Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a36303a3a2f34342d3438203d3e20313938393830.roa
File:                     326131333a646638303a36303a3a2f34342d3438203d3e20313938393830.roa (raw, json)
Hash identifier:          1VJmBwwxgijwzxK5A3kpduzgRdfug5XLnJmFqE+5Nyo=
Subject key identifier:   0B:31:15:EE:22:44:0C:E8:4F:90:E0:FD:8C:01:A9:4A:76:A4:84:84
Certificate issuer:       /CN=74b90a27d86f6a1914c261c21469df853e32beb5
Certificate serial:       66F7E96CC950776A445511374B204F7088FA2B94
Authority key identifier: 74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a36303a3a2f34342d3438203d3e20313938393830.roa
Signing time:             Thu 06 Apr 2023 20:28:34 +0000
ROA not before:           Thu 06 Apr 2023 20:23:34 +0000
ROA not after:            Thu 04 Apr 2024 20:28:34 +0000
asID:                     198980
IP address blocks:        2a13:df80:60::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f7:e9:6c:c9:50:77:6a:44:55:11:37:4b:20:4f:70:88:fa:2b:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b90a27d86f6a1914c261c21469df853e32beb5
        Validity
            Not Before: Apr  6 20:23:34 2023 GMT
            Not After : Apr  4 20:28:34 2024 GMT
        Subject: CN=0B3115EE22440CE84F90E0FD8C01A94A76A48484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:85:c5:28:ff:f4:0b:ba:92:df:44:ca:e0:15:
                    bf:86:48:01:52:b2:94:5a:49:ef:51:eb:81:76:a1:
                    e1:0a:ec:a0:7d:4c:5f:43:07:6f:f0:35:99:7e:3e:
                    d9:ae:f4:c3:e9:5e:e7:51:77:7e:92:27:5d:a4:d3:
                    42:2d:fb:06:3f:bc:e3:3c:fa:c6:7b:7b:a2:a6:cf:
                    dd:98:0d:09:91:98:57:03:0c:97:89:f6:87:a7:d0:
                    13:0a:20:a1:a8:fd:17:36:e1:5c:24:db:d8:7c:3b:
                    ac:5c:bd:90:09:ce:0a:81:ff:41:b9:ff:13:3e:f6:
                    e4:52:7a:e7:68:0a:4a:20:a7:b2:93:63:e7:03:67:
                    6b:76:7c:32:b7:fd:5f:ff:75:19:ff:71:95:40:d3:
                    f4:84:23:48:23:ef:43:13:89:48:61:e6:3f:98:81:
                    cd:c4:b6:99:d8:42:81:d5:00:4e:ef:58:62:98:a2:
                    f9:42:44:e1:fe:1e:1b:da:52:25:0b:03:9d:19:31:
                    ab:0d:ec:b1:77:09:40:0a:25:60:0f:71:0a:66:88:
                    3d:ff:61:b8:80:d4:9b:f9:1d:d0:21:a7:d5:91:c5:
                    ff:f1:46:24:fe:18:b6:f4:a2:1b:5b:ae:71:ff:24:
                    15:29:22:0f:6a:64:42:66:2a:72:24:f2:09:80:05:
                    91:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:31:15:EE:22:44:0C:E8:4F:90:E0:FD:8C:01:A9:4A:76:A4:84:84
            X509v3 Authority Key Identifier:
                keyid:74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/74B90A27D86F6A1914C261C21469DF853E32BEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a36303a3a2f34342d3438203d3e20313938393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:60::/44

    Signature Algorithm: sha256WithRSAEncryption
         23:fe:c5:73:c5:e4:2c:bb:c1:e1:f5:1a:1c:5f:03:be:90:3b:
         ba:e0:b1:9a:73:32:05:9b:2b:89:af:61:d5:a1:d4:f4:12:6f:
         45:f5:cb:ef:46:c9:88:1d:7c:39:94:94:db:fe:14:94:a9:64:
         6c:fa:15:ec:cc:fc:31:1d:ca:e7:39:69:65:ab:93:17:48:79:
         17:26:65:e4:f4:36:88:1f:d5:5a:60:6c:51:27:87:28:b6:75:
         82:ab:9e:8b:86:42:b4:00:97:8c:28:9a:b2:de:e8:b1:d1:94:
         39:87:de:d7:6d:dd:57:77:cd:ca:b2:49:5a:4f:a6:c1:a5:c7:
         55:b3:7e:38:6c:39:96:46:52:b2:db:8e:25:cf:98:6e:01:51:
         d5:97:42:26:d6:bc:7d:61:2f:d1:d0:cf:22:45:49:fc:4c:e5:
         5d:c5:47:dd:82:f9:e2:a4:4a:22:a4:9d:32:1f:07:47:90:a6:
         f7:d0:a5:0a:a8:88:29:cc:8d:17:b1:5c:bf:e2:4b:5c:ff:57:
         a6:11:04:07:56:1f:52:43:65:2f:91:fd:77:c3:03:9a:4f:9c:
         02:55:9d:94:6e:af:36:00:d7:f1:dd:3f:98:7f:56:b0:b3:57:
         d8:53:cb:88:c5:b4:16:ef:c6:c9:b4:3d:8f:81:63:3f:8f:b8:
         44:66:f5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----