Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/326131333a646638303a38303a3a2f34342d3434203d3e203632343134.roa
File:                     326131333a646638303a38303a3a2f34342d3434203d3e203632343134.roa (raw, json)
Hash identifier:          yzoEx/8FCG7CoIUcB3tGQZlyxdK9feaxr31rD7x3iEw=
Subject key identifier:   05:B0:B8:EA:DC:21:56:3E:6E:D5:4E:9C:3E:F4:B5:81:A6:5B:63:AA
Certificate issuer:       /CN=e0f8ebf82a17ad878a08d64788000b830dc07ed9
Certificate serial:       2B90C00100DE19A539D0E2EA105DF65CFB16FB2B
Authority key identifier: E0:F8:EB:F8:2A:17:AD:87:8A:08:D6:47:88:00:0B:83:0D:C0:7E:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Pjr-CoXrYeKCNZHiAALgw3Aftk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/326131333a646638303a38303a3a2f34342d3434203d3e203632343134.roa
Signing time:             Fri 19 May 2023 23:16:55 +0000
ROA not before:           Fri 19 May 2023 23:11:55 +0000
ROA not after:            Fri 17 May 2024 23:16:55 +0000
asID:                     62414
IP address blocks:        2a13:df80:80::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:90:c0:01:00:de:19:a5:39:d0:e2:ea:10:5d:f6:5c:fb:16:fb:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f8ebf82a17ad878a08d64788000b830dc07ed9
        Validity
            Not Before: May 19 23:11:55 2023 GMT
            Not After : May 17 23:16:55 2024 GMT
        Subject: CN=05B0B8EADC21563E6ED54E9C3EF4B581A65B63AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4a:4d:37:c3:ba:4b:e4:fb:85:4b:f5:b8:02:
                    2a:54:03:ae:6a:8c:15:0c:6b:8d:2f:22:8f:4a:34:
                    75:9a:b9:c0:3f:67:f8:9a:a5:87:f0:81:8e:e4:a8:
                    7c:57:e6:01:6b:8a:e4:78:54:0f:0c:42:03:98:29:
                    11:1f:39:bb:7a:5a:ea:aa:c1:de:1e:09:4e:6a:c9:
                    8f:e8:5e:14:1d:ae:7f:da:05:53:e1:0d:f2:c9:3f:
                    1c:5e:9a:b4:71:b1:88:6b:5a:da:97:fa:4c:5d:d3:
                    ef:b7:5f:0c:51:04:65:a0:d4:02:6d:aa:69:ac:af:
                    52:3d:3d:67:c7:b6:03:bd:a6:fc:27:32:60:5b:13:
                    1f:c3:2b:f4:c6:f0:5f:9f:a0:c5:3d:41:c1:06:64:
                    f9:88:67:cb:ec:db:1b:50:3f:bd:ea:26:ed:f4:9c:
                    30:d7:0f:e5:a5:1e:6d:d0:22:15:9e:b8:dd:ab:ae:
                    f9:9c:fa:c4:e2:4a:73:dd:55:15:00:92:21:20:24:
                    07:87:00:cb:c7:97:c0:6a:44:32:de:39:4e:85:d9:
                    ca:5f:b2:3b:d7:b8:2c:33:58:20:39:6b:42:60:14:
                    44:3e:c7:fc:51:2d:4e:a5:3c:52:af:49:09:78:d5:
                    75:6b:f2:c0:7a:39:94:57:6f:e2:0b:73:ad:26:6e:
                    a3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B0:B8:EA:DC:21:56:3E:6E:D5:4E:9C:3E:F4:B5:81:A6:5B:63:AA
            X509v3 Authority Key Identifier:
                keyid:E0:F8:EB:F8:2A:17:AD:87:8A:08:D6:47:88:00:0B:83:0D:C0:7E:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/E0F8EBF82A17AD878A08D64788000B830DC07ED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Pjr-CoXrYeKCNZHiAALgw3Aftk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/326131333a646638303a38303a3a2f34342d3434203d3e203632343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:80::/44

    Signature Algorithm: sha256WithRSAEncryption
         85:4d:ef:1e:f8:1e:4e:50:db:bf:72:76:58:a9:97:76:2b:03:
         4c:b1:eb:05:af:05:84:7d:f8:b0:30:b8:42:33:72:51:e2:43:
         95:0a:3a:32:f4:f2:e6:82:1d:99:bd:6c:76:6e:7c:e6:ea:c7:
         17:5b:29:b6:af:62:4d:32:90:f6:e9:da:20:05:85:50:3b:c5:
         29:6c:d1:15:ab:22:8e:81:dd:d7:a6:02:f5:22:a2:19:82:61:
         07:81:96:92:36:02:f2:2c:88:c1:04:88:d6:25:bd:5e:b6:5d:
         ca:d0:60:75:4a:72:0c:4a:3e:5a:62:09:33:2f:01:c9:76:f6:
         80:d6:a1:33:a6:2c:f7:20:1d:ee:de:54:ce:53:e1:87:e2:a7:
         e8:4f:1a:cd:30:64:af:36:63:0b:dc:c6:09:ec:47:2d:6b:9a:
         14:92:2b:c0:89:50:87:c7:fc:94:fe:63:5a:5a:fe:2a:b3:c5:
         cc:51:1b:ce:c9:37:8e:1d:55:bd:35:e8:08:b3:ff:b5:c0:d7:
         ff:84:6d:11:fe:a9:b8:37:7d:c3:6a:b9:16:ed:c1:4b:56:2a:
         ea:81:e6:29:7f:20:c2:7e:05:05:c7:33:69:5d:e1:32:e5:a1:
         0c:5d:2d:af:bb:67:d4:45:62:77:96:75:cc:88:24:72:e8:83:
         e0:dc:6a:e6
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUK5DAAQDeGaU50OLqEF32XPsW+yswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTBmOGViZjgyYTE3YWQ4NzhhMDhkNjQ3ODgwMDBiODMw
ZGMwN2VkOTAeFw0yMzA1MTkyMzExNTVaFw0yNDA1MTcyMzE2NTVaMDMxMTAvBgNV
BAMTKDA1QjBCOEVBREMyMTU2M0U2RUQ1NEU5QzNFRjRCNTgxQTY1QjYzQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCySk03w7pL5PuFS/W4AipUA65q
jBUMa40vIo9KNHWaucA/Z/iapYfwgY7kqHxX5gFriuR4VA8MQgOYKREfObt6Wuqq
wd4eCU5qyY/oXhQdrn/aBVPhDfLJPxxemrRxsYhrWtqX+kxd0++3XwxRBGWg1AJt
qmmsr1I9PWfHtgO9pvwnMmBbEx/DK/TG8F+foMU9QcEGZPmIZ8vs2xtQP73qJu30
nDDXD+WlHm3QIhWeuN2rrvmc+sTiSnPdVRUAkiEgJAeHAMvHl8BqRDLeOU6F2cpf
sjvXuCwzWCA5a0JgFEQ+x/xRLU6lPFKvSQl41XVr8sB6OZRXb+ILc60mbqPZAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUBbC46twhVj5u1U6cPvS1gaZbY6owHwYDVR0j
BBgwFoAU4Pjr+CoXrYeKCNZHiAALgw3AftkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmZmJlNzItNTQwNy00Mjk2LTgyMjYtMzY3MjY5MjU5
ZDg2LzAvRTBGOEVCRjgyQTE3QUQ4NzhBMDhENjQ3ODgwMDBCODMwREMwN0VEOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRQanItQ29YclllS0NOWkhpQUFMZ3cz
QWZ0ay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2ZmZmJlNzIt
NTQwNy00Mjk2LTgyMjYtMzY3MjY5MjU5ZDg2LzAvMzI2MTMxMzMzYTY0NjYzODMw
M2EzODMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzYzMjM0MzEzNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHBCoT34AAgDANBgkqhkiG9w0BAQsFAAOCAQEAhU3vHvgeTlDbv3J2WKmXdisD
TLHrBa8FhH34sDC4QjNyUeJDlQo6MvTy5oIdmb1sdm585urHF1sptq9iTTKQ9una
IAWFUDvFKWzRFasijoHd16YC9SKiGYJhB4GWkjYC8iyIwQSI1iW9XrZdytBgdUpy
DEo+WmIJMy8ByXb2gNahM6Ys9yAd7t5UzlPhh+Kn6E8azTBkrzZjC9zGCexHLWua
FJIrwIlQh8f8lP5jWlr+KrPFzFEbzsk3jh1VvTXoCLP/tcDX/4RtEf6puDd9w2q5
Fu3BS1Yq6oHmKX8gwn4FBcczaV3hMuWhDF0tr7tn1EVid5Z1zIgkcuiD4Nxq5g==
-----END CERTIFICATE-----