Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a35303a3a2f34342d3438203d3e203438343635.roa
File:                     326131333a646638303a35303a3a2f34342d3438203d3e203438343635.roa (raw, json)
Hash identifier:          7lck2iIGjNXDPBFZOKD4hwd0u4kx4jMgiJRjDJjMVsk=
Subject key identifier:   E3:08:B5:79:19:44:36:79:13:B3:5C:5D:F4:4D:8A:F7:33:F1:F7:54
Certificate issuer:       /CN=74b90a27d86f6a1914c261c21469df853e32beb5
Certificate serial:       733627F99462E07CB8FADC5E32250F52EE5BDAF2
Authority key identifier: 74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a35303a3a2f34342d3438203d3e203438343635.roa
Signing time:             Thu 06 Apr 2023 21:06:46 +0000
ROA not before:           Thu 06 Apr 2023 21:01:46 +0000
ROA not after:            Thu 04 Apr 2024 21:06:46 +0000
asID:                     48465
IP address blocks:        2a13:df80:50::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:36:27:f9:94:62:e0:7c:b8:fa:dc:5e:32:25:0f:52:ee:5b:da:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b90a27d86f6a1914c261c21469df853e32beb5
        Validity
            Not Before: Apr  6 21:01:46 2023 GMT
            Not After : Apr  4 21:06:46 2024 GMT
        Subject: CN=E308B5791944367913B35C5DF44D8AF733F1F754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:31:2b:fa:5d:03:55:c6:21:b9:72:ae:1c:2c:
                    57:58:34:19:8f:91:53:ff:38:34:d5:ea:bf:ed:25:
                    49:40:af:e9:0e:aa:9b:91:84:7f:53:fd:61:fa:ae:
                    4e:a6:1f:0e:77:6b:ec:40:6c:4b:85:4b:88:c8:cc:
                    99:e9:8e:0c:fe:f2:d6:ff:26:d6:74:ef:5e:62:9a:
                    2e:fe:59:13:65:6f:98:e9:d9:a6:6e:13:3c:a3:08:
                    1b:bf:41:e1:dc:1f:8a:4d:72:95:8b:14:f7:91:40:
                    45:30:95:07:a2:f7:25:fe:7f:a3:47:a4:11:64:ea:
                    ae:f1:f7:24:b8:d4:af:0a:89:18:17:6d:0b:48:4a:
                    be:b9:37:7e:10:5a:56:ba:72:0f:ef:e7:99:be:7a:
                    5a:30:9a:da:50:a7:48:2c:d4:c8:63:71:31:0b:f5:
                    6d:97:6b:66:77:f7:31:2e:cf:73:70:b7:84:fc:b3:
                    eb:78:22:e6:8d:6b:13:61:84:4f:4b:dc:29:c9:03:
                    5b:74:0e:86:9d:ca:6f:50:9f:8f:5e:87:be:45:5d:
                    a1:ce:e9:c6:17:09:96:22:63:45:29:f7:1a:32:b0:
                    cb:ef:fd:0b:eb:07:9e:69:95:35:68:be:bd:5a:e1:
                    b5:60:ff:4e:41:b2:13:08:91:05:ba:0f:6e:b1:27:
                    d1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:08:B5:79:19:44:36:79:13:B3:5C:5D:F4:4D:8A:F7:33:F1:F7:54
            X509v3 Authority Key Identifier:
                keyid:74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/74B90A27D86F6A1914C261C21469DF853E32BEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a35303a3a2f34342d3438203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:50::/44

    Signature Algorithm: sha256WithRSAEncryption
         95:4d:0c:fa:06:82:14:87:38:65:c6:f8:98:e1:ac:76:bf:ed:
         24:1e:2e:46:05:4f:25:00:5a:4c:d3:0a:a6:74:85:29:8b:ea:
         13:b5:d6:d0:39:d4:8f:34:17:58:b2:96:c7:5d:b7:55:e4:83:
         b0:8a:91:37:bc:a2:03:ed:e0:2b:86:98:43:11:a0:58:ea:5f:
         0f:4f:0c:ae:b4:53:de:31:52:c7:52:1a:db:83:ce:4b:c2:93:
         22:30:d2:79:33:51:99:6e:5e:40:42:44:f2:3a:5e:7f:d6:e1:
         80:5f:df:4d:b8:09:09:34:bd:96:51:fc:db:b3:21:6b:9f:8f:
         6b:83:32:3c:41:59:11:2d:5c:49:f8:45:2f:ec:30:04:b0:bf:
         4d:24:58:fa:0d:2f:85:ea:b3:5a:c0:e5:e9:a4:a5:18:0b:e0:
         6a:da:34:80:0e:ab:cb:96:4b:e1:4c:9d:cf:51:2d:45:49:38:
         3b:4e:b1:4f:b5:4b:cb:30:4c:45:e2:46:d2:ba:04:a5:20:67:
         a9:76:be:20:76:34:3e:d1:0b:a4:d7:b0:2d:dc:29:12:a1:74:
         ea:bb:87:3b:2c:46:f8:4a:41:d6:5d:59:b0:3f:fd:b1:37:e0:
         44:68:7b:ad:f4:fb:c8:25:de:f6:b8:de:65:ce:0f:ae:6d:0c:
         a6:c6:44:96
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUczYn+ZRi4Hy4+txeMiUPUu5b2vIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzRiOTBhMjdkODZmNmExOTE0YzI2MWMyMTQ2OWRmODUz
ZTMyYmViNTAeFw0yMzA0MDYyMTAxNDZaFw0yNDA0MDQyMTA2NDZaMDMxMTAvBgNV
BAMTKEUzMDhCNTc5MTk0NDM2NzkxM0IzNUM1REY0NEQ4QUY3MzNGMUY3NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVMSv6XQNVxiG5cq4cLFdYNBmP
kVP/ODTV6r/tJUlAr+kOqpuRhH9T/WH6rk6mHw53a+xAbEuFS4jIzJnpjgz+8tb/
JtZ0715imi7+WRNlb5jp2aZuEzyjCBu/QeHcH4pNcpWLFPeRQEUwlQei9yX+f6NH
pBFk6q7x9yS41K8KiRgXbQtISr65N34QWla6cg/v55m+elowmtpQp0gs1MhjcTEL
9W2Xa2Z39zEuz3Nwt4T8s+t4IuaNaxNhhE9L3CnJA1t0Doadym9Qn49eh75FXaHO
6cYXCZYiY0Up9xoysMvv/QvrB55plTVovr1a4bVg/05BshMIkQW6D26xJ9EDAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQU4wi1eRlENnkTs1xd9E2K9zPx91QwHwYDVR0j
BBgwFoAUdLkKJ9hvahkUwmHCFGnfhT4yvrUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTRmYzQ3NTItZjgxYS00N2I2LThmMGQtZmY3NGM4YjBi
MGE0LzAvNzRCOTBBMjdEODZGNkExOTE0QzI2MUMyMTQ2OURGODUzRTMyQkVCNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RMa0tKOWh2YWhrVXdtSENGR25maFQ0
eXZyVS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTRmYzQ3NTIt
ZjgxYS00N2I2LThmMGQtZmY3NGM4YjBiMGE0LzAvMzI2MTMxMzMzYTY0NjYzODMw
M2EzNTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzQzODM0MzYzNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHBCoT34AAUDANBgkqhkiG9w0BAQsFAAOCAQEAlU0M+gaCFIc4Zcb4mOGsdr/t
JB4uRgVPJQBaTNMKpnSFKYvqE7XW0DnUjzQXWLKWx123VeSDsIqRN7yiA+3gK4aY
QxGgWOpfD08MrrRT3jFSx1Ia24POS8KTIjDSeTNRmW5eQEJE8jpef9bhgF/fTbgJ
CTS9llH827Mha5+Pa4MyPEFZES1cSfhFL+wwBLC/TSRY+g0vheqzWsDl6aSlGAvg
ato0gA6ry5ZL4Uydz1EtRUk4O06xT7VLyzBMReJG0roEpSBnqXa+IHY0PtELpNew
LdwpEqF06ruHOyxG+EpB1l1ZsD/9sTfgRGh7rfT7yCXe9rjeZc4Prm0MpsZElg==
-----END CERTIFICATE-----