Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/2/326131333a646638373a3a2f33322d3438203d3e203537383730.roa
File:                     326131333a646638373a3a2f33322d3438203d3e203537383730.roa (raw, json)
Hash identifier:          209wrJQ6zKjk/N8n+nHABVFB7nHl9tgHUzJ2/ibpnmY=
Subject key identifier:   01:04:09:3E:DC:3C:EA:A6:32:67:86:D7:B7:CF:F1:E6:75:4D:E1:D1
Certificate issuer:       /CN=D7FA5C40F42A93673A8BDE69A056365EA657104F
Certificate serial:       20E26ADDFBD041118FFE436CDBB2FF57B66AAB22
Authority key identifier: D7:FA:5C:40:F4:2A:93:67:3A:8B:DE:69:A0:56:36:5E:A6:57:10:4F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/D7FA5C40F42A93673A8BDE69A056365EA657104F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/2/326131333a646638373a3a2f33322d3438203d3e203537383730.roa
Signing time:             Wed 19 Apr 2023 00:19:22 +0000
ROA not before:           Wed 19 Apr 2023 00:14:22 +0000
ROA not after:            Wed 17 Apr 2024 00:19:22 +0000
asID:                     57870
IP address blocks:        2a13:df87::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e2:6a:dd:fb:d0:41:11:8f:fe:43:6c:db:b2:ff:57:b6:6a:ab:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7FA5C40F42A93673A8BDE69A056365EA657104F
        Validity
            Not Before: Apr 19 00:14:22 2023 GMT
            Not After : Apr 17 00:19:22 2024 GMT
        Subject: CN=0104093EDC3CEAA6326786D7B7CFF1E6754DE1D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:41:6f:dc:81:e1:46:ef:fe:39:db:57:13:55:
                    e4:2a:30:b6:a2:ee:67:ca:cc:5c:83:2e:2d:55:85:
                    c0:4d:d7:a8:92:7e:3f:ef:05:b0:7c:8a:dd:e0:eb:
                    8b:f5:d3:e2:d4:96:c9:be:c3:9f:89:ac:0b:fa:2c:
                    9c:5a:69:10:db:b5:26:b9:3a:a0:67:31:32:b8:29:
                    0b:bc:f6:3e:5d:86:51:50:88:59:5f:b3:e2:4f:0d:
                    4f:41:fd:f6:82:e3:66:0a:cd:d6:b5:f2:c8:51:10:
                    9a:3f:71:4b:a0:fa:c3:93:55:af:c4:07:e2:6f:50:
                    d7:75:8b:84:4a:70:ca:b4:00:6d:26:c8:92:0a:5a:
                    36:51:17:cf:99:c0:b9:93:be:09:82:1b:29:ba:2a:
                    0c:20:b1:3d:ed:e6:c8:1b:05:bd:9b:05:ba:d2:95:
                    86:58:6c:bd:51:fb:f5:6b:02:ee:0e:f6:7f:be:f6:
                    0e:fa:69:36:af:4b:a4:24:3b:8f:07:7e:9f:fe:e4:
                    f8:af:51:08:79:9d:b1:d4:36:e5:44:79:d8:36:77:
                    b9:f5:77:76:1e:21:18:e9:35:aa:62:a0:a7:dd:cf:
                    6b:d5:0c:38:07:eb:52:39:fc:a8:51:10:ab:76:0b:
                    b5:fd:32:a3:a9:55:b2:59:f9:05:7d:57:a2:1a:73:
                    52:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:04:09:3E:DC:3C:EA:A6:32:67:86:D7:B7:CF:F1:E6:75:4D:E1:D1
            X509v3 Authority Key Identifier:
                keyid:D7:FA:5C:40:F4:2A:93:67:3A:8B:DE:69:A0:56:36:5E:A6:57:10:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/2/D7FA5C40F42A93673A8BDE69A056365EA657104F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/D7FA5C40F42A93673A8BDE69A056365EA657104F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/2/326131333a646638373a3a2f33322d3438203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df87::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:21:b6:72:52:28:69:96:c6:63:72:1f:13:65:11:f1:0c:93:
         c1:fe:39:d0:08:25:7f:91:af:16:c6:2c:5e:3d:5e:7b:12:22:
         60:97:34:c5:d6:34:57:1e:eb:e0:42:78:bf:ef:db:67:12:4d:
         8d:18:6f:aa:b4:3e:b8:6f:3a:0a:8b:13:91:04:03:45:df:db:
         bd:b1:b5:e6:0e:71:ec:1e:9d:92:34:e8:04:ce:e8:a0:d6:b3:
         24:75:68:2e:73:d9:45:9d:df:2f:d1:3c:dc:e8:71:59:28:d8:
         38:48:44:51:cf:d1:07:0e:26:23:9d:75:31:2c:a1:88:91:e2:
         f2:90:39:2a:e5:b3:80:e6:67:f8:f1:ef:e9:c9:fa:61:40:e1:
         6c:25:31:72:95:30:e1:45:2a:7e:3b:9e:db:7e:22:48:07:e1:
         1a:73:67:35:2b:41:40:b8:5b:02:e6:3c:7d:e2:e4:bc:f5:06:
         64:1a:9b:19:29:6e:36:ab:b4:13:74:05:51:e0:66:1b:5f:60:
         9c:29:f1:fe:1a:cb:ca:7c:2c:9e:22:e7:66:cd:20:b8:f1:4e:
         6b:17:73:90:75:cb:67:e2:cc:34:b9:8b:76:f2:6e:59:33:a1:
         66:c6:a9:cc:6b:3c:b0:75:da:ab:9a:da:19:2c:23:d3:6c:a4:
         37:ad:2f:5a
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUIOJq3fvQQRGP/kNs27L/V7ZqqyIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdGQTVDNDBGNDJBOTM2NzNBOEJERTY5QTA1NjM2NUVB
NjU3MTA0RjAeFw0yMzA0MTkwMDE0MjJaFw0yNDA0MTcwMDE5MjJaMDMxMTAvBgNV
BAMTKDAxMDQwOTNFREMzQ0VBQTYzMjY3ODZEN0I3Q0ZGMUU2NzU0REUxRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxQW/cgeFG7/4521cTVeQqMLai
7mfKzFyDLi1VhcBN16iSfj/vBbB8it3g64v10+LUlsm+w5+JrAv6LJxaaRDbtSa5
OqBnMTK4KQu89j5dhlFQiFlfs+JPDU9B/faC42YKzda18shREJo/cUug+sOTVa/E
B+JvUNd1i4RKcMq0AG0myJIKWjZRF8+ZwLmTvgmCGym6KgwgsT3t5sgbBb2bBbrS
lYZYbL1R+/VrAu4O9n++9g76aTavS6QkO48Hfp/+5PivUQh5nbHUNuVEedg2d7n1
d3YeIRjpNapioKfdz2vVDDgH61I5/KhREKt2C7X9MqOpVbJZ+QV9V6Iac1LxAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQUAQQJPtw86qYyZ4bXt8/x5nVN4dEwHwYDVR0j
BBgwFoAU1/pcQPQqk2c6i95poFY2XqZXEE8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzc0MTFkNmItMzYxNS00YTg2LTg2NzMtMzQwY2UyZjIy
NmVlLzIvRDdGQTVDNDBGNDJBOTM2NzNBOEJERTY5QTA1NjM2NUVBNjU3MTA0Ri5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NGZjNDc1Mi1mODFhLTQ3
YjYtOGYwZC1mZjc0YzhiMGIwYTQvMC9EN0ZBNUM0MEY0MkE5MzY3M0E4QkRFNjlB
MDU2MzY1RUE2NTcxMDRGLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUF
BzALhoGLcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8zNzQxMWQ2Yi0zNjE1LTRhODYtODY3My0zNDBjZTJmMjI2ZWUvMi8zMjYxMzEz
MzNhNjQ2NjM4MzczYTNhMmYzMzMyMmQzNDM4MjAzZDNlMjAzNTM3MzgzNzMwLnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAKhPfhzANBgkqhkiG9w0BAQsFAAOCAQEANyG2clIoaZbGY3IfE2UR
8QyTwf450Aglf5GvFsYsXj1eexIiYJc0xdY0Vx7r4EJ4v+/bZxJNjRhvqrQ+uG86
CosTkQQDRd/bvbG15g5x7B6dkjToBM7ooNazJHVoLnPZRZ3fL9E83OhxWSjYOEhE
Uc/RBw4mI511MSyhiJHi8pA5KuWzgOZn+PHv6cn6YUDhbCUxcpUw4UUqfjue234i
SAfhGnNnNStBQLhbAuY8feLkvPUGZBqbGSluNqu0E3QFUeBmG19gnCnx/hrLynws
niLnZs0guPFOaxdzkHXLZ+LMNLmLdvJuWTOhZsapzGs8sHXaq5raGSwj02ykN60v
Wg==
-----END CERTIFICATE-----