Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/326131333a646638373a3a2f33322d3332203d3e203537383730.roa
File:                     326131333a646638373a3a2f33322d3332203d3e203537383730.roa (raw, json)
Hash identifier:          dlMGBUkOruabqkMhGrmaYb/XFxMJkvPJs/oC/7FY7YE=
Subject key identifier:   7F:97:10:CE:2A:65:56:2D:62:F5:D5:EE:28:EA:92:C8:7C:63:44:6B
Certificate issuer:       /CN=e0f8ebf82a17ad878a08d64788000b830dc07ed9
Certificate serial:       59F7F1EB560D44FD4A2C38E11D68894785693834
Authority key identifier: E0:F8:EB:F8:2A:17:AD:87:8A:08:D6:47:88:00:0B:83:0D:C0:7E:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Pjr-CoXrYeKCNZHiAALgw3Aftk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/326131333a646638373a3a2f33322d3332203d3e203537383730.roa
Signing time:             Fri 19 May 2023 23:16:58 +0000
ROA not before:           Fri 19 May 2023 23:11:58 +0000
ROA not after:            Fri 17 May 2024 23:16:58 +0000
asID:                     57870
IP address blocks:        2a13:df87::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f7:f1:eb:56:0d:44:fd:4a:2c:38:e1:1d:68:89:47:85:69:38:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f8ebf82a17ad878a08d64788000b830dc07ed9
        Validity
            Not Before: May 19 23:11:58 2023 GMT
            Not After : May 17 23:16:58 2024 GMT
        Subject: CN=7F9710CE2A65562D62F5D5EE28EA92C87C63446B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:61:01:b4:c8:9b:bc:de:49:80:73:e3:f2:6d:
                    9d:d0:98:8a:67:35:0e:3f:e8:5b:e3:4b:de:e8:7e:
                    cd:a4:be:88:52:b6:8a:cc:a8:43:ea:80:cf:44:18:
                    bb:41:d9:42:9a:d5:e7:cb:25:61:fd:7c:68:c3:b6:
                    e9:7c:97:16:8b:20:c1:0a:77:a7:ae:89:97:2f:c4:
                    ff:55:93:03:23:0b:27:02:a1:05:e6:69:e3:72:0c:
                    ec:4b:68:e6:16:86:09:c4:ef:10:d5:b7:d6:0d:47:
                    c5:da:8c:1f:19:4f:be:f3:74:12:e6:dd:ba:b2:77:
                    e4:b2:50:46:44:5f:1a:ad:ec:30:45:e6:36:21:34:
                    c4:18:36:fa:d2:55:d2:79:54:4a:7b:17:b0:ee:b5:
                    86:4a:83:1f:c4:80:47:4a:24:f4:f4:6a:64:4c:3a:
                    50:f6:a1:21:6d:88:fa:57:1c:f9:60:b4:e4:4f:2b:
                    64:c2:4c:dc:05:72:32:4b:70:3c:bd:e7:6e:dc:63:
                    d9:54:6b:04:f3:38:96:bb:c1:8d:f9:e7:5a:50:15:
                    10:3e:eb:b7:67:06:95:03:df:14:c1:e1:3c:b2:4e:
                    7b:2d:41:c6:ff:51:f6:9b:97:6a:d7:c7:da:61:8c:
                    84:1c:37:01:fb:6b:b0:27:0e:46:0b:da:3e:7d:e5:
                    c3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:97:10:CE:2A:65:56:2D:62:F5:D5:EE:28:EA:92:C8:7C:63:44:6B
            X509v3 Authority Key Identifier:
                keyid:E0:F8:EB:F8:2A:17:AD:87:8A:08:D6:47:88:00:0B:83:0D:C0:7E:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/E0F8EBF82A17AD878A08D64788000B830DC07ED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Pjr-CoXrYeKCNZHiAALgw3Aftk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/326131333a646638373a3a2f33322d3332203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df87::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:f8:95:e0:87:71:97:20:04:28:30:66:2d:fe:0a:cf:2c:14:
         4f:90:be:0f:dc:6e:37:e2:ec:52:cc:dd:29:4c:40:f6:8a:08:
         44:07:04:98:d2:56:64:30:b6:e0:09:4a:36:68:8b:3e:6e:40:
         88:3b:95:3e:da:cb:82:af:ec:0d:f4:e4:11:87:d4:cd:df:06:
         43:9c:09:31:f2:27:da:30:b7:b5:1e:20:2c:56:c2:92:9f:40:
         0a:1e:2c:f5:3a:98:c4:1d:66:e9:09:1d:40:be:d8:49:e5:ef:
         d6:1a:f2:20:b5:2d:fd:6c:0c:cb:26:a1:7c:e0:85:4c:f9:85:
         9e:9e:57:ac:14:af:72:c5:5b:86:56:f3:9f:b6:3b:b0:56:8b:
         d1:2a:9a:33:6c:a6:ae:4d:a1:3a:31:90:2c:74:c9:1a:93:e3:
         92:7e:40:96:2a:e5:1f:59:7f:a5:27:dc:bd:62:26:00:5f:f7:
         6d:e3:cd:fb:e7:01:2e:f7:59:27:f6:b6:c7:ef:07:36:d2:70:
         5a:24:a0:e8:06:a9:9f:3c:02:14:e9:3d:fe:96:69:b4:b5:da:
         6c:75:ae:5d:bc:c4:8b:5a:89:82:de:6b:72:8b:e5:5b:07:13:
         de:f5:74:82:92:f8:a1:3a:d7:61:a9:8a:ee:52:dd:fc:46:1c:
         af:8f:23:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----