Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a37303a3a2f34342d3438203d3e203630393030.roa
File:                     326131333a646638303a37303a3a2f34342d3438203d3e203630393030.roa (raw, json)
Hash identifier:          Et1amUe+R4KLogY7ESYm7VFP3oGguJQTR9vbtuM/O0s=
Subject key identifier:   42:DC:12:C5:82:96:6B:0C:68:EE:1C:8E:40:08:F1:D9:A8:D7:CB:41
Certificate issuer:       /CN=74b90a27d86f6a1914c261c21469df853e32beb5
Certificate serial:       425C21BAF74EDF1EC3D77C875F030A5784F66595
Authority key identifier: 74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a37303a3a2f34342d3438203d3e203630393030.roa
Signing time:             Tue 18 Apr 2023 22:45:26 +0000
ROA not before:           Tue 18 Apr 2023 22:40:26 +0000
ROA not after:            Tue 16 Apr 2024 22:45:26 +0000
asID:                     60900
IP address blocks:        2a13:df80:70::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:5c:21:ba:f7:4e:df:1e:c3:d7:7c:87:5f:03:0a:57:84:f6:65:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b90a27d86f6a1914c261c21469df853e32beb5
        Validity
            Not Before: Apr 18 22:40:26 2023 GMT
            Not After : Apr 16 22:45:26 2024 GMT
        Subject: CN=42DC12C582966B0C68EE1C8E4008F1D9A8D7CB41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5b:61:f5:53:8b:f5:36:c8:5d:a6:8e:e1:f7:
                    5d:ec:81:3d:54:bb:66:0a:1b:da:97:9b:7d:41:64:
                    b2:26:42:0a:dc:6e:52:f9:bb:db:33:19:71:e6:56:
                    ed:4b:8e:e4:04:85:fd:01:c7:ad:bc:7c:9c:8e:90:
                    85:52:43:db:f7:98:bd:b9:67:fa:a5:6c:8e:a7:2a:
                    e7:fb:ef:e4:cc:dd:28:a8:82:62:0c:b1:90:d8:85:
                    2a:c4:72:dd:fc:5e:de:98:3b:b9:2d:14:f7:c0:28:
                    1b:29:23:6d:33:11:c5:25:9b:32:08:61:0f:d0:53:
                    5e:51:52:88:bf:f4:a0:c9:db:ee:f5:06:bc:d7:d5:
                    36:5a:03:4a:8d:88:46:8e:23:6a:b3:41:b1:4c:89:
                    84:4a:44:c8:33:1b:7e:e9:66:fd:3a:49:55:9b:49:
                    5a:8e:2f:29:89:f0:2d:30:71:4a:b5:b6:f2:49:0a:
                    0e:44:d3:fa:34:15:45:17:ef:fc:61:9a:5f:a8:0d:
                    b4:bd:3b:50:90:89:d4:a1:ed:f6:be:92:ce:72:12:
                    de:3f:cf:a1:f1:63:42:6b:50:86:82:58:9a:28:24:
                    5c:d1:2d:b1:6c:41:ca:e8:ac:98:6d:43:2f:dc:d5:
                    3d:1e:4a:40:2f:f0:91:78:cf:c8:5b:82:c7:81:f0:
                    95:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:DC:12:C5:82:96:6B:0C:68:EE:1C:8E:40:08:F1:D9:A8:D7:CB:41
            X509v3 Authority Key Identifier:
                keyid:74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/74B90A27D86F6A1914C261C21469DF853E32BEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a37303a3a2f34342d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:70::/44

    Signature Algorithm: sha256WithRSAEncryption
         82:bf:ab:4b:83:fe:c1:b9:11:3d:58:20:37:5a:c1:03:da:57:
         be:aa:ab:5a:81:04:cf:46:89:5c:c4:db:4b:6f:f6:83:98:9f:
         ed:fb:45:4b:bc:85:ae:d9:46:e2:be:d5:6a:21:6e:40:84:33:
         53:0a:0d:f3:c1:9d:3b:2b:37:34:7b:20:c5:fe:61:94:9f:67:
         bf:7d:fe:8a:6e:87:de:ad:73:d2:88:00:9e:80:9b:2a:14:be:
         1f:b4:b2:5b:a8:fa:3e:74:d4:43:4e:aa:14:88:b6:0f:7b:d2:
         15:9c:92:2f:fd:6b:8c:92:31:78:c6:51:91:83:c8:33:d9:bb:
         f0:94:c0:50:13:11:72:62:e9:ad:7f:5d:49:01:57:a2:60:9c:
         2a:be:65:e8:74:65:80:d1:bf:9a:31:b2:c1:42:51:73:3a:58:
         71:2a:23:d2:72:22:55:d4:cb:09:6f:03:c3:0e:66:63:39:5d:
         a0:d2:a2:9c:bd:df:79:72:b2:62:1b:16:ba:71:01:ab:62:4e:
         56:87:f3:b5:4b:cd:3e:ed:07:c0:07:d7:ef:a3:1e:80:f6:f2:
         10:30:53:23:b6:8c:13:5c:e7:3a:f7:91:75:f2:a2:30:42:8c:
         06:93:40:9e:c2:63:e8:d4:e0:32:cc:2e:84:1d:d6:21:f0:39:
         06:55:b7:90
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----