Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a313030303a3a2f33362d3336203d3e20313938393830.roa
File:                     326131333a646638303a313030303a3a2f33362d3336203d3e20313938393830.roa (raw, json)
Hash identifier:          H3RUB++BWkhm2zs1gHTcgn+Qa9UxBhsksZ8P23nPVPI=
Subject key identifier:   F6:30:81:DB:8B:14:3F:0C:52:3A:C7:2D:24:8B:5B:BD:12:F8:08:02
Certificate issuer:       /CN=74b90a27d86f6a1914c261c21469df853e32beb5
Certificate serial:       32136DFFA7DC0C8A8D327754E3E78D56740C3369
Authority key identifier: 74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a313030303a3a2f33362d3336203d3e20313938393830.roa
Signing time:             Sat 22 Apr 2023 01:43:26 +0000
ROA not before:           Sat 22 Apr 2023 01:38:26 +0000
ROA not after:            Sat 20 Apr 2024 01:43:26 +0000
asID:                     198980
IP address blocks:        2a13:df80:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:13:6d:ff:a7:dc:0c:8a:8d:32:77:54:e3:e7:8d:56:74:0c:33:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b90a27d86f6a1914c261c21469df853e32beb5
        Validity
            Not Before: Apr 22 01:38:26 2023 GMT
            Not After : Apr 20 01:43:26 2024 GMT
        Subject: CN=F63081DB8B143F0C523AC72D248B5BBD12F80802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:33:27:82:05:d4:4b:04:b6:8e:ad:bb:9a:be:
                    03:88:f0:48:12:60:86:8c:5e:c3:5e:fb:9f:d0:39:
                    68:74:57:c2:07:2b:05:52:06:f9:8c:a3:43:e6:8c:
                    ef:36:40:c4:7b:38:77:c3:c0:e2:6a:74:11:ac:f0:
                    cf:02:40:4a:5f:02:75:f7:d5:85:35:e1:b4:2e:7a:
                    bf:ee:cb:5c:91:0f:67:76:00:34:04:9c:4e:8e:ed:
                    57:7a:f1:9b:73:fc:96:9a:f9:40:03:a4:fe:55:e9:
                    06:0e:0c:46:c6:43:f4:ee:33:be:7a:50:43:c2:39:
                    fd:f6:a8:3b:8d:bd:4a:da:36:64:ff:8a:ec:f7:95:
                    53:22:e5:29:9e:a3:e9:ff:0f:cc:35:6c:6e:d0:eb:
                    17:b0:04:2c:3d:c3:47:a5:92:f4:6b:d8:56:5e:ca:
                    fd:e6:d3:7e:86:9b:d2:b6:47:71:da:98:19:88:15:
                    1d:67:31:48:0c:36:4a:1a:bd:cc:af:3a:cb:8e:9c:
                    3a:83:7f:2c:bc:b6:ed:d8:5b:40:5b:55:5d:8d:ca:
                    7c:3e:0c:3b:26:43:5b:1d:f9:9c:b6:b6:5f:ac:1f:
                    09:4c:0a:05:95:bd:65:b2:9e:14:66:87:1d:c0:b0:
                    d9:df:f2:44:45:ee:62:6f:b2:18:fa:9a:b2:bb:da:
                    22:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:30:81:DB:8B:14:3F:0C:52:3A:C7:2D:24:8B:5B:BD:12:F8:08:02
            X509v3 Authority Key Identifier:
                keyid:74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/74B90A27D86F6A1914C261C21469DF853E32BEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a313030303a3a2f33362d3336203d3e20313938393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         65:f7:08:2e:34:1c:0a:0c:ab:0a:5e:85:94:73:4e:26:d5:1e:
         c2:a4:cc:ce:90:26:2e:33:48:52:c9:ef:2d:5e:95:ee:88:3c:
         fe:d6:79:af:7c:14:d7:dc:77:59:2d:81:3f:93:17:de:82:9b:
         fa:a0:fc:a2:85:aa:10:80:53:f8:1e:df:62:04:db:09:77:5c:
         60:1e:27:bd:8f:90:94:b2:0f:3f:59:35:3e:3b:64:d3:35:a6:
         47:cd:d5:30:6d:98:03:8e:09:04:2d:38:60:1b:f1:e8:db:29:
         d1:49:82:b3:3f:07:d7:bb:35:e8:e1:c1:b2:ea:10:04:56:c0:
         1b:b9:e1:4f:b9:e0:df:92:fc:b3:46:a5:52:57:30:f2:6c:1f:
         61:b2:07:8d:a0:e9:08:37:a6:b4:72:32:1a:95:8f:64:87:86:
         fb:ff:2b:74:38:3d:6a:09:cc:99:51:b5:17:ae:ff:1e:85:26:
         4b:c4:b0:ae:c8:a9:e8:fa:3d:3f:e4:94:9c:5f:6b:36:e0:c0:
         47:12:aa:17:3a:04:d5:0a:10:2b:b3:44:60:d5:37:75:89:e9:
         2e:57:8d:bc:d9:9f:a8:ab:c5:ed:d1:16:59:9f:ff:90:45:e9:
         9a:fc:97:0d:c1:e9:bb:df:3a:b4:b8:b4:d5:9e:88:23:ed:46:
         d4:32:2f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----