Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/2/326131333a646638363a3a2f33322d3438203d3e203537383730.roa
File:                     326131333a646638363a3a2f33322d3438203d3e203537383730.roa (raw, json)
Hash identifier:          XxRGP45ByvG/FzoEy5K6EJlIyybaUxwWq8wRiu126t4=
Subject key identifier:   69:A3:AA:D2:A6:B5:C5:C7:65:4F:72:70:8A:88:0A:F4:19:B6:04:05
Certificate issuer:       /CN=D7FA5C40F42A93673A8BDE69A056365EA657104F
Certificate serial:       2D9276A25FE9C4CAC9A75433DA76D90768CCFADF
Authority key identifier: D7:FA:5C:40:F4:2A:93:67:3A:8B:DE:69:A0:56:36:5E:A6:57:10:4F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/D7FA5C40F42A93673A8BDE69A056365EA657104F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/2/326131333a646638363a3a2f33322d3438203d3e203537383730.roa
Signing time:             Wed 19 Apr 2023 00:19:22 +0000
ROA not before:           Wed 19 Apr 2023 00:14:22 +0000
ROA not after:            Wed 17 Apr 2024 00:19:22 +0000
asID:                     57870
IP address blocks:        2a13:df86::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:92:76:a2:5f:e9:c4:ca:c9:a7:54:33:da:76:d9:07:68:cc:fa:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7FA5C40F42A93673A8BDE69A056365EA657104F
        Validity
            Not Before: Apr 19 00:14:22 2023 GMT
            Not After : Apr 17 00:19:22 2024 GMT
        Subject: CN=69A3AAD2A6B5C5C7654F72708A880AF419B60405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:1b:30:f8:bc:23:03:04:e2:c3:9c:53:67:37:
                    4a:a5:8a:a8:17:d5:14:dc:b2:42:d0:1a:53:a2:ad:
                    c3:a2:55:d8:af:17:da:6a:10:17:a5:49:62:d4:6d:
                    3e:49:37:0f:62:24:a9:11:9c:e2:20:74:2e:55:31:
                    68:ba:26:ba:c3:75:8b:61:a8:60:ca:67:41:3d:c3:
                    12:c3:ae:cc:70:3b:91:31:a8:2a:5f:45:bb:91:b6:
                    2d:11:07:16:60:28:f8:08:ce:c3:d2:a5:97:96:14:
                    81:37:62:d3:b0:9e:49:10:93:cf:ff:36:f7:87:21:
                    82:34:87:e6:e6:ff:94:25:ae:03:3a:54:cd:f1:c1:
                    3a:a0:69:c1:13:79:c3:8a:22:73:9c:cb:c6:47:bd:
                    70:bd:c4:4b:ab:0e:71:7d:fe:9e:50:79:1e:df:f1:
                    14:fd:8d:67:61:52:6d:f2:5a:73:05:85:71:d3:c2:
                    ca:a4:ac:bd:e7:79:bc:19:6e:a9:34:a2:fa:84:86:
                    a8:83:a2:af:c6:2b:68:5d:03:ae:f5:43:42:5c:d4:
                    c9:a3:f9:3e:c6:8a:83:84:04:79:42:7e:52:1d:51:
                    79:97:fc:30:1b:96:d5:e5:20:71:66:61:a6:db:ce:
                    47:4b:62:33:bf:59:f0:a5:b0:30:37:98:72:ad:98:
                    30:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A3:AA:D2:A6:B5:C5:C7:65:4F:72:70:8A:88:0A:F4:19:B6:04:05
            X509v3 Authority Key Identifier:
                keyid:D7:FA:5C:40:F4:2A:93:67:3A:8B:DE:69:A0:56:36:5E:A6:57:10:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/2/D7FA5C40F42A93673A8BDE69A056365EA657104F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/D7FA5C40F42A93673A8BDE69A056365EA657104F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/2/326131333a646638363a3a2f33322d3438203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df86::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:2d:2b:fa:bc:5a:23:0e:55:7b:a1:36:ca:88:9b:e0:96:42:
         ac:c5:a9:37:b2:0e:be:dc:00:cd:e7:63:b6:95:0c:d1:42:29:
         1b:20:91:b3:07:cc:e4:07:38:53:49:ee:08:5d:45:14:d9:0b:
         0f:45:56:9c:1c:68:0c:3c:b2:17:80:1f:cf:41:42:93:2e:4f:
         fa:ab:35:c3:9d:a0:9f:f0:ef:a5:40:e4:87:bc:72:43:8b:62:
         d8:5d:6e:8a:56:d7:32:88:9d:23:83:98:42:98:ae:bb:54:63:
         c3:19:59:c2:e9:65:75:ef:ba:b3:d5:dc:24:ae:df:86:57:ac:
         91:d9:f6:69:bc:64:7f:93:20:03:2d:5c:aa:09:f0:95:47:8d:
         02:5c:36:18:70:5a:e0:c0:27:97:ea:5d:24:9a:60:77:ff:27:
         9b:e2:02:dd:cf:5d:3f:5e:55:3a:2c:73:3f:33:9c:a5:bf:af:
         b3:98:30:c6:39:86:19:ff:89:79:2c:dc:69:08:e7:43:2e:75:
         25:47:59:61:5a:f1:7e:dd:3a:ca:c5:12:b4:83:08:62:6c:d5:
         92:92:da:1f:9a:35:de:9a:ff:f3:35:6a:4c:d6:a0:55:37:30:
         6b:21:75:a0:23:5d:c5:39:5f:c1:50:ee:1c:01:e7:bb:1a:b3:
         db:c9:3c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----