Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/1/326131333a646638303a316631323a3a2f34382d3438203d3e203531363932.roa
File:                     326131333a646638303a316631323a3a2f34382d3438203d3e203531363932.roa (raw, json)
Hash identifier:          5trO60W8AZwLvhpsCaFmm/J0BmdPANPyeunhgXTc8+w=
Subject key identifier:   E1:6B:68:5B:F5:A2:AC:0F:0F:8D:E9:A9:55:7F:9B:19:AE:35:2C:13
Certificate issuer:       /CN=B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9
Certificate serial:       4C719E3AD30D49FD442EC120C595E34F30680DD7
Authority key identifier: B3:4D:F9:25:A0:FA:AF:47:E4:E9:46:0A:3D:51:F3:FB:A0:80:79:A9
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/1/326131333a646638303a316631323a3a2f34382d3438203d3e203531363932.roa
Signing time:             Sun 17 Mar 2024 12:20:43 +0000
ROA not before:           Sun 17 Mar 2024 12:15:43 +0000
ROA not after:            Sun 16 Mar 2025 12:20:43 +0000
asID:                     51692
IP address blocks:        2a13:df80:1f12::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:71:9e:3a:d3:0d:49:fd:44:2e:c1:20:c5:95:e3:4f:30:68:0d:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9
        Validity
            Not Before: Mar 17 12:15:43 2024 GMT
            Not After : Mar 16 12:20:43 2025 GMT
        Subject: CN=E16B685BF5A2AC0F0F8DE9A9557F9B19AE352C13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:56:68:42:50:1c:de:53:20:60:55:b0:9d:0a:
                    9d:db:ae:c1:60:ea:16:35:08:5b:02:8d:fe:b5:9e:
                    9c:af:05:3d:6f:d5:52:41:2c:16:4d:bb:91:4b:21:
                    ef:ed:da:ea:f0:63:6f:78:cf:44:98:a9:29:3e:8c:
                    df:14:e7:93:c1:7b:c9:d3:b9:db:cc:7d:af:14:f3:
                    b3:26:f4:7b:40:ab:6b:ad:95:11:e2:0f:29:1d:cb:
                    4c:c8:e9:0f:93:bd:9d:5f:51:e6:14:9c:ee:09:54:
                    a7:b2:9b:be:0f:78:2d:e7:d2:d9:c8:da:9c:aa:23:
                    92:be:fe:86:31:cf:01:94:78:f1:48:14:f3:62:b3:
                    3f:29:1d:71:6e:b7:da:78:53:69:cd:57:16:7b:dc:
                    c6:a6:65:af:4a:8b:27:3b:ac:18:4c:e4:98:d8:de:
                    22:01:91:82:0b:0f:b9:fa:7f:b6:c7:2c:41:3e:6d:
                    e9:a9:68:65:57:2c:a5:48:00:57:e4:ec:80:16:c3:
                    b9:8a:e3:75:ed:47:90:08:0d:a6:ab:b0:24:63:d4:
                    03:9c:f3:84:ec:4d:ab:a7:ea:6b:4a:ce:19:9d:6b:
                    2d:d9:5f:12:83:b7:07:56:52:da:d7:46:c5:c6:6d:
                    11:bd:88:19:2e:9f:b5:d8:1d:6a:c6:fb:1d:fe:3f:
                    38:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:6B:68:5B:F5:A2:AC:0F:0F:8D:E9:A9:55:7F:9B:19:AE:35:2C:13
            X509v3 Authority Key Identifier:
                keyid:B3:4D:F9:25:A0:FA:AF:47:E4:E9:46:0A:3D:51:F3:FB:A0:80:79:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/1/B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/1/326131333a646638303a316631323a3a2f34382d3438203d3e203531363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:1f12::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:a8:f1:b2:29:53:1e:bb:bc:32:73:67:18:d1:13:f5:19:98:
         30:e6:31:86:2c:e6:12:df:79:b6:e6:7e:c1:46:ae:3f:49:9d:
         18:ef:fe:73:e2:d9:53:40:81:da:71:b8:3e:29:d5:d9:9d:ce:
         d1:ce:ee:c0:b1:0e:38:4b:9c:61:87:7c:47:ef:35:74:54:9a:
         5c:33:01:12:9a:e2:c4:13:9d:13:ad:59:8f:a5:7e:28:2f:a2:
         74:3d:1d:0e:6a:49:55:d6:d3:fe:87:f1:a8:d9:3f:f0:e0:44:
         0e:a3:19:2e:b5:91:1a:92:01:4a:d3:b9:ac:88:15:a8:92:e9:
         f2:79:b2:ba:d7:74:51:da:5c:40:ba:46:57:63:59:31:d9:44:
         ea:63:18:ca:30:5a:6e:19:fc:28:44:d5:a0:cd:72:53:10:24:
         63:5a:c1:62:9f:ba:a0:62:f2:2f:8f:09:ff:60:e3:5d:df:f6:
         89:72:8b:6f:25:08:25:24:ba:f2:99:d4:13:a9:5e:63:02:d2:
         69:7f:09:34:b5:bf:b2:21:5d:78:6e:92:a3:6c:b3:98:2f:dd:
         71:90:7c:10:fa:7c:9e:73:4c:c8:69:a6:1a:f1:c0:ba:06:df:
         5a:94:9f:ab:ee:31:13:86:f2:c8:b5:74:ad:c8:73:78:84:95:
         74:6b:f9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----