Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/2/326131333a646638373a373130303a3a2f34382d3438203d3e20323136303432.roa
File:                     326131333a646638373a373130303a3a2f34382d3438203d3e20323136303432.roa (raw, json)
Hash identifier:          V74QbRN2l1WXYOCELCYFH6sbyNxSK2ODGTZfXDegDzE=
Subject key identifier:   DF:B1:B7:18:5C:DA:82:7B:24:8C:74:4B:2C:91:F5:EA:29:1A:61:CB
Certificate issuer:       /CN=749282E9AF88D3EC461A32FE84F0AEA353C62B66
Certificate serial:       544D036B7861CE526A6C9192A7C5CDAA07F4B679
Authority key identifier: 74:92:82:E9:AF:88:D3:EC:46:1A:32:FE:84:F0:AE:A3:53:C6:2B:66
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/749282E9AF88D3EC461A32FE84F0AEA353C62B66.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/2/326131333a646638373a373130303a3a2f34382d3438203d3e20323136303432.roa
Signing time:             Fri 05 Apr 2024 19:44:33 +0000
ROA not before:           Fri 05 Apr 2024 19:39:33 +0000
ROA not after:            Fri 04 Apr 2025 19:44:33 +0000
asID:                     216042
IP address blocks:        2a13:df87:7100::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:4d:03:6b:78:61:ce:52:6a:6c:91:92:a7:c5:cd:aa:07:f4:b6:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749282E9AF88D3EC461A32FE84F0AEA353C62B66
        Validity
            Not Before: Apr  5 19:39:33 2024 GMT
            Not After : Apr  4 19:44:33 2025 GMT
        Subject: CN=DFB1B7185CDA827B248C744B2C91F5EA291A61CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cc:5d:3c:a6:6f:30:a8:17:d9:9f:3f:67:b7:
                    7f:1d:d0:c6:a5:ee:46:5a:1f:bd:47:58:e3:88:75:
                    03:bb:2f:8e:17:bb:50:f1:2a:1d:15:9b:d1:66:14:
                    56:80:0b:2e:21:34:ee:b6:97:a4:d0:a7:51:cf:76:
                    4f:5d:b1:06:fe:6c:84:dd:78:39:b3:33:bb:8e:c8:
                    ff:f8:f2:d1:0c:af:ef:ee:49:2e:2f:12:5c:71:35:
                    aa:1d:96:c4:9d:a8:db:f4:99:1d:92:85:c6:bc:4b:
                    18:9b:35:dc:3c:13:58:83:e9:5c:ef:60:6f:c3:57:
                    3a:e3:ec:b5:ba:49:dd:bd:c3:f6:20:11:d9:57:32:
                    db:d3:2d:9e:6b:ce:02:bd:2a:57:9d:3a:72:40:41:
                    03:fe:c3:da:2b:73:54:20:54:99:66:f2:9a:22:1b:
                    89:96:58:68:ca:be:c4:ec:78:6b:c2:ed:f6:4c:d6:
                    33:ac:74:f4:6f:3a:ff:dd:9f:64:0c:1b:e1:c9:e4:
                    99:fa:d8:6a:02:72:d9:1f:fd:4e:67:c4:16:b8:62:
                    0c:bc:8c:2a:4c:5f:c0:30:83:c0:26:5a:32:d7:cd:
                    2c:6e:7e:1b:96:90:de:24:c9:35:fa:3b:3c:76:9c:
                    5a:b7:06:bb:d4:1e:01:da:fb:7e:f1:b6:9b:e0:eb:
                    69:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B1:B7:18:5C:DA:82:7B:24:8C:74:4B:2C:91:F5:EA:29:1A:61:CB
            X509v3 Authority Key Identifier:
                keyid:74:92:82:E9:AF:88:D3:EC:46:1A:32:FE:84:F0:AE:A3:53:C6:2B:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/2/749282E9AF88D3EC461A32FE84F0AEA353C62B66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/749282E9AF88D3EC461A32FE84F0AEA353C62B66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/2/326131333a646638373a373130303a3a2f34382d3438203d3e20323136303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df87:7100::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:93:53:4a:f9:2c:19:00:63:9b:05:7f:c9:f9:2a:20:9f:7e:
         5c:c7:c1:3a:96:00:24:0c:b6:3a:46:3f:1e:34:62:28:a5:f3:
         02:9f:73:07:8b:8b:02:9f:3f:34:c0:f9:d3:3a:bc:c3:b9:31:
         e6:51:5b:54:c8:d8:ef:0f:d8:7c:52:2a:be:f8:58:d3:88:63:
         5a:8f:80:59:6e:24:94:a7:d1:fd:aa:59:12:9e:bc:85:c3:6d:
         10:2b:80:ee:21:da:9c:5f:16:b5:dd:40:bc:c4:86:fe:3a:63:
         46:48:12:7a:e3:60:c0:52:ac:cf:18:b6:a8:fc:b1:d1:44:ac:
         7e:01:d7:15:10:0f:6e:22:92:93:7d:f6:7b:15:fe:17:3b:ea:
         be:ff:3f:d2:55:3a:9c:6b:a4:bf:3a:91:84:d8:ed:52:f5:3f:
         6d:e7:7f:df:84:64:ca:bb:9d:9d:96:97:3b:a1:dd:79:f4:ee:
         ab:49:26:38:85:68:33:3d:3a:34:4c:6a:d6:c1:c4:b3:48:e8:
         79:2f:50:09:7e:3e:be:28:e8:71:be:00:a1:1b:77:50:66:70:
         db:a9:ec:2b:5b:7e:d6:85:33:9f:2e:a1:b9:a9:08:d1:1f:cc:
         7a:d3:d3:2b:02:5f:3e:07:e3:08:92:d5:7e:4c:da:91:a5:25:
         eb:af:54:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----