Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/326131333a646638353a3a2f33322d3332203d3e203537383730.roa
File:                     326131333a646638353a3a2f33322d3332203d3e203537383730.roa (raw, json)
Hash identifier:          RXq8Aqh4qxhJTYaedE/uiwLymt+0RXptMUc8NUs4Wxs=
Subject key identifier:   BD:40:7C:57:68:E0:B0:89:16:EB:71:9C:4D:09:31:A5:E9:2B:81:79
Certificate issuer:       /CN=e0f8ebf82a17ad878a08d64788000b830dc07ed9
Certificate serial:       09217E78B498BD29FB2C97D3EB53DBC0709DF3CB
Authority key identifier: E0:F8:EB:F8:2A:17:AD:87:8A:08:D6:47:88:00:0B:83:0D:C0:7E:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Pjr-CoXrYeKCNZHiAALgw3Aftk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/326131333a646638353a3a2f33322d3332203d3e203537383730.roa
Signing time:             Fri 19 May 2023 23:17:03 +0000
ROA not before:           Fri 19 May 2023 23:12:03 +0000
ROA not after:            Fri 17 May 2024 23:17:03 +0000
asID:                     57870
IP address blocks:        2a13:df85::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:21:7e:78:b4:98:bd:29:fb:2c:97:d3:eb:53:db:c0:70:9d:f3:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f8ebf82a17ad878a08d64788000b830dc07ed9
        Validity
            Not Before: May 19 23:12:03 2023 GMT
            Not After : May 17 23:17:03 2024 GMT
        Subject: CN=BD407C5768E0B08916EB719C4D0931A5E92B8179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:07:56:c9:83:77:ba:fa:e2:f2:1f:87:a3:36:
                    72:de:32:1c:41:74:1b:19:07:e2:df:3a:cf:d2:fc:
                    e9:bd:12:f0:fa:c1:80:ff:c8:dd:af:02:06:23:e3:
                    78:ef:8e:45:b2:cf:26:be:bf:87:cd:93:42:61:eb:
                    cf:70:09:77:97:ae:42:98:cf:31:3c:f3:62:f5:4a:
                    24:1f:d4:bf:f9:bb:b6:9a:ac:61:34:52:20:7a:98:
                    1b:94:4d:c1:e2:93:65:23:7f:42:4d:a1:09:e5:62:
                    d4:72:5d:af:e1:bd:70:21:74:c8:2b:3a:cb:85:19:
                    78:63:fc:c5:51:f1:c4:8d:bc:bd:6d:6b:82:52:36:
                    67:95:a0:fd:1f:7a:e1:22:df:e9:c9:34:c6:bd:ed:
                    65:c1:df:80:2c:f1:5c:94:76:60:f2:3a:95:93:ca:
                    39:bd:3c:88:38:f9:46:44:07:c6:2d:48:14:ce:cf:
                    49:b0:da:11:90:57:68:33:c0:1b:af:80:5b:ee:ed:
                    da:e5:fb:92:f3:b3:47:cc:56:2c:21:11:07:d4:33:
                    1e:12:45:66:41:3d:62:b3:91:55:2e:11:0f:ff:6d:
                    7c:4b:ae:e6:8c:2e:3d:b0:f2:50:a4:28:ea:31:00:
                    3e:bb:e3:cb:f3:de:73:50:e0:4b:25:65:cc:e9:17:
                    45:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:40:7C:57:68:E0:B0:89:16:EB:71:9C:4D:09:31:A5:E9:2B:81:79
            X509v3 Authority Key Identifier:
                keyid:E0:F8:EB:F8:2A:17:AD:87:8A:08:D6:47:88:00:0B:83:0D:C0:7E:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/E0F8EBF82A17AD878A08D64788000B830DC07ED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Pjr-CoXrYeKCNZHiAALgw3Aftk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/326131333a646638353a3a2f33322d3332203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df85::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:d6:80:e5:d9:3e:11:87:19:1e:50:fe:85:1d:66:08:41:0e:
         48:71:67:c9:0d:6d:6f:a1:f9:bf:5b:d8:41:79:2e:71:66:a6:
         e8:f3:2b:ea:9e:93:62:67:e9:88:3d:2d:10:cd:03:01:06:2c:
         2e:79:ed:db:5a:b5:5d:3c:63:a0:81:0e:9b:51:81:d0:c5:75:
         0b:3c:c5:95:5b:ab:28:99:bc:0a:2d:de:3d:11:19:eb:84:7f:
         0e:9e:db:fa:aa:33:de:db:7a:e3:e2:2b:58:3a:b8:1e:ff:a7:
         23:8c:26:dc:9b:47:19:11:26:37:56:1a:a3:06:ca:7d:52:56:
         21:6c:f2:08:d2:9d:02:9d:c3:0d:58:f6:55:d9:e0:5a:a9:2d:
         f5:03:52:d4:a2:8c:e4:60:9a:64:e4:59:5f:a1:f6:39:4d:92:
         4c:07:77:83:cc:34:97:97:2c:18:6a:30:51:85:54:bb:6a:e5:
         f3:c4:c9:05:d7:e8:b2:d9:d9:8c:2a:a2:e0:8b:61:9d:f3:55:
         be:3f:1a:f1:93:ae:aa:98:94:d7:4f:c8:0e:89:5c:7b:5c:11:
         c3:e4:9c:03:a3:d3:9e:87:d3:31:d4:a5:58:45:f5:00:00:27:
         ce:61:43:21:45:2a:ce:fc:b0:96:4d:cf:d0:dc:2a:7c:99:c0:
         3c:9c:aa:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----