Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/2/326131333a646638373a623830303a3a2f33382d3338203d3e20323136333630.roa
File:                     326131333a646638373a623830303a3a2f33382d3338203d3e20323136333630.roa (raw, json)
Hash identifier:          TtPsUBqSSthwrWcJkbrIfBa7lLeNFhp4OtZNRLMKqdw=
Subject key identifier:   AC:7E:6E:E9:37:E0:EC:E9:9A:35:4F:57:30:0C:43:DE:99:95:77:99
Certificate issuer:       /CN=749282E9AF88D3EC461A32FE84F0AEA353C62B66
Certificate serial:       4763F1D305C3BD06BB28510F515B973FC26D03F4
Authority key identifier: 74:92:82:E9:AF:88:D3:EC:46:1A:32:FE:84:F0:AE:A3:53:C6:2B:66
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/749282E9AF88D3EC461A32FE84F0AEA353C62B66.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/2/326131333a646638373a623830303a3a2f33382d3338203d3e20323136333630.roa
Signing time:             Wed 13 Mar 2024 16:59:34 +0000
ROA not before:           Wed 13 Mar 2024 16:54:34 +0000
ROA not after:            Wed 12 Mar 2025 16:59:34 +0000
asID:                     216360
IP address blocks:        2a13:df87:b800::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:63:f1:d3:05:c3:bd:06:bb:28:51:0f:51:5b:97:3f:c2:6d:03:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749282E9AF88D3EC461A32FE84F0AEA353C62B66
        Validity
            Not Before: Mar 13 16:54:34 2024 GMT
            Not After : Mar 12 16:59:34 2025 GMT
        Subject: CN=AC7E6EE937E0ECE99A354F57300C43DE99957799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:97:e8:5c:fd:7e:20:ff:06:c4:18:f2:eb:7e:
                    a8:5f:fa:fb:b0:8e:23:69:5f:3f:05:09:16:ec:b6:
                    8d:a1:d3:8d:e7:a1:4b:fe:12:6b:7d:d8:c9:a5:23:
                    2d:48:87:c2:16:67:74:66:e5:ac:4c:5c:49:f1:7a:
                    c0:26:96:43:4d:0c:2e:4e:70:de:59:4b:1d:d0:b8:
                    81:18:df:18:c8:e8:dd:7f:76:2b:a0:c7:ec:68:58:
                    84:3f:bb:5d:39:c0:83:1b:5a:64:9a:aa:70:5b:b1:
                    c6:da:4b:a2:6f:b2:ca:c7:c3:f5:f6:49:d0:7f:af:
                    68:fc:1c:14:77:d9:0a:39:83:e6:f6:1b:22:bc:35:
                    78:e3:76:82:a3:fa:b9:b6:3f:f3:6b:33:78:c3:00:
                    a4:3f:3e:de:09:e5:74:af:bf:0a:a0:82:32:11:4a:
                    25:d7:15:06:c6:3e:f6:8e:e0:0a:2e:ca:ac:ad:ba:
                    aa:02:58:a5:c7:30:f7:b0:7a:6c:11:19:8d:d5:f5:
                    bd:4b:da:a0:22:e8:31:f7:a3:e9:24:2b:b3:02:e3:
                    97:09:15:d6:9f:da:07:f3:1c:69:53:79:75:b7:ae:
                    19:d9:11:c9:2d:d6:6a:9b:a3:91:40:1a:06:ad:ef:
                    cd:b2:68:dc:ad:71:3b:80:64:22:fd:b7:73:e8:6c:
                    47:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:7E:6E:E9:37:E0:EC:E9:9A:35:4F:57:30:0C:43:DE:99:95:77:99
            X509v3 Authority Key Identifier:
                keyid:74:92:82:E9:AF:88:D3:EC:46:1A:32:FE:84:F0:AE:A3:53:C6:2B:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/2/749282E9AF88D3EC461A32FE84F0AEA353C62B66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/749282E9AF88D3EC461A32FE84F0AEA353C62B66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/2/326131333a646638373a623830303a3a2f33382d3338203d3e20323136333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df87:b800::/38

    Signature Algorithm: sha256WithRSAEncryption
         77:1c:33:b3:3d:fd:ca:d0:38:8c:5d:ac:29:d3:23:2f:3f:40:
         1b:eb:b5:b4:a6:9b:5b:26:b5:59:69:72:f4:c0:20:04:29:aa:
         7c:4c:38:5f:c0:fa:b0:2d:08:3d:4a:ba:b2:16:e7:a6:68:d8:
         f3:bb:22:5f:7e:d4:b5:00:e1:ce:0e:48:7d:62:ee:b0:07:e9:
         be:50:58:66:7e:15:43:b6:c2:bb:bc:3c:4d:2f:52:1c:75:d1:
         c5:b7:61:8e:da:e4:14:16:3a:31:3d:ae:ca:b5:c4:17:62:d4:
         4e:b0:4d:2d:f9:e0:a2:18:83:1c:33:45:c2:03:bb:86:22:ad:
         09:18:5a:f4:5d:c8:73:57:96:24:0b:65:f4:fb:b0:fb:4e:13:
         b2:8e:3f:40:06:17:a4:7f:b3:2e:1a:37:65:7f:04:4f:51:67:
         52:59:3e:af:94:c8:98:42:24:df:e1:96:a6:be:81:e0:34:4e:
         c1:a2:26:bd:c6:ba:50:79:17:c9:db:c6:8a:08:ae:18:f7:d4:
         66:e5:9f:5a:94:7d:3d:9f:51:50:97:72:c7:a3:9b:36:2a:c2:
         63:b0:e4:cc:5a:d3:da:45:7e:6b:0e:34:b5:f7:b2:12:de:2d:
         59:5a:1a:9b:33:b1:86:93:0d:53:01:a1:65:b9:1e:02:7e:0f:
         e9:07:aa:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----