Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/0/326130613a363034303a613130333a3a2f34382d3438203d3e203331383938.roa
File:                     326130613a363034303a613130333a3a2f34382d3438203d3e203331383938.roa (raw, json)
Hash identifier:          sXzpA4aHzJzh8mTDksqA/TIHfyACeEoUI9PEqPB1tXc=
Subject key identifier:   15:01:19:1D:E5:76:9A:8F:5F:18:7C:96:D3:EA:0B:F8:BF:64:43:ED
Certificate issuer:       /CN=498074B32285FE33C7B5A4A2FBB588257F5871A7
Certificate serial:       1D0E89C6195CBBD19525CA1143C4E029FD4E91B3
Authority key identifier: 49:80:74:B3:22:85:FE:33:C7:B5:A4:A2:FB:B5:88:25:7F:58:71:A7
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/498074B32285FE33C7B5A4A2FBB588257F5871A7.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/0/326130613a363034303a613130333a3a2f34382d3438203d3e203331383938.roa
Signing time:             Mon 16 Oct 2023 13:04:55 +0000
ROA not before:           Mon 16 Oct 2023 12:59:55 +0000
ROA not after:            Mon 14 Oct 2024 13:04:55 +0000
asID:                     31898
IP address blocks:        2a0a:6040:a103::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:0e:89:c6:19:5c:bb:d1:95:25:ca:11:43:c4:e0:29:fd:4e:91:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=498074B32285FE33C7B5A4A2FBB588257F5871A7
        Validity
            Not Before: Oct 16 12:59:55 2023 GMT
            Not After : Oct 14 13:04:55 2024 GMT
        Subject: CN=1501191DE5769A8F5F187C96D3EA0BF8BF6443ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f2:a8:8c:a3:52:e3:b5:9d:c0:7a:4d:30:d8:
                    bd:a2:37:8e:23:aa:9a:16:f8:25:15:4b:02:5b:e9:
                    bf:0f:04:f9:b5:07:e4:7d:6b:bd:9d:ad:d0:87:e1:
                    71:16:bd:09:ce:1a:07:41:ad:33:f5:c6:38:9a:d5:
                    5d:94:56:f9:59:87:8d:10:29:a3:d1:45:30:ca:71:
                    ae:77:22:97:26:68:e8:60:24:6c:66:5f:90:da:bd:
                    07:8a:e6:dc:99:28:e2:b2:ad:fc:07:90:bf:82:25:
                    96:92:6a:ef:74:a9:26:c5:4e:68:9b:2e:d2:4d:38:
                    62:ae:44:00:4b:e8:5f:2b:80:39:00:63:e9:7e:db:
                    14:a1:e9:19:e2:b2:f2:9e:77:a8:a2:ea:c6:4b:2b:
                    76:7f:02:1a:37:9b:a5:20:43:9b:2d:8e:ca:27:7b:
                    4c:12:97:aa:3b:cc:b4:b9:1b:58:16:68:1c:4f:0b:
                    b4:2b:b1:c0:87:87:f7:f2:27:04:df:1d:f0:01:7e:
                    9f:a8:69:c1:32:67:54:76:6c:87:10:31:69:36:89:
                    d2:ed:0c:8f:27:65:bd:a6:0e:8d:69:0b:17:10:ce:
                    b4:b7:ee:a9:50:88:a5:14:a6:ce:a5:9a:9d:1f:e0:
                    94:a4:7c:99:23:13:75:de:4d:f3:ca:34:d9:b2:e3:
                    0e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:01:19:1D:E5:76:9A:8F:5F:18:7C:96:D3:EA:0B:F8:BF:64:43:ED
            X509v3 Authority Key Identifier:
                keyid:49:80:74:B3:22:85:FE:33:C7:B5:A4:A2:FB:B5:88:25:7F:58:71:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/0/498074B32285FE33C7B5A4A2FBB588257F5871A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/498074B32285FE33C7B5A4A2FBB588257F5871A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/0/326130613a363034303a613130333a3a2f34382d3438203d3e203331383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:a103::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:2c:1d:be:6a:5c:d8:90:33:35:3e:6d:19:45:7b:dd:c2:f3:
         cd:3e:93:aa:f5:9d:62:b8:d2:34:0f:06:30:8f:54:fd:9f:6e:
         4d:d6:2e:a9:aa:19:39:43:11:4d:13:5f:1c:85:d9:1f:52:1b:
         8e:e8:6d:11:e1:f2:5e:75:da:53:33:1a:55:32:e0:d7:a9:66:
         9d:be:80:c6:7c:8f:c6:a6:9f:95:11:63:4c:89:60:4f:c4:8c:
         d0:70:39:a0:cf:84:f3:5c:e2:61:e9:ea:fb:02:5a:46:23:56:
         b9:a9:bb:be:26:3c:43:75:5b:9d:e9:80:75:b7:6b:89:00:40:
         c5:8a:27:32:d4:94:cd:f4:de:56:f1:b8:75:83:25:c3:f5:f4:
         fa:d4:65:d6:53:06:d5:7e:96:32:e8:b6:44:26:4f:98:2c:12:
         9c:52:cb:eb:6a:fe:af:fc:ca:0d:5d:52:2a:f6:c7:67:6c:6a:
         1d:e5:0b:9f:c5:1f:ca:99:ea:f6:c0:11:a6:e0:f9:fc:32:d8:
         cf:f8:e5:5c:4d:f3:c9:f0:2a:ae:12:c3:06:73:74:bb:12:4a:
         d6:c8:33:7e:67:76:b5:34:0a:5f:71:a4:4d:42:f0:d1:52:04:
         af:da:7f:28:51:e4:44:fa:a2:25:f3:e9:52:77:ab:bc:5d:c7:
         1e:a7:f5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----