Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a313030303a3a2f33362d3438203d3e20313938393830.roa
File:                     326131333a646638303a313030303a3a2f33362d3438203d3e20313938393830.roa (raw, json)
Hash identifier:          z9LPHwnRkuAmoEmR1aTG3jhJFdRGijwy876VVcW8cks=
Subject key identifier:   87:69:1D:4B:4A:AC:1F:9A:FC:A5:92:AF:8E:B6:27:1E:8F:F0:81:83
Certificate issuer:       /CN=74b90a27d86f6a1914c261c21469df853e32beb5
Certificate serial:       7C293AD14009C333F83B5658443107B4226AF766
Authority key identifier: 74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a313030303a3a2f33362d3438203d3e20313938393830.roa
Signing time:             Mon 24 Apr 2023 00:49:00 +0000
ROA not before:           Mon 24 Apr 2023 00:44:00 +0000
ROA not after:            Mon 22 Apr 2024 00:49:00 +0000
asID:                     198980
IP address blocks:        2a13:df80:1000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:29:3a:d1:40:09:c3:33:f8:3b:56:58:44:31:07:b4:22:6a:f7:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b90a27d86f6a1914c261c21469df853e32beb5
        Validity
            Not Before: Apr 24 00:44:00 2023 GMT
            Not After : Apr 22 00:49:00 2024 GMT
        Subject: CN=87691D4B4AAC1F9AFCA592AF8EB6271E8FF08183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:78:c8:62:ce:04:ed:18:7b:5f:d0:e9:bc:d2:
                    b9:4f:03:d6:95:d9:2f:bb:b0:be:5b:1e:dd:eb:d1:
                    86:4f:39:5b:86:22:e7:54:72:a5:23:55:9a:e4:1f:
                    cb:e9:d1:d0:0c:2a:ff:f7:90:25:75:39:72:df:17:
                    10:36:a9:bd:9e:c8:fa:e9:bd:69:2a:a5:04:c4:37:
                    69:70:d3:74:51:ec:1c:c8:d6:9f:91:1d:c9:9b:cd:
                    b7:fa:f0:92:a3:84:6f:3b:a8:06:ae:bb:65:90:9d:
                    90:82:ee:6c:41:0b:6f:cb:24:8b:8e:66:3e:7f:ef:
                    cb:72:5d:65:9e:3b:86:d0:fb:e8:10:0e:94:93:19:
                    11:d1:a8:0c:94:93:62:ed:a9:e2:2e:e8:51:7a:00:
                    b3:a8:42:3f:75:db:10:2c:06:a5:3b:f8:9b:a5:e0:
                    db:09:4e:0a:b6:b0:81:44:97:a0:bd:19:6d:48:8b:
                    76:21:21:31:4d:ff:59:c5:7f:4e:0e:a5:21:80:6b:
                    98:11:9d:46:38:72:21:23:64:1f:95:43:ab:04:3a:
                    50:f1:20:37:e9:af:04:49:60:ba:13:54:9d:77:45:
                    6c:27:d3:5e:37:a7:f1:24:47:5e:23:13:3f:35:3d:
                    29:c7:a5:e8:93:f8:0f:bc:f3:aa:56:ca:9d:d6:67:
                    0e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:69:1D:4B:4A:AC:1F:9A:FC:A5:92:AF:8E:B6:27:1E:8F:F0:81:83
            X509v3 Authority Key Identifier:
                keyid:74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/74B90A27D86F6A1914C261C21469DF853E32BEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a313030303a3a2f33362d3438203d3e20313938393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3e:11:c1:cc:68:a7:2d:51:7d:fa:1c:fb:85:9a:86:a5:14:29:
         2f:06:09:84:16:71:24:c3:83:7c:1f:7d:c8:cd:8c:f7:4d:b6:
         85:b7:f4:55:71:d5:be:f3:4e:80:ea:c6:1f:7a:7e:db:b4:20:
         57:e2:85:3a:c1:ce:58:f7:71:7b:45:d0:46:69:f9:da:55:59:
         82:66:43:66:00:38:6d:49:46:11:a2:99:11:2d:20:b6:22:3f:
         42:ff:ff:53:87:c3:2e:c7:a1:4d:7e:aa:90:33:6b:87:9b:89:
         9b:e9:07:9b:74:a0:80:ed:cc:6f:9e:25:32:9b:ed:1a:7f:d7:
         49:23:fb:d4:35:74:e7:60:b6:42:90:bb:9d:88:c4:c2:03:bc:
         14:f6:0e:6d:e5:72:71:8f:84:67:ed:3e:1c:7f:0c:a2:06:2a:
         11:da:19:db:10:8c:ef:b7:af:66:72:16:76:78:bd:ed:8d:29:
         94:20:f8:ae:ee:4f:59:7c:9c:8c:2f:b8:8d:2b:62:74:b7:7d:
         4e:ac:45:a5:ff:91:d4:e4:30:b7:68:82:d9:4a:63:79:d3:5c:
         ce:e4:81:ea:e9:35:75:e4:41:7f:60:b1:3d:81:72:a6:3c:b0:
         c2:e0:ba:89:93:34:4d:71:99:60:de:e2:71:e4:1b:7f:1a:cb:
         87:b1:c0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----