Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/2/326131333a646638303a333830363a3a2f34382d3438203d3e20323136333735.roa
File:                     326131333a646638303a333830363a3a2f34382d3438203d3e20323136333735.roa (raw, json)
Hash identifier:          jmee1L2B6qiznR6ZGyRV6ISDmbRcr84qU/Tq21F7ZWw=
Subject key identifier:   2E:B0:1F:7E:F2:D1:4E:69:2A:AD:21:E6:41:07:FF:3E:07:7C:5C:90
Certificate issuer:       /CN=F42DD866D1ED93308763875100791B0AA79AA33E
Certificate serial:       650D06F8F95FEACECC389C61126D19E803EFA1A0
Authority key identifier: F4:2D:D8:66:D1:ED:93:30:87:63:87:51:00:79:1B:0A:A7:9A:A3:3E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/F42DD866D1ED93308763875100791B0AA79AA33E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/2/326131333a646638303a333830363a3a2f34382d3438203d3e20323136333735.roa
Signing time:             Tue 14 Nov 2023 02:02:50 +0000
ROA not before:           Tue 14 Nov 2023 01:57:50 +0000
ROA not after:            Tue 12 Nov 2024 02:02:50 +0000
asID:                     216375
IP address blocks:        2a13:df80:3806::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:0d:06:f8:f9:5f:ea:ce:cc:38:9c:61:12:6d:19:e8:03:ef:a1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F42DD866D1ED93308763875100791B0AA79AA33E
        Validity
            Not Before: Nov 14 01:57:50 2023 GMT
            Not After : Nov 12 02:02:50 2024 GMT
        Subject: CN=2EB01F7EF2D14E692AAD21E64107FF3E077C5C90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:26:e1:26:e5:38:b1:6f:c2:f4:d3:f6:3e:a1:
                    9c:69:a8:5d:ef:21:b3:ac:5d:74:fc:ca:60:c6:bc:
                    e9:25:65:bc:95:b8:6d:73:47:cd:4c:90:8a:18:6c:
                    c1:17:75:eb:86:47:9a:5f:b6:e7:3d:63:08:b3:4c:
                    b6:90:a1:0f:9d:63:bc:c4:54:a1:a8:6b:45:82:39:
                    83:fb:88:fa:2a:f1:de:8b:23:80:87:45:e9:56:e5:
                    b2:12:05:23:df:32:fd:fb:0b:f1:66:a4:1f:de:1b:
                    73:31:7a:7c:3d:f9:8c:68:fc:04:2f:bc:80:b2:64:
                    63:e7:02:9d:6b:0b:f5:1d:83:d9:c2:77:5e:42:4d:
                    8f:40:88:f5:04:b8:c1:08:35:88:38:bd:54:e1:ce:
                    53:7b:b9:03:b7:9c:c2:31:0f:dc:fb:e4:bf:6e:f3:
                    93:65:76:a7:61:d9:01:ec:c8:04:64:4a:8f:21:f6:
                    a0:5a:2e:61:f1:62:d8:1e:4c:ed:ce:f3:a2:e6:0d:
                    db:5f:4c:5b:7d:14:d3:ae:2e:87:67:7e:fa:81:08:
                    76:73:65:16:04:cd:7c:ac:9d:3d:47:63:a7:f6:ec:
                    91:c9:0b:8b:22:90:dd:bf:66:08:5e:cf:22:33:d4:
                    4f:67:6b:e4:60:ea:0c:36:db:04:d7:5f:f7:02:82:
                    e7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B0:1F:7E:F2:D1:4E:69:2A:AD:21:E6:41:07:FF:3E:07:7C:5C:90
            X509v3 Authority Key Identifier:
                keyid:F4:2D:D8:66:D1:ED:93:30:87:63:87:51:00:79:1B:0A:A7:9A:A3:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/2/F42DD866D1ED93308763875100791B0AA79AA33E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/F42DD866D1ED93308763875100791B0AA79AA33E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/2/326131333a646638303a333830363a3a2f34382d3438203d3e20323136333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:3806::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:bf:17:d5:15:7d:f2:2f:a3:0e:5a:07:47:c5:db:0f:16:ac:
         ec:35:a5:89:6f:c2:23:18:0b:47:92:0a:fe:6b:55:44:3d:2a:
         8e:b5:67:b7:80:1c:10:64:48:fb:51:0a:64:db:00:89:ad:2a:
         05:fe:af:5b:45:f6:8d:32:eb:74:43:cb:4c:d2:f5:96:50:5b:
         dd:f1:46:4e:12:47:e6:4f:80:c9:0e:7c:41:2c:bf:87:ce:18:
         c3:3e:7c:00:6f:5e:20:0c:60:0c:22:27:d1:06:e4:2c:55:f1:
         b6:b0:da:ff:65:e1:08:5b:ea:ff:a8:8a:f9:5a:1b:df:d5:6b:
         87:3c:e3:4b:b7:de:64:87:c8:ac:fa:f1:1a:57:ad:e3:f1:a1:
         c7:a1:ed:8a:69:2f:02:a1:74:db:3c:e6:78:cc:f1:b0:4a:a0:
         13:6f:d7:13:c9:c3:e0:2d:47:d6:f7:5d:85:95:0d:f5:29:32:
         e5:6a:c7:32:76:a8:b8:0b:2d:d9:4d:80:81:a6:05:4f:27:43:
         f4:0f:b6:95:b2:e5:18:f7:0c:a7:9f:00:69:72:74:7b:8c:11:
         35:7b:aa:1b:50:ed:f4:45:04:d4:50:dd:fd:ec:5b:be:6a:79:
         bb:4b:0c:bc:76:95:59:3f:52:bb:07:c1:9f:a6:c3:03:aa:2b:
         4b:ea:a8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----