Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/1/326131333a646638303a316665663a3a2f34382d3634203d3e203237343938.roa
File:                     326131333a646638303a316665663a3a2f34382d3634203d3e203237343938.roa (raw, json)
Hash identifier:          3HIwpKNGauD1IOwjDFidQzFihUX9/BnAgfXfMYRMebo=
Subject key identifier:   1D:10:28:8E:AF:FE:69:0E:2A:AE:86:65:F0:03:9A:55:6A:4E:6B:4D
Certificate issuer:       /CN=B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9
Certificate serial:       11610B65617763FC052EEE7E593932996B3F35B9
Authority key identifier: B3:4D:F9:25:A0:FA:AF:47:E4:E9:46:0A:3D:51:F3:FB:A0:80:79:A9
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/1/326131333a646638303a316665663a3a2f34382d3634203d3e203237343938.roa
Signing time:             Thu 18 Apr 2024 06:59:33 +0000
ROA not before:           Thu 18 Apr 2024 06:54:33 +0000
ROA not after:            Thu 17 Apr 2025 06:59:33 +0000
asID:                     27498
IP address blocks:        2a13:df80:1fef::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:61:0b:65:61:77:63:fc:05:2e:ee:7e:59:39:32:99:6b:3f:35:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9
        Validity
            Not Before: Apr 18 06:54:33 2024 GMT
            Not After : Apr 17 06:59:33 2025 GMT
        Subject: CN=1D10288EAFFE690E2AAE8665F0039A556A4E6B4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a5:18:ce:cf:8c:d7:3c:2e:21:fa:25:7c:96:
                    56:10:e9:b9:77:da:8c:9f:9f:b4:a6:b7:4f:be:1e:
                    bd:43:58:ce:67:2f:95:91:2e:9c:ec:c0:a1:b7:31:
                    e7:68:7d:28:a3:77:0d:2d:2e:be:17:60:fc:96:fd:
                    2e:c6:6e:60:89:92:ef:e9:bf:40:d1:54:f9:a2:bb:
                    a9:69:2c:ed:07:d6:7c:b6:7f:a2:30:f8:7e:ff:70:
                    41:50:a4:4a:1e:b5:2a:2f:f5:b0:cb:76:ab:b4:f8:
                    00:f8:8d:ac:ed:ef:4c:94:5a:cb:a7:1a:31:53:cd:
                    3d:66:bb:52:49:d7:ec:6a:e2:fe:9c:1f:14:c4:45:
                    cf:c5:34:0f:3f:30:8b:d3:0c:99:e9:81:fd:07:1a:
                    35:5d:64:d4:91:7b:aa:66:f2:88:27:46:99:2d:b7:
                    1c:8b:9a:7c:97:ff:44:c4:9f:45:f6:c2:77:e6:e6:
                    8f:55:36:57:a0:a1:b4:78:7a:92:e3:0a:25:55:61:
                    29:60:46:af:51:9e:45:1c:ed:86:af:b9:43:cd:7f:
                    74:be:1b:4a:7e:11:a5:45:a2:47:57:57:94:2f:d1:
                    54:5e:17:cc:86:0b:d5:df:ca:cd:26:c4:82:2a:e0:
                    16:3b:47:66:0f:a3:7e:c1:52:e7:40:7d:63:d5:92:
                    04:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:10:28:8E:AF:FE:69:0E:2A:AE:86:65:F0:03:9A:55:6A:4E:6B:4D
            X509v3 Authority Key Identifier:
                keyid:B3:4D:F9:25:A0:FA:AF:47:E4:E9:46:0A:3D:51:F3:FB:A0:80:79:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/1/B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/1/326131333a646638303a316665663a3a2f34382d3634203d3e203237343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:1fef::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:03:de:cf:25:8b:b5:21:15:fd:52:56:08:5c:9a:14:cd:a9:
         c4:09:73:e6:c0:93:5f:f5:81:9e:89:fd:b3:b0:e2:f5:48:10:
         6b:02:be:e9:d1:eb:77:98:59:52:57:f2:8c:63:29:63:8a:3f:
         c3:9b:d5:c8:ca:42:2e:4f:8d:17:8a:4a:c1:fc:bf:a0:f7:ff:
         7c:60:bf:7d:47:9a:38:96:84:fc:f7:5e:6c:41:3f:7a:63:ef:
         04:0b:5c:08:1c:4f:b1:08:e9:b6:99:39:57:2f:29:e9:cc:6a:
         22:dc:95:7e:0b:02:2b:4f:7b:a6:73:ec:40:ed:77:a2:5b:aa:
         63:bc:0b:9f:96:b2:b6:c5:ca:05:70:9e:a5:e4:46:79:d5:bd:
         c1:d7:e3:59:88:96:7f:31:7f:3a:e5:2a:4e:cd:4d:9a:95:bc:
         33:74:cd:5f:df:a0:13:7d:28:87:bd:62:67:de:e7:83:8f:52:
         fe:94:0b:68:51:32:cd:1e:cf:70:93:86:f5:76:01:71:a0:0c:
         ff:09:90:f1:9c:1a:2b:b2:48:f4:49:93:e2:8e:91:d9:cf:de:
         ac:ca:ea:eb:12:44:67:8a:f9:e2:d7:9d:ff:95:5d:25:d6:0a:
         d2:26:28:25:47:82:22:4b:06:7e:01:93:0b:3a:7d:71:e4:3c:
         0f:e3:d3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----