                    7a:e9:18:6f:0f:b8:c3:a0:84:0d:aa:ae:c4:f1:c9:
                    3e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EC:7F:6E:26:C3:E7:04:CF:DC:E0:F7:83:3B:2F:FB:5A:5B:50:C4
            X509v3 Authority Key Identifier:
                keyid:62:DF:E0:F9:43:89:6C:69:26:C6:A5:8A:5C:A1:12:53:91:67:FA:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/1/62DFE0F943896C6926C6A58A5CA112539167FA66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/62DFE0F943896C6926C6A58A5CA112539167FA66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/1/326131333a646638303a353830333a3a2f34382d3438203d3e20323136323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:5803::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:d6:98:c8:01:f1:ca:3c:73:6a:8f:ac:22:8d:3f:ed:8f:dc:
         9a:23:e0:7f:43:46:bb:dd:e2:22:58:56:15:60:85:c9:ea:ec:
         07:cd:26:fd:ea:07:6a:8b:fb:b6:6f:b3:e7:c8:f5:94:dc:c9:
         45:81:21:6d:1a:60:4a:92:a5:ee:00:76:03:ae:3a:5c:ae:b2:
         6b:4b:eb:b6:cd:1c:0f:f6:2b:61:02:b2:b6:40:96:91:2b:1d:
         90:6e:79:4a:da:fc:cb:4f:9b:c6:0c:f3:25:09:9f:cd:5c:48:
         36:53:e6:8c:c9:5e:53:9c:ee:86:4e:41:16:ce:61:fa:a3:b4:
         b8:17:92:69:39:84:48:89:bf:6e:ba:fd:fd:a9:ae:f0:a4:59:
         2f:02:72:92:6f:f1:49:9d:10:89:41:86:07:7f:c6:16:c0:23:
         ae:30:82:8b:94:86:5c:98:e3:70:2b:db:5e:54:c4:b1:1d:93:
         72:52:f3:a8:4e:eb:fb:21:df:ac:ea:58:39:5e:04:3b:0c:11:
         9c:3e:a2:a9:f9:2e:b2:b3:5a:70:95:97:d3:19:11:36:38:a7:
         b7:ad:b2:3c:c2:b3:58:5a:7d:87:27:47:bf:09:51:0d:39:08:
         21:11:ab:ca:f6:ce:8e:f9:00:8a:87:15:e0:8c:a6:54:c6:92:
         32:bc:14:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----