Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7b57da9-ce2d-410c-8898-b096f7e90f50/0/326131333a646638343a373030323a3a2f34382d3438203d3e20323136333630.roa
File:                     326131333a646638343a373030323a3a2f34382d3438203d3e20323136333630.roa (raw, json)
Hash identifier:          EYhRiLWapmFW9dnS3VIoVRkVz7N7kaBN42Yvz/jfxcA=
Subject key identifier:   CA:04:D7:C0:59:F0:FE:80:E9:1F:75:C7:04:32:33:25:9F:16:A9:14
Certificate issuer:       /CN=C733D4ED636DF1253237FE26C90A8F298B550237
Certificate serial:       271E5EC5DC0C28ECFFF2A8E770ED27A8508FFDB2
Authority key identifier: C7:33:D4:ED:63:6D:F1:25:32:37:FE:26:C9:0A:8F:29:8B:55:02:37
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/C733D4ED636DF1253237FE26C90A8F298B550237.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7b57da9-ce2d-410c-8898-b096f7e90f50/0/326131333a646638343a373030323a3a2f34382d3438203d3e20323136333630.roa
Signing time:             Sun 22 Oct 2023 01:53:02 +0000
ROA not before:           Sun 22 Oct 2023 01:48:02 +0000
ROA not after:            Sun 20 Oct 2024 01:53:02 +0000
asID:                     216360
IP address blocks:        2a13:df84:7002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:1e:5e:c5:dc:0c:28:ec:ff:f2:a8:e7:70:ed:27:a8:50:8f:fd:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C733D4ED636DF1253237FE26C90A8F298B550237
        Validity
            Not Before: Oct 22 01:48:02 2023 GMT
            Not After : Oct 20 01:53:02 2024 GMT
        Subject: CN=CA04D7C059F0FE80E91F75C7043233259F16A914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9c:d6:95:cd:1c:a5:8c:6c:8f:07:dc:8e:e1:
                    56:9b:34:77:68:8d:4b:a6:b7:b7:1b:87:7c:7a:39:
                    b8:c1:34:44:3f:6b:97:4c:8e:23:8b:d8:bc:9c:36:
                    23:2b:9a:1c:ac:ab:96:da:27:0e:93:c3:ad:8c:56:
                    e9:87:c3:65:72:53:dd:3c:e1:e9:62:0f:7f:f5:fc:
                    c0:4b:00:15:00:c6:cb:f7:fb:11:39:4e:32:83:8f:
                    60:c0:56:7c:99:4f:3a:2c:1a:62:ec:f4:50:42:48:
                    44:1a:12:ab:f3:e0:7b:5a:e3:00:f2:81:ed:94:79:
                    c2:e8:be:c3:13:7c:74:1f:89:8a:09:40:4c:d7:07:
                    b9:17:3b:b6:84:ba:9a:65:fb:05:03:18:fe:af:60:
                    b5:12:c2:39:c5:8a:91:88:d6:50:31:2c:a8:6c:bd:
                    03:4a:c5:03:dd:de:37:41:68:25:aa:57:5e:b5:b1:
                    4a:9b:2a:f3:98:1b:9a:a9:f0:7f:f3:fe:d4:b8:a8:
                    46:17:56:56:04:94:4e:cf:10:ef:73:d0:05:8d:33:
                    67:7d:59:17:8c:6b:c8:79:cf:d2:4d:00:30:db:e4:
                    69:a8:24:f1:9d:ab:7f:b1:e8:34:01:53:7f:98:43:
                    94:96:af:34:63:ed:b8:10:67:8a:61:65:f5:6b:3f:
                    50:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:04:D7:C0:59:F0:FE:80:E9:1F:75:C7:04:32:33:25:9F:16:A9:14
            X509v3 Authority Key Identifier:
                keyid:C7:33:D4:ED:63:6D:F1:25:32:37:FE:26:C9:0A:8F:29:8B:55:02:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7b57da9-ce2d-410c-8898-b096f7e90f50/0/C733D4ED636DF1253237FE26C90A8F298B550237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/C733D4ED636DF1253237FE26C90A8F298B550237.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7b57da9-ce2d-410c-8898-b096f7e90f50/0/326131333a646638343a373030323a3a2f34382d3438203d3e20323136333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df84:7002::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:b9:e0:0d:f0:7e:3c:0e:5a:95:6f:30:8a:cb:d8:2d:e7:5c:
         7e:9d:77:e2:20:8c:12:44:e7:28:e8:4b:e9:bd:1b:d6:7a:8e:
         55:cb:b1:f5:5d:91:0c:76:4b:db:48:b1:da:0e:82:3a:3d:56:
         6a:7d:c7:b7:47:ab:8d:2e:b0:49:8f:06:6c:66:13:3b:ea:b7:
         8b:05:85:25:02:cc:54:4b:a2:aa:cd:07:e8:e2:06:fb:f5:93:
         01:97:70:b6:96:df:81:19:53:37:f6:19:13:a2:6a:ba:d7:f1:
         65:74:36:fb:a4:c9:98:ec:9d:57:66:da:dc:33:04:5c:70:48:
         ae:e5:4e:04:1b:d8:1a:d1:12:2c:3c:ae:45:50:e9:c4:5e:90:
         64:37:34:b4:1c:11:2b:da:77:67:f5:6c:07:e1:e9:05:86:ca:
         7f:92:18:44:a6:b3:db:33:01:bb:6f:27:db:ab:0b:ff:a5:c8:
         03:d5:bd:01:9f:dc:23:2c:24:99:83:57:b4:64:0f:2f:24:5a:
         e0:a3:c2:42:a6:79:57:14:46:9e:99:94:8d:c7:0b:3f:6b:96:
         3a:9d:16:83:bb:5b:ea:e9:ad:53:c7:3e:67:90:8c:ac:fb:f6:
         7c:45:94:75:6e:d4:ba:fb:03:0b:ab:8b:08:06:84:39:50:1d:
         4c:cc:67:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----