Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/326131333a646638353a623030623a3a2f34382d3438203d3e203630373433.roa
File:                     326131333a646638353a623030623a3a2f34382d3438203d3e203630373433.roa (raw, json)
Hash identifier:          gMjdibWx3Q5R+2opc0ZRY7GBXZXE7uXl95lIsMohFIs=
Subject key identifier:   21:02:0D:D4:E9:0E:73:6F:CB:15:A2:31:55:7A:18:4B:BD:BC:7C:34
Certificate issuer:       /CN=e0f8ebf82a17ad878a08d64788000b830dc07ed9
Certificate serial:       380E3EB9BC0131E89026FD6F9452CDF423F97AF0
Authority key identifier: E0:F8:EB:F8:2A:17:AD:87:8A:08:D6:47:88:00:0B:83:0D:C0:7E:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Pjr-CoXrYeKCNZHiAALgw3Aftk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/326131333a646638353a623030623a3a2f34382d3438203d3e203630373433.roa
Signing time:             Fri 19 May 2023 23:16:54 +0000
ROA not before:           Fri 19 May 2023 23:11:54 +0000
ROA not after:            Fri 17 May 2024 23:16:54 +0000
asID:                     60743
IP address blocks:        2a13:df85:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:0e:3e:b9:bc:01:31:e8:90:26:fd:6f:94:52:cd:f4:23:f9:7a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f8ebf82a17ad878a08d64788000b830dc07ed9
        Validity
            Not Before: May 19 23:11:54 2023 GMT
            Not After : May 17 23:16:54 2024 GMT
        Subject: CN=21020DD4E90E736FCB15A231557A184BBDBC7C34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:20:13:61:d3:29:40:db:eb:2b:eb:43:22:a6:
                    4a:c7:bf:49:4c:a4:92:64:49:6a:fe:68:0b:57:2e:
                    24:fd:73:e7:19:dc:bd:e9:63:aa:a5:df:13:c4:c3:
                    3e:30:24:42:15:26:75:35:75:25:98:0f:a3:71:11:
                    7a:98:25:43:da:c0:48:87:23:6a:62:84:cc:f9:a3:
                    87:d9:46:4b:f8:36:f9:df:f7:f6:08:54:92:c4:a1:
                    64:5b:71:65:68:81:f8:7f:08:ab:eb:1b:db:13:9a:
                    7f:65:b7:a7:08:df:ac:0b:bb:d1:cc:40:84:58:07:
                    b5:97:67:db:68:0f:6e:fe:1d:cc:9a:4e:33:a2:12:
                    f2:aa:ba:b8:c5:86:8f:33:d1:22:4d:01:85:b6:07:
                    a8:26:db:80:a0:a3:4a:8a:b9:6f:ad:1a:37:bc:55:
                    48:77:ca:34:86:3d:f8:57:9b:48:ac:d0:1e:4c:80:
                    4c:0c:e3:11:23:54:95:94:17:cf:86:3e:74:23:1d:
                    70:5c:0c:07:4a:04:ac:5d:f7:0e:71:3d:91:de:ca:
                    61:12:50:65:d6:f7:cb:00:8a:4d:0c:7d:41:a2:62:
                    6f:dd:ed:7c:59:52:e6:68:58:63:1b:0e:47:90:52:
                    c0:a9:07:64:3b:3f:92:fe:66:94:35:99:c3:6b:e2:
                    9a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:02:0D:D4:E9:0E:73:6F:CB:15:A2:31:55:7A:18:4B:BD:BC:7C:34
            X509v3 Authority Key Identifier:
                keyid:E0:F8:EB:F8:2A:17:AD:87:8A:08:D6:47:88:00:0B:83:0D:C0:7E:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/E0F8EBF82A17AD878A08D64788000B830DC07ED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Pjr-CoXrYeKCNZHiAALgw3Aftk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/326131333a646638353a623030623a3a2f34382d3438203d3e203630373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df85:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:94:0c:32:75:55:3f:b5:96:be:6d:b7:b3:3c:88:89:28:c1:
         59:d1:8a:82:28:97:b6:43:1b:64:7f:32:f8:79:51:fa:a7:8a:
         97:5f:ad:55:39:29:4a:64:d9:07:03:a0:f6:8d:18:06:a1:31:
         60:b6:e6:9e:55:80:43:e1:59:02:36:bc:73:d0:07:92:9b:25:
         09:59:70:4c:b8:8c:56:92:16:b7:41:11:c6:8c:d0:45:e9:e1:
         68:56:39:bb:36:5a:34:25:17:64:f3:7b:9b:3b:75:f5:dc:3d:
         b6:8f:04:5f:e1:d7:85:40:03:61:6c:64:eb:32:fd:17:82:1a:
         5e:1d:db:55:c6:ef:72:69:aa:3e:8b:74:78:56:f6:3a:04:3a:
         38:73:a0:55:e4:21:1b:ac:65:88:42:24:c5:61:36:8d:5d:1f:
         e6:4e:fc:eb:67:d3:00:7c:fc:a3:0a:b5:cf:fd:47:c8:ff:d8:
         28:3f:77:cd:6f:f6:32:f9:c1:f7:24:e2:e6:9c:46:88:df:18:
         e8:e7:25:a1:82:5c:58:1e:4d:5e:67:bf:c9:f4:87:1f:c3:51:
         27:07:8e:a2:5c:b2:5c:cf:00:54:c0:2b:03:8c:d6:f4:11:cf:
         4a:9c:3c:15:ce:29:d3:7c:e1:8a:08:0e:aa:07:9e:7b:c0:12:
         31:d0:bb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----