Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/2/326131333a646638353a3a2f33322d3438203d3e203537383730.roa
File:                     326131333a646638353a3a2f33322d3438203d3e203537383730.roa (raw, json)
Hash identifier:          39CeOBXMm+vOhk2IC4OO2yGQA2UsK21l8qVUYHgDrJ8=
Subject key identifier:   04:26:88:D3:52:30:65:45:8C:5F:77:52:7A:A6:F4:28:37:CC:1B:13
Certificate issuer:       /CN=D7FA5C40F42A93673A8BDE69A056365EA657104F
Certificate serial:       24F7C32B7C094AF78C62019515D9C07492991C7E
Authority key identifier: D7:FA:5C:40:F4:2A:93:67:3A:8B:DE:69:A0:56:36:5E:A6:57:10:4F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/D7FA5C40F42A93673A8BDE69A056365EA657104F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/2/326131333a646638353a3a2f33322d3438203d3e203537383730.roa
Signing time:             Sat 06 May 2023 21:22:41 +0000
ROA not before:           Sat 06 May 2023 21:17:41 +0000
ROA not after:            Sat 04 May 2024 21:22:41 +0000
asID:                     57870
IP address blocks:        2a13:df85::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f7:c3:2b:7c:09:4a:f7:8c:62:01:95:15:d9:c0:74:92:99:1c:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7FA5C40F42A93673A8BDE69A056365EA657104F
        Validity
            Not Before: May  6 21:17:41 2023 GMT
            Not After : May  4 21:22:41 2024 GMT
        Subject: CN=042688D3523065458C5F77527AA6F42837CC1B13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5f:b0:99:78:97:7c:6f:82:21:b6:4a:10:8d:
                    31:fb:76:0c:4e:89:38:45:4d:5a:97:01:0f:c1:9c:
                    c7:44:d2:23:45:c9:8c:bf:35:a5:4e:cf:b8:02:85:
                    7f:6b:14:47:92:3b:e2:64:81:03:b6:e5:b5:e3:04:
                    ce:53:6b:2f:cd:82:f8:de:62:16:56:b4:a2:8f:23:
                    df:fc:0b:f4:f2:ef:a1:e8:99:e8:56:3c:45:e4:33:
                    ce:2c:ea:91:ba:48:d9:08:ad:cd:ef:56:13:b7:0a:
                    95:0c:d4:80:0d:06:ab:8e:99:6a:8d:00:b5:81:0c:
                    4f:6e:e4:54:c3:63:e2:df:1f:b4:7c:c1:00:90:ab:
                    b1:a4:b2:85:54:5d:01:48:f4:7a:56:7e:d2:ae:d0:
                    1a:b3:9d:8a:96:80:6f:98:b5:61:f7:41:d4:93:60:
                    f2:aa:fc:bb:bc:b9:aa:75:c2:93:50:be:39:74:18:
                    d5:97:82:c2:8a:a2:c8:66:ac:7b:2e:4e:63:c2:bf:
                    9f:29:ac:b7:a0:b7:2e:79:a2:70:9c:8b:20:21:50:
                    55:87:c0:82:3f:3c:51:d0:4c:99:aa:a7:88:8b:b6:
                    9a:5d:0f:1a:3e:fe:a7:18:5d:1f:08:d5:02:b6:be:
                    d4:9e:b2:cb:6a:60:d8:8c:c1:6c:ea:b1:96:0b:87:
                    36:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:26:88:D3:52:30:65:45:8C:5F:77:52:7A:A6:F4:28:37:CC:1B:13
            X509v3 Authority Key Identifier:
                keyid:D7:FA:5C:40:F4:2A:93:67:3A:8B:DE:69:A0:56:36:5E:A6:57:10:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/2/D7FA5C40F42A93673A8BDE69A056365EA657104F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/D7FA5C40F42A93673A8BDE69A056365EA657104F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/2/326131333a646638353a3a2f33322d3438203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df85::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:b5:55:ea:17:fd:3b:ff:76:e6:4f:3c:0c:54:c4:af:66:0b:
         23:0f:32:a7:8c:55:1c:e8:58:96:43:ef:66:bf:fa:a6:f2:81:
         c8:39:bf:c8:2a:27:d0:9c:99:3d:44:66:15:3f:94:0d:01:9d:
         26:bb:36:7c:dc:d1:0f:4c:88:78:4a:0f:aa:33:9d:fb:d8:d3:
         f3:2f:3e:eb:73:d8:9c:ed:56:36:31:c1:b6:95:49:59:e7:e1:
         3f:fa:31:a1:1b:d8:27:a2:cb:bf:c4:51:e7:ff:61:06:6d:ff:
         6e:78:84:a8:dc:2a:9a:86:ed:6e:07:f4:e0:bc:40:ed:7e:b5:
         95:d9:e1:8e:37:9e:4c:2b:f3:39:4e:f1:82:aa:3d:df:de:ea:
         0a:78:fe:0c:3e:74:ac:25:a1:9d:24:b6:0b:c3:67:ed:a0:b1:
         d6:3c:7a:09:ca:e4:52:4b:20:40:14:2f:8d:ca:35:34:d5:eb:
         71:5d:17:e7:5f:aa:10:99:fa:e3:16:3c:ae:2c:6e:58:c3:0d:
         26:f0:4d:51:89:cf:a4:4d:fb:dd:97:6d:25:d0:55:9f:03:01:
         34:6b:3c:51:fd:89:e3:8d:95:6e:64:7a:e5:f6:1b:58:9e:f6:
         4d:b9:55:66:56:57:98:01:c0:77:ad:6f:13:89:e1:43:44:9a:
         99:3e:91:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----