Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/2/326131333a646638303a653830303a3a2f33382d3438203d3e20323136333735.roa
File:                     326131333a646638303a653830303a3a2f33382d3438203d3e20323136333735.roa (raw, json)
Hash identifier:          cem4sK5wV149eFd99Ssyvp4ZP2kjEMWgJzv3FKLLO24=
Subject key identifier:   43:0B:9C:E4:72:79:96:80:9B:EC:7B:F1:0F:62:6E:D7:7E:43:DE:CC
Certificate issuer:       /CN=F42DD866D1ED93308763875100791B0AA79AA33E
Certificate serial:       482D512BA1EB94CBAE50C519211D8168470A2A7C
Authority key identifier: F4:2D:D8:66:D1:ED:93:30:87:63:87:51:00:79:1B:0A:A7:9A:A3:3E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/F42DD866D1ED93308763875100791B0AA79AA33E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/2/326131333a646638303a653830303a3a2f33382d3438203d3e20323136333735.roa
Signing time:             Tue 14 Nov 2023 02:06:11 +0000
ROA not before:           Tue 14 Nov 2023 02:01:11 +0000
ROA not after:            Tue 12 Nov 2024 02:06:11 +0000
asID:                     216375
IP address blocks:        2a13:df80:e800::/38 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:2d:51:2b:a1:eb:94:cb:ae:50:c5:19:21:1d:81:68:47:0a:2a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F42DD866D1ED93308763875100791B0AA79AA33E
        Validity
            Not Before: Nov 14 02:01:11 2023 GMT
            Not After : Nov 12 02:06:11 2024 GMT
        Subject: CN=430B9CE4727996809BEC7BF10F626ED77E43DECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a4:44:86:fb:43:dd:04:45:03:f1:f9:0e:3f:
                    39:8c:ea:62:2a:3e:24:eb:1c:0b:ab:96:de:d0:d7:
                    0f:09:a2:4f:a5:35:22:52:36:04:dd:d3:25:f0:26:
                    c1:27:f3:ae:56:d4:11:1a:e1:f8:d8:48:38:af:cf:
                    63:13:82:31:3a:50:00:fb:85:7f:e2:f6:ed:f8:9b:
                    53:f8:e8:fc:3c:f3:bd:d8:f0:fe:f1:e5:8d:09:d8:
                    a9:c2:27:ba:34:be:9b:d3:7a:bb:f1:ac:bc:6e:21:
                    b2:6a:63:4c:99:72:d9:e4:cd:7b:b7:0e:68:2d:b0:
                    7d:d9:d9:84:30:5c:c9:41:f1:a0:52:e8:f5:a5:83:
                    2e:fc:48:64:f0:52:02:70:31:c6:31:ef:83:31:ac:
                    14:f3:da:c5:02:c8:c6:92:25:31:83:24:28:7e:7d:
                    dc:30:02:50:2b:75:9e:20:b1:34:5b:0c:cc:52:ca:
                    d6:38:5e:ec:94:52:f6:5a:9e:1a:e3:9a:0f:50:49:
                    88:c3:db:6c:10:7f:9e:aa:be:80:13:43:1c:f1:82:
                    52:07:1c:01:06:f9:52:99:fb:f1:c5:b5:ca:b1:0b:
                    19:44:a3:49:72:fa:a2:db:c7:99:2c:3e:e7:05:3b:
                    9c:e0:a8:1e:4c:4f:da:68:3d:3c:c7:3b:7d:48:be:
                    68:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:0B:9C:E4:72:79:96:80:9B:EC:7B:F1:0F:62:6E:D7:7E:43:DE:CC
            X509v3 Authority Key Identifier:
                keyid:F4:2D:D8:66:D1:ED:93:30:87:63:87:51:00:79:1B:0A:A7:9A:A3:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/2/F42DD866D1ED93308763875100791B0AA79AA33E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/F42DD866D1ED93308763875100791B0AA79AA33E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/2/326131333a646638303a653830303a3a2f33382d3438203d3e20323136333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:e800::/38

    Signature Algorithm: sha256WithRSAEncryption
         b7:f2:4a:d1:6e:ed:9e:df:b1:2e:0d:6e:04:50:7b:96:c1:18:
         d8:6c:ec:2a:22:b3:4a:29:2f:1f:9c:47:18:d7:1b:50:d6:00:
         86:da:91:1a:03:67:0e:e2:7b:2a:f2:6e:3b:ba:ca:2a:c3:0e:
         d8:0f:44:7e:19:4a:09:9b:d0:77:f6:be:ed:b7:ca:8c:dc:5f:
         c4:1e:35:88:c0:83:a3:23:3d:96:2e:a5:86:8c:76:a8:09:48:
         f9:69:f8:d3:f5:15:b4:e3:72:db:c6:81:ac:69:6c:77:ab:71:
         00:cc:c6:0f:25:df:f8:d5:ed:59:de:6d:7b:b5:db:c8:cc:d9:
         76:0a:a5:7a:0f:a1:6e:0c:ee:69:da:76:27:05:b9:cb:df:85:
         79:1d:6e:3e:a9:87:e8:73:ca:10:1e:27:cd:a0:a1:8f:cb:d9:
         77:d0:bf:79:24:63:20:58:21:dc:5c:69:4b:91:55:1c:d8:ae:
         51:12:a4:9d:7e:a8:e4:57:d0:62:80:17:39:f9:89:79:d6:01:
         10:ca:6a:ef:f4:b2:f1:6f:b7:6c:d0:f0:11:f7:57:ac:15:8f:
         09:4e:67:f9:ab:48:e2:7d:96:0a:70:d7:6b:22:86:35:0f:8f:
         2e:06:9a:f3:44:21:b5:b5:14:fd:40:f6:87:fd:fe:38:d2:92:
         27:70:5a:32
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIUSC1RK6HrlMuuUMUZIR2BaEcKKnwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQyREQ4NjZEMUVEOTMzMDg3NjM4NzUxMDA3OTFCMEFB
NzlBQTMzRTAeFw0yMzExMTQwMjAxMTFaFw0yNDExMTIwMjA2MTFaMDMxMTAvBgNV
BAMTKDQzMEI5Q0U0NzI3OTk2ODA5QkVDN0JGMTBGNjI2RUQ3N0U0M0RFQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2pESG+0PdBEUD8fkOPzmM6mIq
PiTrHAurlt7Q1w8Jok+lNSJSNgTd0yXwJsEn865W1BEa4fjYSDivz2MTgjE6UAD7
hX/i9u34m1P46Pw8873Y8P7x5Y0J2KnCJ7o0vpvTervxrLxuIbJqY0yZctnkzXu3
DmgtsH3Z2YQwXMlB8aBS6PWlgy78SGTwUgJwMcYx74MxrBTz2sUCyMaSJTGDJCh+
fdwwAlArdZ4gsTRbDMxSytY4XuyUUvZanhrjmg9QSYjD22wQf56qvoATQxzxglIH
HAEG+VKZ+/HFtcqxCxlEo0ly+qLbx5ksPucFO5zgqB5MT9poPTzHO31IvmhvAgMB
AAGjggKEMIICgDAdBgNVHQ4EFgQUQwuc5HJ5loCb7HvxD2Ju135D3swwHwYDVR0j
BBgwFoAU9C3YZtHtkzCHY4dRAHkbCqeaoz4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4
NzU1LzIvRjQyREQ4NjZEMUVEOTMzMDg3NjM4NzUxMDA3OTFCMEFBNzlBQTMzRS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wNDAzMmM4Zi0xZDU3LTRj
M2ItOTA0My1hMGU3ZmViZjE2N2QvMC9GNDJERDg2NkQxRUQ5MzMwODc2Mzg3NTEw
MDc5MUIwQUE3OUFBMzNFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8zMTFlNDdjNC0wMmYwLTQ2NTctOTAyMi1kMmI4M2NmZjg3NTUvMi8zMjYxMzEz
MzNhNjQ2NjM4MzAzYTY1MzgzMDMwM2EzYTJmMzMzODJkMzQzODIwM2QzZTIwMzIz
MTM2MzMzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYCKhPfgOgwDQYJKoZIhvcNAQELBQADggEBALfy
StFu7Z7fsS4NbgRQe5bBGNhs7Cois0opLx+cRxjXG1DWAIbakRoDZw7ieyrybju6
yirDDtgPRH4ZSgmb0Hf2vu23yozcX8QeNYjAg6MjPZYupYaMdqgJSPlp+NP1FbTj
ctvGgaxpbHercQDMxg8l3/jV7VnebXu128jM2XYKpXoPoW4M7mnadicFucvfhXkd
bj6ph+hzyhAeJ82goY/L2XfQv3kkYyBYIdxcaUuRVRzYrlESpJ1+qORX0GKAFzn5
iXnWARDKau/0svFvt2zQ8BH3V6wVjwlOZ/mrSOJ9lgpw12sihjUPjy4GmvNEIbW1
FP1A9of9/jjSkidwWjI=
-----END CERTIFICATE-----