Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/1/326131333a646638303a316631633a3a2f34382d3438203d3e203237343938.roa
File:                     326131333a646638303a316631633a3a2f34382d3438203d3e203237343938.roa (raw, json)
Hash identifier:          wbLTtW2l4htLJZzEllwlMsKbRiz13rs6GF9d3kr52WM=
Subject key identifier:   3C:B9:41:34:06:2A:D9:F1:B8:58:5D:C1:E0:DC:9D:B4:EE:B1:20:B8
Certificate issuer:       /CN=B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9
Certificate serial:       72C54AA4A371E92E844F7C46C9C3E677F51B40D0
Authority key identifier: B3:4D:F9:25:A0:FA:AF:47:E4:E9:46:0A:3D:51:F3:FB:A0:80:79:A9
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/1/326131333a646638303a316631633a3a2f34382d3438203d3e203237343938.roa
Signing time:             Thu 18 Apr 2024 06:58:55 +0000
ROA not before:           Thu 18 Apr 2024 06:53:55 +0000
ROA not after:            Thu 17 Apr 2025 06:58:55 +0000
asID:                     27498
IP address blocks:        2a13:df80:1f1c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c5:4a:a4:a3:71:e9:2e:84:4f:7c:46:c9:c3:e6:77:f5:1b:40:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9
        Validity
            Not Before: Apr 18 06:53:55 2024 GMT
            Not After : Apr 17 06:58:55 2025 GMT
        Subject: CN=3CB94134062AD9F1B8585DC1E0DC9DB4EEB120B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bd:00:19:d2:c6:75:72:8f:ef:32:c9:2a:fe:
                    69:d2:ec:c2:a4:d5:b7:39:9d:72:8c:69:83:8d:eb:
                    60:62:b1:66:dc:6f:20:ef:ba:7c:33:b8:d4:06:82:
                    31:63:8c:78:d2:41:69:ed:ee:ac:ce:e1:48:4b:e9:
                    80:9a:26:d4:88:7c:66:78:b7:d4:b1:21:e5:7a:94:
                    d4:aa:0e:ca:fa:58:5f:79:01:ae:b4:aa:f8:5a:9f:
                    31:2a:9c:d2:96:68:5c:fc:ef:46:b8:d0:3d:78:e0:
                    0d:6a:81:8f:60:e3:23:06:66:48:71:bb:90:6c:fb:
                    99:19:78:ec:62:7a:44:f2:b5:72:b0:06:2d:6c:75:
                    c0:d6:0a:c3:36:97:aa:d5:1a:d7:61:ad:95:80:dc:
                    4a:bd:00:06:c2:f0:e4:a9:0f:db:d1:c3:91:b8:be:
                    dd:c9:88:c2:78:f6:bd:76:95:58:27:8f:6b:8e:c3:
                    f3:6a:a0:43:97:a4:a8:f0:fc:08:fa:a6:7d:48:12:
                    24:01:d7:66:e8:dd:b1:14:15:2a:d1:23:e0:dd:6a:
                    9b:75:04:5a:cb:a1:7d:4e:52:69:b0:ae:ef:dc:e6:
                    a5:aa:22:d4:26:d8:7e:97:f2:03:71:7f:22:05:59:
                    b2:77:5e:04:0a:a0:05:0a:4f:d3:13:80:da:93:c0:
                    46:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B9:41:34:06:2A:D9:F1:B8:58:5D:C1:E0:DC:9D:B4:EE:B1:20:B8
            X509v3 Authority Key Identifier:
                keyid:B3:4D:F9:25:A0:FA:AF:47:E4:E9:46:0A:3D:51:F3:FB:A0:80:79:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/1/B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/1/326131333a646638303a316631633a3a2f34382d3438203d3e203237343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:1f1c::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:b1:5b:a1:97:57:76:65:e9:0f:66:12:ab:6c:be:9b:b0:49:
         43:7f:76:d1:f4:8a:26:01:91:6f:1a:23:8f:43:e0:88:78:04:
         0c:52:e7:33:f8:60:9c:1b:4c:91:b3:be:cd:1f:55:82:75:dd:
         b2:0c:de:97:63:b5:0e:4a:74:e7:b1:eb:4d:5a:07:9c:d4:c1:
         3a:ed:d2:e7:d9:4f:9a:4f:54:d6:15:59:42:bd:5b:44:4a:0d:
         b2:17:a8:60:6e:7e:5f:88:de:1b:9b:64:c3:4d:dd:f3:de:d6:
         0e:cf:6d:6b:b8:5e:ee:46:a2:fa:0c:91:dc:2c:1d:c4:f1:09:
         9c:ac:8a:27:41:89:d9:18:bb:e8:19:54:11:fc:1b:c5:1d:f8:
         7a:bd:20:a5:83:80:71:08:e4:1d:5f:c8:05:b4:86:97:47:bc:
         32:32:90:0e:2f:bc:26:ef:75:5e:93:5a:12:75:34:63:a3:6d:
         fb:09:60:3b:94:7d:34:bf:e2:71:01:64:a1:a8:91:4b:da:fe:
         b0:69:b5:8e:6a:57:a1:d8:72:a1:48:f8:b9:67:20:5c:55:3d:
         ce:0a:18:1b:75:93:c8:a9:30:a5:0e:fd:2e:ba:98:cc:ad:2f:
         9e:d8:c8:a6:4b:77:fa:c9:17:40:56:af:21:f3:a9:53:e4:12:
         f0:9e:84:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----