Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/326131333a646638363a3a2f33322d3332203d3e203537383730.roa
File:                     326131333a646638363a3a2f33322d3332203d3e203537383730.roa (raw, json)
Hash identifier:          2STdhgC+4r4h/pvZKGler0gNfDB7PPnc98EPA23D7/I=
Subject key identifier:   DE:C1:D9:9B:12:8A:51:86:F8:74:BE:F5:E0:62:72:25:34:CA:91:0C
Certificate issuer:       /CN=e0f8ebf82a17ad878a08d64788000b830dc07ed9
Certificate serial:       137F124C58B9895C592976CC78BE8727AB9191B5
Authority key identifier: E0:F8:EB:F8:2A:17:AD:87:8A:08:D6:47:88:00:0B:83:0D:C0:7E:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Pjr-CoXrYeKCNZHiAALgw3Aftk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/326131333a646638363a3a2f33322d3332203d3e203537383730.roa
Signing time:             Fri 19 May 2023 23:17:01 +0000
ROA not before:           Fri 19 May 2023 23:12:01 +0000
ROA not after:            Fri 17 May 2024 23:17:01 +0000
asID:                     57870
IP address blocks:        2a13:df86::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:7f:12:4c:58:b9:89:5c:59:29:76:cc:78:be:87:27:ab:91:91:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f8ebf82a17ad878a08d64788000b830dc07ed9
        Validity
            Not Before: May 19 23:12:01 2023 GMT
            Not After : May 17 23:17:01 2024 GMT
        Subject: CN=DEC1D99B128A5186F874BEF5E062722534CA910C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:71:45:22:26:fd:e0:43:7c:ba:8d:0b:40:8c:
                    72:c9:4f:50:bc:e8:2f:21:f4:a9:84:4e:e1:9b:f5:
                    1e:15:d9:d1:32:7f:8c:72:cc:67:28:74:89:42:9a:
                    b9:81:4d:b0:55:0c:79:b9:bd:78:b1:0b:84:3d:fb:
                    cb:90:37:79:ea:81:e4:26:71:00:42:0e:fd:42:3e:
                    7d:3d:f5:e2:5f:85:6d:9b:4e:bd:38:2b:0e:87:da:
                    05:12:ab:af:d5:b8:ff:d3:30:74:21:65:a5:aa:70:
                    6d:f7:00:74:97:60:49:91:38:61:0c:0a:1e:2e:59:
                    8c:63:74:50:a9:15:21:9d:31:e9:93:65:48:1a:c8:
                    1d:b1:cf:93:56:b6:75:9c:e4:ee:31:f0:cd:4b:95:
                    26:48:08:df:2a:bf:8d:d0:ce:55:d3:bb:20:54:39:
                    53:84:8d:5d:f5:c8:e4:e3:9c:cd:3f:62:86:20:30:
                    23:78:81:a4:42:3b:f3:1d:0e:f3:3d:69:84:bd:d9:
                    87:42:1a:59:e4:a0:14:a6:0b:fe:a1:29:7d:d4:c1:
                    6e:36:be:76:92:8d:8e:96:b6:bf:44:9f:66:5a:79:
                    a9:b2:f7:bd:fe:cd:86:91:1a:df:9f:60:86:9b:09:
                    9d:47:15:d7:ae:c2:00:24:9a:18:98:85:03:41:13:
                    c3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C1:D9:9B:12:8A:51:86:F8:74:BE:F5:E0:62:72:25:34:CA:91:0C
            X509v3 Authority Key Identifier:
                keyid:E0:F8:EB:F8:2A:17:AD:87:8A:08:D6:47:88:00:0B:83:0D:C0:7E:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/E0F8EBF82A17AD878A08D64788000B830DC07ED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Pjr-CoXrYeKCNZHiAALgw3Aftk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/326131333a646638363a3a2f33322d3332203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df86::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:d1:95:95:c6:92:b8:94:44:a9:32:57:5d:18:23:c8:d8:3d:
         bc:3f:29:ec:ac:d0:eb:65:06:4b:06:c3:2a:3a:ac:16:c3:b6:
         7e:8d:c5:cb:73:66:42:73:e0:ec:d8:a2:1f:b0:c4:68:57:83:
         e7:29:25:c2:f7:d8:e8:62:63:70:6d:1d:5e:d0:0f:df:98:f8:
         5f:e3:32:42:d4:98:be:33:0b:d2:55:26:1f:9d:52:c4:ac:0e:
         64:99:b0:c8:47:eb:c2:c7:73:ac:51:3a:6b:01:1e:7f:42:69:
         48:49:fd:4f:a4:f3:4b:0b:a0:80:ee:69:3e:fa:83:ca:bb:1a:
         c3:ac:91:e0:4c:84:8f:26:df:34:c8:52:71:d7:92:d6:db:73:
         7f:d1:80:be:54:60:84:ee:c3:96:a4:30:21:bd:df:bf:c6:dc:
         60:a8:be:1b:24:f7:f4:0e:7e:4a:38:4c:24:ed:ba:9a:20:48:
         f8:ae:cd:ef:5e:45:22:bd:93:7c:cf:b2:21:4e:38:2b:f0:88:
         1e:96:37:4c:b1:24:04:40:2d:e6:da:11:79:8f:db:d1:2c:fe:
         2f:ec:97:80:35:7f:02:29:c7:fa:f2:69:5f:b4:cc:47:51:e1:
         83:24:0a:5d:50:d6:d0:cd:ac:7c:04:a8:74:4e:94:e1:41:b7:
         18:37:71:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----