Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/2/326131333a646638303a383838303a3a2f34342d3438203d3e203434383137.roa
File:                     326131333a646638303a383838303a3a2f34342d3438203d3e203434383137.roa (raw, json)
Hash identifier:          qkKH5x7kqQlXUoseDkPn3oqNQbH4cchMIaJfFiUNnhc=
Subject key identifier:   D1:5B:A3:FA:3F:DB:6D:CD:E7:A5:95:26:1A:8A:F2:C5:4D:6D:51:04
Certificate issuer:       /CN=F42DD866D1ED93308763875100791B0AA79AA33E
Certificate serial:       5A87CE49EC505E27B9D7B4CEF2D647CDC7ECBC86
Authority key identifier: F4:2D:D8:66:D1:ED:93:30:87:63:87:51:00:79:1B:0A:A7:9A:A3:3E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/F42DD866D1ED93308763875100791B0AA79AA33E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/2/326131333a646638303a383838303a3a2f34342d3438203d3e203434383137.roa
Signing time:             Tue 14 Nov 2023 02:03:52 +0000
ROA not before:           Tue 14 Nov 2023 01:58:52 +0000
ROA not after:            Tue 12 Nov 2024 02:03:52 +0000
asID:                     44817
IP address blocks:        2a13:df80:8880::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:87:ce:49:ec:50:5e:27:b9:d7:b4:ce:f2:d6:47:cd:c7:ec:bc:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F42DD866D1ED93308763875100791B0AA79AA33E
        Validity
            Not Before: Nov 14 01:58:52 2023 GMT
            Not After : Nov 12 02:03:52 2024 GMT
        Subject: CN=D15BA3FA3FDB6DCDE7A595261A8AF2C54D6D5104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3f:a1:97:8e:f1:e7:8f:f6:fb:1a:e1:89:43:
                    1a:f5:e5:8f:38:51:9a:7d:bf:77:0c:0f:18:c7:b1:
                    d0:37:0c:36:ab:68:7b:5b:8e:d2:66:60:01:82:d3:
                    6f:ca:17:fe:1d:77:ee:00:25:f3:71:7f:39:c3:ed:
                    10:68:e0:f7:f1:4f:5e:4b:36:02:1e:43:c5:a0:54:
                    57:c3:42:65:99:0f:32:f5:a4:b2:33:a6:b8:74:10:
                    45:0b:47:11:57:8e:4c:d2:78:63:13:a2:38:65:64:
                    2d:66:42:f6:99:e7:7d:7d:68:8a:a3:ce:b7:0f:d5:
                    51:59:b1:b1:ef:6d:9c:63:4b:f4:47:e5:e2:ae:b5:
                    b3:a0:69:38:3d:8a:7c:b4:09:fe:2e:2a:53:50:af:
                    40:32:0b:28:01:0a:10:3a:5f:ed:4f:e5:e9:90:18:
                    58:23:eb:55:f1:f2:02:bc:66:e5:66:82:54:7c:55:
                    62:37:f4:c0:b7:cf:69:39:fa:5a:ac:63:94:ed:65:
                    f3:c5:f1:b3:f3:bc:79:5e:82:c8:11:13:bb:2c:ea:
                    eb:8f:dd:fb:88:f7:ce:63:75:95:8a:60:6e:3e:f8:
                    5a:8d:c8:ae:b9:c1:c7:a8:41:41:22:3d:8a:72:23:
                    b5:12:e2:74:18:1d:ea:4d:b0:79:f3:ed:c2:fe:65:
                    47:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5B:A3:FA:3F:DB:6D:CD:E7:A5:95:26:1A:8A:F2:C5:4D:6D:51:04
            X509v3 Authority Key Identifier:
                keyid:F4:2D:D8:66:D1:ED:93:30:87:63:87:51:00:79:1B:0A:A7:9A:A3:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/2/F42DD866D1ED93308763875100791B0AA79AA33E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/F42DD866D1ED93308763875100791B0AA79AA33E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/2/326131333a646638303a383838303a3a2f34342d3438203d3e203434383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:8880::/44

    Signature Algorithm: sha256WithRSAEncryption
         b1:0b:21:06:15:64:98:e1:65:c5:e4:b6:28:e9:5c:1d:2b:b9:
         35:9f:88:50:70:b1:3b:9f:cf:c9:13:85:c4:df:e0:9c:14:1f:
         a6:17:95:cb:0b:d8:68:3c:fb:3b:8d:ca:71:15:e3:6c:9e:4b:
         80:36:1a:4a:49:59:0e:5c:30:c3:ba:66:b1:18:ac:58:13:f2:
         d3:1c:a9:1e:58:59:71:93:4c:9d:3f:50:99:c5:01:cc:0f:70:
         7a:fd:8e:3e:e9:25:3a:be:88:8d:fa:05:17:33:ea:51:2c:ba:
         32:5b:3a:0a:ff:15:7c:5f:94:47:89:ad:6f:c9:a4:09:e5:40:
         58:49:ac:2e:0a:32:05:df:b2:bf:90:de:cc:00:8b:65:a6:e2:
         be:77:5a:94:43:97:54:c0:57:1c:ed:6c:9c:11:6c:98:c4:e7:
         58:d6:28:38:38:c4:cd:18:8f:ea:ef:a1:d2:3c:28:a2:f7:21:
         fe:4c:7c:ac:8f:b5:b2:a0:e4:3a:40:48:eb:68:7d:60:27:0c:
         84:3b:4d:f5:f3:24:f1:d1:59:e3:56:c8:22:96:32:ab:40:4a:
         e3:72:59:57:85:ac:08:77:be:fb:5f:c4:b8:46:dc:33:31:5c:
         4f:46:d6:0b:3a:99:86:ec:b0:73:84:74:cc:09:a6:64:9e:c0:
         59:d5:e7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----