Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/2/326131333a646638303a383838303a3a2f34342d3438203d3e20323136333735.roa
File:                     326131333a646638303a383838303a3a2f34342d3438203d3e20323136333735.roa (raw, json)
Hash identifier:          Z362I0awB5Q2io4M3hSMElyiPFUnx6CA9U6eXmynUwg=
Subject key identifier:   B7:90:50:CE:64:CC:17:F3:49:97:51:21:90:A0:47:02:85:DF:21:60
Certificate issuer:       /CN=F42DD866D1ED93308763875100791B0AA79AA33E
Certificate serial:       4243B9673EB1FDC98E25AF80319CAF81A2A689F2
Authority key identifier: F4:2D:D8:66:D1:ED:93:30:87:63:87:51:00:79:1B:0A:A7:9A:A3:3E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/F42DD866D1ED93308763875100791B0AA79AA33E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/2/326131333a646638303a383838303a3a2f34342d3438203d3e20323136333735.roa
Signing time:             Tue 14 Nov 2023 02:03:31 +0000
ROA not before:           Tue 14 Nov 2023 01:58:31 +0000
ROA not after:            Tue 12 Nov 2024 02:03:31 +0000
asID:                     216375
IP address blocks:        2a13:df80:8880::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:43:b9:67:3e:b1:fd:c9:8e:25:af:80:31:9c:af:81:a2:a6:89:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F42DD866D1ED93308763875100791B0AA79AA33E
        Validity
            Not Before: Nov 14 01:58:31 2023 GMT
            Not After : Nov 12 02:03:31 2024 GMT
        Subject: CN=B79050CE64CC17F34997512190A0470285DF2160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4c:1b:4b:5e:f1:0d:21:d7:e8:2e:bc:6b:f7:
                    8c:cd:93:49:84:8c:0f:3f:c2:14:0b:8a:b6:d4:d5:
                    dd:00:20:42:68:6b:ab:aa:9a:a4:82:46:22:ac:eb:
                    0d:be:e0:04:9d:bb:59:99:67:bb:eb:5b:64:c4:ba:
                    e4:c9:f2:8f:c0:b6:da:63:54:28:df:3c:ea:1e:f3:
                    80:bc:1f:df:9a:dd:51:13:17:4b:66:8d:f8:a1:62:
                    50:ac:a0:88:84:0b:fc:61:ff:ad:31:9b:87:bd:62:
                    6b:8d:9d:88:36:21:c3:88:86:8e:93:cd:15:6d:18:
                    54:b6:2b:6e:5f:08:7a:bc:c2:62:8b:50:4f:80:4f:
                    4f:78:99:46:52:31:5b:fc:c9:fd:28:14:56:9d:38:
                    45:d9:c1:9b:0e:4f:1c:ba:32:1a:e0:a8:bf:7a:1b:
                    09:25:04:09:33:f4:7c:16:93:95:73:05:c6:e7:c6:
                    74:8c:b9:a0:48:81:ce:8d:9f:54:f3:a4:7c:24:6f:
                    4d:33:73:05:78:e6:5f:ba:ed:9b:76:c8:39:2a:e1:
                    39:16:bb:c9:ce:37:9e:bc:51:66:48:76:61:91:2e:
                    28:08:42:9c:70:36:5a:6a:3e:bf:d6:ba:45:6d:38:
                    4d:d1:2d:b2:ff:60:ba:7c:9c:fb:4b:58:13:16:26:
                    9c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:90:50:CE:64:CC:17:F3:49:97:51:21:90:A0:47:02:85:DF:21:60
            X509v3 Authority Key Identifier:
                keyid:F4:2D:D8:66:D1:ED:93:30:87:63:87:51:00:79:1B:0A:A7:9A:A3:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/2/F42DD866D1ED93308763875100791B0AA79AA33E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/F42DD866D1ED93308763875100791B0AA79AA33E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/2/326131333a646638303a383838303a3a2f34342d3438203d3e20323136333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:8880::/44

    Signature Algorithm: sha256WithRSAEncryption
         04:9e:d6:60:da:ea:3b:9c:65:5e:c9:3d:e3:8a:ae:ac:97:b5:
         3a:d9:75:76:3a:a3:3b:ca:48:07:14:e4:07:14:eb:08:97:c9:
         ba:02:a2:80:d8:e2:d9:5a:0e:45:61:b3:6a:89:c5:24:39:cc:
         bd:c5:2a:7b:06:a6:74:f2:7c:fc:c1:00:0e:ea:d9:2e:6b:66:
         95:e1:c3:7b:93:26:90:8c:ec:48:db:02:df:d5:09:1f:b8:24:
         38:7b:de:26:b0:5a:62:f3:8e:55:d9:eb:10:79:bc:26:44:ce:
         b5:9f:32:46:2d:d6:79:b1:17:9e:16:ad:e3:c0:54:02:3b:9e:
         3b:7e:ef:02:09:38:8e:ca:a5:1c:17:5b:85:2b:74:c6:14:a5:
         cb:b6:b6:cb:17:fc:fa:74:72:e3:f3:7c:35:ef:0e:56:db:bb:
         e5:1d:8d:3b:d5:cf:91:cd:86:b7:da:49:e1:eb:8a:74:17:18:
         ab:b4:1c:62:ad:48:ae:39:fd:58:ad:2c:e0:d6:1a:20:ea:1f:
         4d:90:33:53:76:00:48:da:39:72:f0:55:b0:63:a4:24:0a:ac:
         bf:9d:bb:f9:60:3b:8e:51:98:3b:f0:3f:be:1b:53:30:8a:d5:
         2e:e9:ff:26:e3:90:ed:f3:aa:40:bf:82:dc:b8:65:ca:81:94:
         af:2f:7f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----