Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/2/326131333a646638303a396461313a3a2f34382d3438203d3e20323135373435.roa
File:                     326131333a646638303a396461313a3a2f34382d3438203d3e20323135373435.roa (raw, json)
Hash identifier:          Hw0skpL+uOF/VjaexM0pe2xqMNxmfXtd8/HUhxyp//k=
Subject key identifier:   AE:29:D8:BB:99:DC:96:75:FD:50:CE:5A:88:E9:EB:B2:9B:B9:67:52
Certificate issuer:       /CN=1775F6FE3E8D1497058AFC5AB91A070A2ECF027C
Certificate serial:       0985C461EC5562172D8A8B3317869A39DB91D5FD
Authority key identifier: 17:75:F6:FE:3E:8D:14:97:05:8A:FC:5A:B9:1A:07:0A:2E:CF:02:7C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/1775F6FE3E8D1497058AFC5AB91A070A2ECF027C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/2/326131333a646638303a396461313a3a2f34382d3438203d3e20323135373435.roa
Signing time:             Thu 07 Mar 2024 05:05:45 +0000
ROA not before:           Thu 07 Mar 2024 05:00:45 +0000
ROA not after:            Thu 06 Mar 2025 05:05:45 +0000
asID:                     215745
IP address blocks:        2a13:df80:9da1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:85:c4:61:ec:55:62:17:2d:8a:8b:33:17:86:9a:39:db:91:d5:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1775F6FE3E8D1497058AFC5AB91A070A2ECF027C
        Validity
            Not Before: Mar  7 05:00:45 2024 GMT
            Not After : Mar  6 05:05:45 2025 GMT
        Subject: CN=AE29D8BB99DC9675FD50CE5A88E9EBB29BB96752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:29:74:8b:fc:df:d0:ab:7e:d9:ed:8c:85:f5:
                    2b:ac:62:71:b6:07:fa:3f:ab:cd:86:52:35:88:e5:
                    9f:01:6d:46:4c:18:59:2e:ba:e7:6a:cc:23:78:4f:
                    fe:2a:26:86:9d:b3:85:b5:5b:46:d5:52:84:25:43:
                    40:22:87:5e:26:0d:a6:72:9c:1c:ff:f8:c1:49:88:
                    7e:ed:6e:5e:d6:32:45:c6:7c:e4:65:16:03:5e:5a:
                    a7:94:5e:30:39:cb:3d:86:58:32:04:31:f4:09:c6:
                    71:f1:e0:2f:8a:f4:b6:f9:84:c8:e1:89:7d:94:a7:
                    31:42:6e:8a:26:d5:15:03:b6:82:ab:13:d5:28:96:
                    5b:91:60:0f:c7:5c:35:9b:3b:8c:20:12:d1:2d:9c:
                    81:45:68:01:3d:36:83:1f:4b:9e:6e:ca:88:63:99:
                    78:f1:bc:f2:4c:25:c7:e7:fe:ba:15:04:81:86:54:
                    34:f8:33:83:6b:26:28:b5:c2:ac:8c:3b:89:b6:3d:
                    84:3c:8c:73:9b:23:a9:1f:45:82:b7:21:5d:26:98:
                    4b:1f:81:95:eb:bc:72:e1:55:1f:77:bc:77:a7:0c:
                    67:5d:4b:7d:c0:03:da:ff:30:e5:36:bf:55:bc:14:
                    99:fb:26:2e:e0:ee:fd:d9:a9:d9:30:1a:86:58:d1:
                    82:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:29:D8:BB:99:DC:96:75:FD:50:CE:5A:88:E9:EB:B2:9B:B9:67:52
            X509v3 Authority Key Identifier:
                keyid:17:75:F6:FE:3E:8D:14:97:05:8A:FC:5A:B9:1A:07:0A:2E:CF:02:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/2/1775F6FE3E8D1497058AFC5AB91A070A2ECF027C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/1775F6FE3E8D1497058AFC5AB91A070A2ECF027C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/2/326131333a646638303a396461313a3a2f34382d3438203d3e20323135373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:9da1::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:62:51:1c:52:ba:b8:86:89:ee:84:9d:36:f5:ed:ed:b5:f3:
         7a:1e:1e:ae:0b:6a:12:6c:99:bf:45:cc:b3:a7:7b:a8:0c:1f:
         3a:e1:f2:ac:2c:8d:00:ef:d3:c8:4b:85:84:d6:53:9f:81:bb:
         9e:34:5f:af:95:b1:ed:f7:8f:ef:8c:07:b5:66:9b:c6:17:1c:
         3a:dd:ef:b0:9f:37:30:3b:2a:0a:6c:46:cd:92:a9:92:cb:02:
         ea:55:f0:ed:db:58:84:37:ec:22:55:98:b9:37:84:d5:78:f0:
         0e:82:8f:a8:9c:68:1e:05:75:9f:77:28:0d:0b:5d:f3:db:d1:
         cd:d7:9a:62:ff:26:14:0b:84:3c:8d:1d:cc:c4:6d:0a:b8:f3:
         78:12:c2:fa:c9:f3:db:c0:40:72:07:e8:c6:32:0d:b0:bf:c1:
         ad:0e:05:7c:da:c9:15:f7:a6:96:5e:35:50:30:a1:76:a8:e7:
         b1:8a:af:c4:b1:1f:60:29:7a:ef:45:39:cf:3b:98:a1:5f:71:
         03:3d:a8:4e:10:d9:45:a5:1c:a9:19:60:75:ae:76:31:3c:4f:
         bd:fc:69:61:67:d6:c4:cc:bf:40:ba:04:42:0e:d5:c4:d0:65:
         cc:aa:f7:a7:e9:7c:50:0d:6d:91:c7:b1:2b:87:27:d5:8d:7b:
         2e:66:29:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----