Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/326131333a646638363a623030623a3a2f34382d3438203d3e203537383730.roa
File:                     326131333a646638363a623030623a3a2f34382d3438203d3e203537383730.roa (raw, json)
Hash identifier:          I/KqqMnKUUteqgaEfv9XE+gxOapHdjt1q9u0Y671qz0=
Subject key identifier:   B8:A1:A3:E2:5C:B1:1C:9C:22:0C:2F:27:05:40:80:2F:FE:6F:60:30
Certificate issuer:       /CN=e0f8ebf82a17ad878a08d64788000b830dc07ed9
Certificate serial:       43532BB8C5B4D4324F531CFA17AF21168C86EFA9
Authority key identifier: E0:F8:EB:F8:2A:17:AD:87:8A:08:D6:47:88:00:0B:83:0D:C0:7E:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Pjr-CoXrYeKCNZHiAALgw3Aftk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/326131333a646638363a623030623a3a2f34382d3438203d3e203537383730.roa
Signing time:             Fri 19 May 2023 23:17:00 +0000
ROA not before:           Fri 19 May 2023 23:12:00 +0000
ROA not after:            Fri 17 May 2024 23:17:00 +0000
asID:                     57870
IP address blocks:        2a13:df86:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:53:2b:b8:c5:b4:d4:32:4f:53:1c:fa:17:af:21:16:8c:86:ef:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f8ebf82a17ad878a08d64788000b830dc07ed9
        Validity
            Not Before: May 19 23:12:00 2023 GMT
            Not After : May 17 23:17:00 2024 GMT
        Subject: CN=B8A1A3E25CB11C9C220C2F270540802FFE6F6030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:61:e5:b6:28:21:a8:96:b6:11:2c:88:29:b8:
                    27:4c:7a:e9:f1:06:20:d8:26:93:c2:1f:ba:3f:b0:
                    66:e8:7d:14:6d:61:30:9f:9e:b3:c1:94:32:ec:0a:
                    7d:cb:bc:01:4b:74:ab:35:bb:d8:d7:7d:e4:91:75:
                    78:08:d6:ad:e2:04:15:67:ed:32:16:ea:de:89:d6:
                    8c:53:18:27:62:f4:7d:71:be:a8:69:41:14:53:fd:
                    b0:69:c4:02:df:50:28:b4:a5:36:9a:b4:b4:75:47:
                    57:51:17:f6:4a:e2:5b:63:b0:6b:a4:88:a7:bd:20:
                    09:72:41:13:14:65:f5:27:5b:01:cd:f3:4d:91:06:
                    07:f3:b8:59:d6:f0:2a:93:aa:a8:e0:30:53:7b:e2:
                    d3:35:be:cf:3b:31:7d:f6:02:33:cc:36:56:21:72:
                    6c:7d:e5:33:92:17:0f:c2:64:05:36:39:89:c8:18:
                    ae:ee:6e:9c:a1:97:cd:78:89:af:ac:a8:93:0e:a4:
                    30:30:17:8a:af:69:c0:62:97:f6:09:80:99:08:6d:
                    39:4f:0c:6e:2c:52:ea:ed:88:74:07:f3:f6:52:66:
                    5c:2c:20:ef:de:ce:54:98:1a:86:6a:d4:03:ea:87:
                    ce:4e:26:fe:3a:5b:bf:0e:38:0f:58:e7:48:3a:bb:
                    f6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A1:A3:E2:5C:B1:1C:9C:22:0C:2F:27:05:40:80:2F:FE:6F:60:30
            X509v3 Authority Key Identifier:
                keyid:E0:F8:EB:F8:2A:17:AD:87:8A:08:D6:47:88:00:0B:83:0D:C0:7E:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/E0F8EBF82A17AD878A08D64788000B830DC07ED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Pjr-CoXrYeKCNZHiAALgw3Aftk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/326131333a646638363a623030623a3a2f34382d3438203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df86:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:e4:8b:32:14:7b:03:92:f8:9d:8e:60:cc:8d:9a:15:42:e2:
         4d:bb:34:af:a4:91:01:ea:87:30:bb:9d:16:19:96:eb:27:3a:
         f5:1f:7b:47:7d:22:ba:84:c6:b3:a7:b2:4f:dd:5e:2f:e8:6d:
         68:39:4f:42:33:e0:12:58:0e:69:9b:80:e7:8c:a8:ed:4d:f8:
         31:90:f5:c9:3c:29:04:fa:e4:a6:8e:f1:ec:55:92:3f:19:5a:
         52:60:30:6f:9a:61:1b:38:eb:cb:b1:0a:61:a8:0a:19:f0:e7:
         6d:04:8c:47:3a:c2:ec:16:99:0a:b9:a0:ad:41:5d:4f:6c:3c:
         0c:0b:5e:da:75:c5:45:2b:dc:5d:a3:28:02:0a:ff:e4:ba:d1:
         41:03:4f:f6:82:a7:95:4a:84:fd:b4:cf:27:98:1e:7b:b5:4b:
         37:6f:26:6e:af:69:9c:71:7f:93:62:2d:6b:99:e0:a0:27:f2:
         ac:b9:29:61:03:3f:9d:4d:86:68:25:90:a5:a8:52:2e:b8:71:
         a2:ff:6e:de:7e:a2:fd:90:47:62:e3:0e:a5:89:da:84:e8:99:
         50:50:a5:ab:4d:3d:6c:eb:f7:33:a1:a6:a9:f6:76:a8:78:45:
         e2:12:d4:a0:af:ed:98:71:60:f2:5f:1f:0d:66:29:49:fe:bc:
         91:3d:a0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----