Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/326131333a646638343a623030623a3a2f34382d3438203d3e203537383730.roa
File:                     326131333a646638343a623030623a3a2f34382d3438203d3e203537383730.roa (raw, json)
Hash identifier:          o+NxXbnML1ahop4QlQmtPN5VtCxJVJOMBxtpVy46Nhc=
Subject key identifier:   75:7C:9F:6B:57:1F:FB:55:21:42:71:1A:22:B9:49:EE:13:FA:C5:ED
Certificate issuer:       /CN=e0f8ebf82a17ad878a08d64788000b830dc07ed9
Certificate serial:       4B3A8D7F0C11817770F2C49FEBDD42297BB86E54
Authority key identifier: E0:F8:EB:F8:2A:17:AD:87:8A:08:D6:47:88:00:0B:83:0D:C0:7E:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Pjr-CoXrYeKCNZHiAALgw3Aftk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/326131333a646638343a623030623a3a2f34382d3438203d3e203537383730.roa
Signing time:             Fri 19 May 2023 23:16:57 +0000
ROA not before:           Fri 19 May 2023 23:11:57 +0000
ROA not after:            Fri 17 May 2024 23:16:57 +0000
asID:                     57870
IP address blocks:        2a13:df84:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:3a:8d:7f:0c:11:81:77:70:f2:c4:9f:eb:dd:42:29:7b:b8:6e:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f8ebf82a17ad878a08d64788000b830dc07ed9
        Validity
            Not Before: May 19 23:11:57 2023 GMT
            Not After : May 17 23:16:57 2024 GMT
        Subject: CN=757C9F6B571FFB552142711A22B949EE13FAC5ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7f:17:30:5b:a8:33:65:21:65:23:95:2d:6e:
                    03:b4:6d:d1:21:0b:f8:8f:88:10:a8:6d:17:67:3b:
                    48:9e:49:01:a8:e2:2d:39:18:85:51:9f:94:84:42:
                    fd:8c:25:71:17:97:56:6d:ff:d3:ff:72:6d:4a:91:
                    a6:07:11:66:1c:f3:de:b9:b2:0c:ed:82:4d:8b:3e:
                    89:36:4b:32:95:f6:5c:1a:03:c3:b5:c1:f0:65:95:
                    25:6b:79:64:5f:c0:b8:8c:cf:0c:d6:8a:ed:cd:9c:
                    ea:b4:72:0b:c5:0b:8a:bf:24:43:5f:ed:7c:27:f1:
                    62:f8:51:4e:bf:e6:e2:67:11:7b:04:e0:04:a5:3d:
                    26:bb:1c:f3:9f:86:2f:55:ae:8c:e2:99:dc:25:a0:
                    15:2d:b4:c2:3e:47:32:2c:48:3b:24:76:46:a2:e9:
                    71:2f:cd:4f:56:47:3b:36:fe:71:7e:93:39:33:f5:
                    65:df:01:03:9e:60:97:81:c8:16:b2:01:f0:15:9c:
                    3c:4f:9f:37:ba:4a:c6:e5:e9:23:02:27:ea:d2:a2:
                    d0:99:ee:33:70:38:9e:59:be:38:b2:7d:10:1b:35:
                    61:d0:a1:40:e7:c4:41:6e:f0:4b:ca:23:42:c0:55:
                    7e:de:73:17:a0:67:10:32:98:dc:aa:44:2c:b3:d3:
                    a3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7C:9F:6B:57:1F:FB:55:21:42:71:1A:22:B9:49:EE:13:FA:C5:ED
            X509v3 Authority Key Identifier:
                keyid:E0:F8:EB:F8:2A:17:AD:87:8A:08:D6:47:88:00:0B:83:0D:C0:7E:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/E0F8EBF82A17AD878A08D64788000B830DC07ED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Pjr-CoXrYeKCNZHiAALgw3Aftk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/326131333a646638343a623030623a3a2f34382d3438203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df84:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:d0:9a:e3:70:12:ba:b3:f0:20:b8:36:2b:be:0f:92:51:3b:
         a6:e5:d6:42:23:2e:d6:8a:b5:70:40:36:e5:75:1f:65:5f:49:
         b9:32:1e:4e:59:61:dd:a7:c7:f4:3a:dd:6f:e8:dd:6a:aa:79:
         c8:19:66:85:9b:1d:2b:69:c8:37:15:15:16:ea:fe:4e:f9:eb:
         af:c9:4e:74:95:3b:e8:38:69:79:d9:9d:30:b9:1b:86:8f:c0:
         0b:59:65:20:b0:85:17:93:27:1a:37:81:23:d0:5c:4f:d2:00:
         df:d8:ac:4a:8a:b1:7b:20:76:17:a8:68:ab:e8:a3:66:58:9b:
         1a:58:ab:ae:d1:26:ef:91:13:27:42:86:f3:7a:aa:19:a1:23:
         c6:fb:33:a3:e9:ee:07:6a:d2:ea:7d:c6:4a:c4:f7:93:30:ee:
         59:e5:a8:fa:ab:23:4f:bd:f6:33:70:65:d0:5c:5a:16:7a:c1:
         2d:01:c7:ed:9c:83:e8:e9:76:27:8d:4a:b7:26:7e:26:ef:ac:
         03:84:01:de:d5:10:54:22:33:d8:72:f4:0c:65:89:11:f6:63:
         83:fc:10:18:af:60:fd:fe:c2:49:1b:8b:0c:95:b1:d4:10:e2:
         5a:a0:1b:a5:8f:42:86:85:53:95:e1:85:89:3f:db:c2:1a:a6:
         83:be:ea:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----