Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/1/326131333a646638303a353730303a3a2f34372d3438203d3e20323136323635.roa
File:                     326131333a646638303a353730303a3a2f34372d3438203d3e20323136323635.roa (raw, json)
Hash identifier:          JackT54lDVzptXIRW2irArf3PDgSGRhrjfnLhee9mzs=
Subject key identifier:   FE:63:F9:10:C4:47:EB:9D:25:41:96:AB:CC:FC:40:4F:D0:BE:1D:3D
Certificate issuer:       /CN=62DFE0F943896C6926C6A58A5CA112539167FA66
Certificate serial:       2CEE78D64DD3E6276CAF386443090F80F8D8313F
Authority key identifier: 62:DF:E0:F9:43:89:6C:69:26:C6:A5:8A:5C:A1:12:53:91:67:FA:66
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/62DFE0F943896C6926C6A58A5CA112539167FA66.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/1/326131333a646638303a353730303a3a2f34372d3438203d3e20323136323635.roa
Signing time:             Fri 12 Apr 2024 02:28:35 +0000
ROA not before:           Fri 12 Apr 2024 02:23:35 +0000
ROA not after:            Fri 11 Apr 2025 02:28:35 +0000
asID:                     216265
IP address blocks:        2a13:df80:5700::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ee:78:d6:4d:d3:e6:27:6c:af:38:64:43:09:0f:80:f8:d8:31:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62DFE0F943896C6926C6A58A5CA112539167FA66
        Validity
            Not Before: Apr 12 02:23:35 2024 GMT
            Not After : Apr 11 02:28:35 2025 GMT
        Subject: CN=FE63F910C447EB9D254196ABCCFC404FD0BE1D3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0b:bd:70:d8:ce:0a:46:f5:08:78:f7:d1:e3:
                    16:8f:d0:2d:e8:11:f6:72:f6:34:f1:0b:d5:e2:e4:
                    60:5d:e3:40:99:57:0d:17:30:94:b2:b6:1d:7c:a5:
                    4e:52:64:aa:a1:b1:c1:d6:8c:93:aa:ec:db:af:8c:
                    2d:6a:ad:19:e9:20:ae:17:eb:e3:e0:cb:a1:13:47:
                    6f:59:21:13:c9:f6:82:f9:a9:7e:ea:7d:2b:e7:c2:
                    76:76:ca:b6:61:97:6f:42:9a:41:0c:18:e7:d8:ff:
                    76:a3:bc:7d:ad:80:29:c4:f4:4c:96:9b:00:a7:c2:
                    e1:52:4b:77:c8:23:e4:24:60:36:8c:ce:5d:b4:30:
                    75:d9:c7:fb:24:a0:02:67:93:49:6d:ec:e0:7f:f9:
                    df:02:b5:3c:04:6c:1e:50:de:ad:82:e7:47:7e:b8:
                    f8:22:c9:52:ca:df:65:9e:13:df:b1:4a:9d:0b:51:
                    a2:57:18:27:31:05:2f:18:65:80:eb:d8:8f:09:f2:
                    bc:88:4b:20:b9:3d:55:5f:8a:27:aa:62:0f:74:b1:
                    98:ae:33:3d:58:c6:cf:3b:bb:24:dc:07:dc:ad:1a:
                    22:14:12:1f:91:c6:44:fa:25:44:07:3a:a1:3a:43:
                    31:72:dd:bc:7e:dd:2b:55:ec:64:7b:dc:71:fd:30:
                    58:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:63:F9:10:C4:47:EB:9D:25:41:96:AB:CC:FC:40:4F:D0:BE:1D:3D
            X509v3 Authority Key Identifier:
                keyid:62:DF:E0:F9:43:89:6C:69:26:C6:A5:8A:5C:A1:12:53:91:67:FA:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/1/62DFE0F943896C6926C6A58A5CA112539167FA66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/62DFE0F943896C6926C6A58A5CA112539167FA66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/1/326131333a646638303a353730303a3a2f34372d3438203d3e20323136323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:5700::/47

    Signature Algorithm: sha256WithRSAEncryption
         64:ef:88:1a:cc:5f:d4:1c:72:74:08:d6:ba:56:f1:0b:f8:c9:
         59:6a:65:68:f2:51:1c:cc:06:23:e0:31:b1:77:a8:05:9c:76:
         ec:e8:a5:4b:92:19:cd:af:ea:1a:55:1d:3a:9a:14:76:88:68:
         41:4d:c1:ca:4e:0a:5d:d9:2c:09:2f:1b:fd:09:0d:d9:bb:67:
         52:7f:30:e5:f9:a0:50:58:26:a0:88:fb:57:9d:6f:d2:9f:82:
         07:1a:81:de:52:8e:b3:15:7e:84:c6:38:32:2c:35:79:86:b3:
         8f:6d:88:70:4b:97:98:63:d8:3b:ac:c5:59:36:fc:23:c7:a3:
         e2:ea:c5:34:94:dc:66:43:e5:e2:63:ec:e3:5c:65:c8:72:d7:
         fc:0e:63:d0:0a:05:79:89:8d:28:ea:87:8e:18:10:8f:05:93:
         04:d0:b9:7e:fc:46:fe:46:5a:be:d4:38:bf:2e:5f:9e:c4:a6:
         61:7a:55:f9:0c:45:83:57:f3:14:3b:c8:a8:1b:61:35:7b:57:
         ff:57:79:a9:27:3b:2e:0e:48:a2:7a:f7:6f:d8:ba:53:61:74:
         40:e5:ff:bf:8f:8e:b5:e8:73:ab:38:81:ed:d7:19:7b:32:0a:
         dd:c4:ec:04:76:30:46:9b:34:86:15:0f:ba:3d:46:ee:07:fd:
         ec:41:8f:68
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIULO541k3T5idsrzhkQwkPgPjYMT8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJERkUwRjk0Mzg5NkM2OTI2QzZBNThBNUNBMTEyNTM5
MTY3RkE2NjAeFw0yNDA0MTIwMjIzMzVaFw0yNTA0MTEwMjI4MzVaMDMxMTAvBgNV
BAMTKEZFNjNGOTEwQzQ0N0VCOUQyNTQxOTZBQkNDRkM0MDRGRDBCRTFEM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOC71w2M4KRvUIePfR4xaP0C3o
EfZy9jTxC9Xi5GBd40CZVw0XMJSyth18pU5SZKqhscHWjJOq7NuvjC1qrRnpIK4X
6+Pgy6ETR29ZIRPJ9oL5qX7qfSvnwnZ2yrZhl29CmkEMGOfY/3ajvH2tgCnE9EyW
mwCnwuFSS3fII+QkYDaMzl20MHXZx/skoAJnk0lt7OB/+d8CtTwEbB5Q3q2C50d+
uPgiyVLK32WeE9+xSp0LUaJXGCcxBS8YZYDr2I8J8ryISyC5PVVfiieqYg90sZiu
Mz1Yxs87uyTcB9ytGiIUEh+RxkT6JUQHOqE6QzFy3bx+3StV7GR73HH9MFh1AgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQU/mP5EMRH650lQZarzPxAT9C+HT0wHwYDVR0j
BBgwFoAUYt/g+UOJbGkmxqWKXKESU5Fn+mYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjRjYzhkZTUtNGI0Yi00Mjc2LWFhMjYtOGM1NTgwMDk5
MDI2LzEvNjJERkUwRjk0Mzg5NkM2OTI2QzZBNThBNUNBMTEyNTM5MTY3RkE2Ni5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wNDAzMmM4Zi0xZDU3LTRj
M2ItOTA0My1hMGU3ZmViZjE2N2QvMC82MkRGRTBGOTQzODk2QzY5MjZDNkE1OEE1
Q0ExMTI1MzkxNjdGQTY2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8yNGNjOGRlNS00YjRiLTQyNzYtYWEyNi04YzU1ODAwOTkwMjYvMS8zMjYxMzEz
MzNhNjQ2NjM4MzAzYTM1MzczMDMwM2EzYTJmMzQzNzJkMzQzODIwM2QzZTIwMzIz
MTM2MzIzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcBKhPfgFcAMA0GCSqGSIb3DQEBCwUAA4IBAQBk
74gazF/UHHJ0CNa6VvEL+MlZamVo8lEczAYj4DGxd6gFnHbs6KVLkhnNr+oaVR06
mhR2iGhBTcHKTgpd2SwJLxv9CQ3Zu2dSfzDl+aBQWCagiPtXnW/Sn4IHGoHeUo6z
FX6ExjgyLDV5hrOPbYhwS5eYY9g7rMVZNvwjx6Pi6sU0lNxmQ+XiY+zjXGXIctf8
DmPQCgV5iY0o6oeOGBCPBZME0Ll+/Eb+Rlq+1Di/Ll+exKZhelX5DEWDV/MUO8io
G2E1e1f/V3mpJzsuDkiievdv2LpTYXRA5f+/j4616HOrOIHt1xl7MgrdxOwEdjBG
mzSGFQ+6PUbuB/3sQY9o
-----END CERTIFICATE-----