Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/2/326131333a646638353a623030623a3a2f34382d3438203d3e203630373433.roa
File:                     326131333a646638353a623030623a3a2f34382d3438203d3e203630373433.roa (raw, json)
Hash identifier:          DY1QFBf7XUNw5rQcSzd176VKGqEPPR5GwKiOizY6f2I=
Subject key identifier:   C7:EC:C4:8C:05:E8:22:B9:88:FC:5B:DA:B9:3B:EB:D9:14:F6:B5:CE
Certificate issuer:       /CN=D7FA5C40F42A93673A8BDE69A056365EA657104F
Certificate serial:       0B7441D08F15E46AE01CC8BF023396000DB3365A
Authority key identifier: D7:FA:5C:40:F4:2A:93:67:3A:8B:DE:69:A0:56:36:5E:A6:57:10:4F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/D7FA5C40F42A93673A8BDE69A056365EA657104F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/2/326131333a646638353a623030623a3a2f34382d3438203d3e203630373433.roa
Signing time:             Sat 06 May 2023 21:22:55 +0000
ROA not before:           Sat 06 May 2023 21:17:55 +0000
ROA not after:            Sat 04 May 2024 21:22:55 +0000
asID:                     60743
IP address blocks:        2a13:df85:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:74:41:d0:8f:15:e4:6a:e0:1c:c8:bf:02:33:96:00:0d:b3:36:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7FA5C40F42A93673A8BDE69A056365EA657104F
        Validity
            Not Before: May  6 21:17:55 2023 GMT
            Not After : May  4 21:22:55 2024 GMT
        Subject: CN=C7ECC48C05E822B988FC5BDAB93BEBD914F6B5CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dd:64:fc:02:3e:b0:19:88:d7:fa:ec:12:3e:
                    c0:66:eb:3e:05:30:d8:ae:da:90:3d:e4:fc:d9:a5:
                    e1:23:b3:91:cb:7e:24:34:e9:96:4c:ac:58:0e:66:
                    27:6e:86:45:3f:b1:e3:a2:79:b1:76:94:76:91:ea:
                    1e:a2:9f:e9:86:b9:d5:e9:c4:a7:c2:f1:59:cb:f0:
                    15:37:c3:28:df:aa:53:0a:ab:9f:95:7e:38:89:81:
                    af:3a:f0:86:bd:4d:b7:46:e0:f0:be:da:13:2d:f2:
                    02:34:16:0d:ee:98:05:b1:d2:97:66:6d:c1:7c:90:
                    90:a1:4f:49:3b:de:91:e6:22:c0:cb:2b:68:cf:d1:
                    1c:84:22:78:39:f6:f7:42:77:d5:94:13:dd:ff:10:
                    5f:cc:30:bb:8a:5b:cb:41:41:85:ae:32:62:e8:6c:
                    8f:53:34:1f:e3:90:27:9d:df:77:e2:26:f2:d2:de:
                    62:46:f5:ed:05:d9:a1:2e:05:d4:57:04:6c:b8:78:
                    10:46:97:66:21:ab:a3:d2:90:e2:0b:37:be:67:52:
                    66:92:b0:26:76:b0:33:70:1e:ad:64:53:f9:e5:1f:
                    60:40:63:65:9a:7a:66:3e:7e:01:1f:01:bc:e1:5b:
                    19:bf:ca:06:dc:b4:31:07:4b:30:f3:44:1e:ff:2e:
                    1e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:EC:C4:8C:05:E8:22:B9:88:FC:5B:DA:B9:3B:EB:D9:14:F6:B5:CE
            X509v3 Authority Key Identifier:
                keyid:D7:FA:5C:40:F4:2A:93:67:3A:8B:DE:69:A0:56:36:5E:A6:57:10:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/2/D7FA5C40F42A93673A8BDE69A056365EA657104F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/D7FA5C40F42A93673A8BDE69A056365EA657104F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/2/326131333a646638353a623030623a3a2f34382d3438203d3e203630373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df85:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:1e:47:71:8a:ea:b4:a4:47:f7:5d:7d:d0:39:29:c3:e1:c8:
         f1:6d:50:1b:84:fe:8a:d3:20:4b:9f:bd:17:81:77:a9:3d:b3:
         aa:f5:4f:4a:5e:55:6f:c5:3c:af:c3:e0:18:14:24:1d:41:96:
         fa:ed:a5:b1:e4:88:25:65:9b:ba:0e:5c:76:12:20:c1:48:b4:
         5b:73:d1:ba:74:95:30:2d:ce:90:b8:4c:a7:58:9f:7b:26:2e:
         cb:b4:da:25:12:96:7f:09:4b:53:99:10:23:03:6f:1b:4e:7d:
         e8:ef:e6:5f:a1:99:92:38:44:82:38:26:65:fd:20:10:5f:9f:
         45:85:c7:87:4f:79:bb:e4:cc:2c:e2:f5:8b:25:84:f7:f3:d1:
         e7:20:2e:07:d2:c5:ac:4c:52:93:99:86:e3:b9:b2:3b:f6:b5:
         ad:aa:64:6f:d5:92:07:84:ca:6d:1b:4b:f7:4f:13:80:d6:7e:
         21:a5:31:97:bb:aa:4c:e1:47:99:61:bd:80:fc:c4:1d:cc:e3:
         3a:77:81:63:02:8e:4b:ff:68:27:b6:ee:46:1c:55:c6:83:c2:
         13:58:f2:e3:a3:17:2a:30:fa:38:2e:ad:83:81:7f:c9:37:62:
         35:67:6a:cc:8f:f4:cc:ef:75:86:ba:e0:2a:f6:38:23:0c:94:
         90:e3:34:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----