Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a37303a3a2f34342d3434203d3e203630393030.roa
File:                     326131333a646638303a37303a3a2f34342d3434203d3e203630393030.roa (raw, json)
Hash identifier:          dyzBWv/+K1wgix/ZR8DC4kc0VEDB/gjz0MYefHm0XLI=
Subject key identifier:   4F:AF:1D:5D:17:76:49:9C:0A:F8:B8:CB:6D:97:B8:49:D1:7B:4F:34
Certificate issuer:       /CN=74b90a27d86f6a1914c261c21469df853e32beb5
Certificate serial:       2151C1D8D72504EFF515E76AFEC312A5C16E214D
Authority key identifier: 74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a37303a3a2f34342d3434203d3e203630393030.roa
Signing time:             Sun 23 Apr 2023 13:04:41 +0000
ROA not before:           Sun 23 Apr 2023 12:59:41 +0000
ROA not after:            Sun 21 Apr 2024 13:04:41 +0000
asID:                     60900
IP address blocks:        2a13:df80:70::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:51:c1:d8:d7:25:04:ef:f5:15:e7:6a:fe:c3:12:a5:c1:6e:21:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b90a27d86f6a1914c261c21469df853e32beb5
        Validity
            Not Before: Apr 23 12:59:41 2023 GMT
            Not After : Apr 21 13:04:41 2024 GMT
        Subject: CN=4FAF1D5D1776499C0AF8B8CB6D97B849D17B4F34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b9:cf:8c:23:3b:c6:53:27:ff:b3:88:d1:64:
                    79:a9:b0:f8:db:5a:67:80:2d:98:e4:81:8a:ce:6f:
                    71:dc:2e:d8:c0:3d:2c:9f:48:15:5d:b1:ea:f0:bc:
                    b9:d0:96:12:0f:ec:b1:d0:b0:00:ee:50:29:5b:5e:
                    6b:c7:43:b2:ec:e1:29:5c:10:13:1a:4d:00:52:f6:
                    1a:8f:27:22:70:d5:73:58:5f:e1:1e:b9:98:04:8d:
                    9d:e7:12:25:bd:4c:f0:a6:9e:b9:66:5a:c9:1c:69:
                    86:a5:f6:bf:ba:00:b1:71:ca:d5:dd:f4:88:6d:8a:
                    30:5f:1d:30:58:b5:d4:cb:54:69:b0:7b:1e:d1:c7:
                    fe:4e:7e:75:d9:0b:b5:c4:06:83:f4:c8:eb:18:09:
                    f2:fa:5a:65:cc:e3:71:06:b4:5e:1f:94:09:52:c3:
                    85:02:58:0f:b8:aa:44:c8:dd:bd:17:2c:2b:96:90:
                    ce:67:2d:89:38:f1:53:22:c1:a2:d2:e3:d0:fb:ef:
                    0b:23:e8:46:7e:d0:18:0e:0b:05:2f:6b:0c:fd:b1:
                    11:a7:ec:01:3e:6e:18:85:d2:2a:39:5f:1e:32:ac:
                    8f:1c:af:58:d6:08:30:57:94:36:15:b7:b0:0b:e0:
                    70:72:3f:28:ff:2a:82:be:cf:a7:5b:b2:ed:ad:c8:
                    e5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AF:1D:5D:17:76:49:9C:0A:F8:B8:CB:6D:97:B8:49:D1:7B:4F:34
            X509v3 Authority Key Identifier:
                keyid:74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/74B90A27D86F6A1914C261C21469DF853E32BEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a37303a3a2f34342d3434203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:70::/44

    Signature Algorithm: sha256WithRSAEncryption
         e2:42:98:08:fe:c3:3f:4d:30:ee:50:a3:1e:bd:af:73:a6:5d:
         29:07:20:a1:37:95:6d:89:73:59:ce:18:cf:60:30:6a:7f:10:
         8e:d4:ad:0b:37:5e:38:73:88:90:a3:9f:d9:e5:92:1c:a7:b7:
         f8:6d:29:3e:9f:f8:1b:05:a3:2a:c3:60:bc:8a:ee:13:25:ec:
         01:77:9f:f2:bd:10:ea:7f:e7:fe:03:fa:05:ae:12:ec:a7:55:
         6e:5c:de:2a:03:08:45:8f:b3:de:92:7f:9b:2b:03:d4:15:ef:
         3d:29:c4:0d:ac:07:a6:ce:14:6f:89:f9:ad:ec:6f:60:b4:f2:
         6e:24:1a:b4:e7:5f:a1:25:25:c5:cb:72:46:c2:8b:6f:2d:93:
         6e:ca:58:79:64:51:da:92:c1:66:c9:78:82:13:69:6d:15:2f:
         23:4b:44:ae:c4:41:b0:b1:50:63:4b:e2:51:d2:c3:94:92:d4:
         22:6b:00:74:f0:0e:f5:03:40:4b:80:2a:a8:0c:fc:3e:1d:b1:
         eb:e8:60:f5:5a:c5:b1:ee:c9:0c:5b:77:72:2a:48:2f:54:e1:
         a8:06:5c:02:6d:29:b1:d3:54:84:37:82:19:5b:3d:64:45:9b:
         bc:06:b8:f6:68:1e:2e:c1:4b:0a:09:e9:78:ed:bb:0e:88:b6:
         32:26:ec:dd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----