Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/1/326131333a646638303a353830323a3a2f34382d3438203d3e20323136323635.roa
File:                     326131333a646638303a353830323a3a2f34382d3438203d3e20323136323635.roa (raw, json)
Hash identifier:          LHKZO4SXrMhssOQAZgFzLssCe5BEqrPQkud/whohuIQ=
Subject key identifier:   09:E1:B9:5C:92:99:2A:9C:21:F5:B3:6E:85:FE:5C:78:60:A4:2D:A0
Certificate issuer:       /CN=62DFE0F943896C6926C6A58A5CA112539167FA66
Certificate serial:       33CF1AC43D8B2DB5033E5A857C3A50AD7F5C59E3
Authority key identifier: 62:DF:E0:F9:43:89:6C:69:26:C6:A5:8A:5C:A1:12:53:91:67:FA:66
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/62DFE0F943896C6926C6A58A5CA112539167FA66.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/1/326131333a646638303a353830323a3a2f34382d3438203d3e20323136323635.roa
Signing time:             Wed 10 Apr 2024 16:30:33 +0000
ROA not before:           Wed 10 Apr 2024 16:25:33 +0000
ROA not after:            Wed 09 Apr 2025 16:30:33 +0000
asID:                     216265
IP address blocks:        2a13:df80:5802::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:cf:1a:c4:3d:8b:2d:b5:03:3e:5a:85:7c:3a:50:ad:7f:5c:59:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62DFE0F943896C6926C6A58A5CA112539167FA66
        Validity
            Not Before: Apr 10 16:25:33 2024 GMT
            Not After : Apr  9 16:30:33 2025 GMT
        Subject: CN=09E1B95C92992A9C21F5B36E85FE5C7860A42DA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:94:45:dc:54:76:4e:44:f6:d6:6d:e1:92:b1:
                    d2:05:ec:73:1e:e4:d4:be:84:48:94:39:2a:17:b7:
                    cb:b7:c6:f4:df:a8:ee:7c:bc:e5:ce:5b:5d:94:47:
                    6b:59:eb:20:1b:16:e8:3a:38:1c:b2:dc:19:f9:4e:
                    6b:2a:96:1a:67:4c:a2:3f:6f:a5:fd:7a:e5:dd:45:
                    67:10:bd:ce:16:bb:04:c7:07:51:e5:29:fe:9c:0f:
                    4e:67:97:bb:34:a4:e1:b0:c8:37:3d:01:29:19:56:
                    e1:fe:12:4c:d8:31:7e:79:34:ca:51:62:ef:c9:d8:
                    9d:4d:52:f5:70:7d:b9:1c:35:b2:83:51:bb:2d:27:
                    bc:2d:d6:2a:e8:6e:9b:7a:5c:5c:92:d6:9f:37:de:
                    01:0c:d7:01:b9:b4:6b:ff:58:98:ab:6c:21:03:94:
                    b5:61:41:df:c9:b2:1b:2c:c8:f2:fe:95:d8:a6:08:
                    36:f3:38:14:b7:d2:dc:44:82:33:d8:91:32:9c:65:
                    25:ee:a1:27:39:f5:52:88:79:44:3f:18:8e:75:60:
                    8d:9c:a7:59:a2:e8:af:30:c1:45:60:97:5e:34:57:
                    70:fc:4e:d5:3c:d8:3d:3e:37:00:cb:c8:f8:26:f0:
                    52:f7:fb:ef:f7:4d:0e:03:54:7c:08:ff:3b:9d:72:
                    5d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E1:B9:5C:92:99:2A:9C:21:F5:B3:6E:85:FE:5C:78:60:A4:2D:A0
            X509v3 Authority Key Identifier:
                keyid:62:DF:E0:F9:43:89:6C:69:26:C6:A5:8A:5C:A1:12:53:91:67:FA:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/1/62DFE0F943896C6926C6A58A5CA112539167FA66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/62DFE0F943896C6926C6A58A5CA112539167FA66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/1/326131333a646638303a353830323a3a2f34382d3438203d3e20323136323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:5802::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:e7:10:eb:68:6c:13:51:52:47:98:29:24:50:4c:a0:39:c6:
         aa:fb:d5:c0:a8:12:79:09:08:cc:09:14:50:d5:b4:ca:aa:70:
         55:14:4a:32:13:48:a7:af:44:10:fb:ac:d3:a7:fb:32:9b:69:
         77:c3:c2:ce:6d:33:9a:26:e4:ae:03:56:4a:3c:1a:92:b2:94:
         cf:b4:5a:6d:d8:17:ff:e8:19:03:d2:33:5e:69:23:1e:97:de:
         69:8a:d3:cb:36:2e:b5:1a:d1:41:bc:11:3d:00:a8:37:ce:ab:
         7a:4b:a2:0b:27:6f:ab:be:29:4d:c6:37:ed:8e:67:e4:cc:7f:
         d0:92:d2:db:72:9e:37:f1:cd:1a:d8:03:9e:94:e7:ab:d0:6d:
         e3:1e:45:4d:8c:f4:5f:68:d4:6e:79:7f:70:d7:70:7e:7a:9f:
         af:ad:45:d7:5d:6b:32:6f:4b:78:ea:3e:0e:11:4c:07:bb:ca:
         e0:31:92:06:d2:af:77:cb:2a:56:2b:55:40:7f:31:66:c6:37:
         41:e7:e8:d6:58:0c:07:36:4e:08:41:a6:92:f4:83:e2:35:41:
         d7:cb:d7:99:2a:cb:b2:52:29:3d:33:bb:3e:f4:d6:5b:af:09:
         9b:f6:08:88:ce:a8:a9:eb:93:56:4b:65:3d:cb:8a:ec:25:c3:
         15:60:c8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----