Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a37313a3a2f34382d3438203d3e203630393030.roa
File:                     326131333a646638303a37313a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          AoOaaE1VgAiYyv9OQnPf15g+Sb+hC2Xj8NLVvX0XiTM=
Subject key identifier:   B9:B4:FD:40:06:CE:34:E6:23:D9:25:B8:0A:5E:70:E6:82:49:30:C4
Certificate issuer:       /CN=74b90a27d86f6a1914c261c21469df853e32beb5
Certificate serial:       6E41F2B1A498FF0F2C968CB4940F946A095BB4C6
Authority key identifier: 74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a37313a3a2f34382d3438203d3e203630393030.roa
Signing time:             Sun 23 Apr 2023 13:04:44 +0000
ROA not before:           Sun 23 Apr 2023 12:59:44 +0000
ROA not after:            Sun 21 Apr 2024 13:04:44 +0000
asID:                     60900
IP address blocks:        2a13:df80:71::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:41:f2:b1:a4:98:ff:0f:2c:96:8c:b4:94:0f:94:6a:09:5b:b4:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b90a27d86f6a1914c261c21469df853e32beb5
        Validity
            Not Before: Apr 23 12:59:44 2023 GMT
            Not After : Apr 21 13:04:44 2024 GMT
        Subject: CN=B9B4FD4006CE34E623D925B80A5E70E6824930C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3c:08:44:90:8d:a9:b6:49:78:1e:08:7f:78:
                    06:4f:5f:ee:9a:d4:cf:8a:66:24:74:af:1c:28:6c:
                    37:3c:a1:6d:1e:36:af:77:0b:9d:0e:6a:cb:6c:af:
                    38:01:82:10:c6:09:73:77:38:67:f8:35:34:0f:38:
                    89:33:74:ec:b5:1b:40:92:db:25:0c:78:e1:31:a7:
                    02:31:d5:90:ad:d1:be:7e:e4:ce:3b:9d:34:f1:a5:
                    a0:c3:aa:e6:2d:26:31:42:4e:7a:1d:66:a3:f3:f8:
                    5d:3c:cd:3e:96:d2:8f:e2:d6:69:6a:90:f9:dc:fc:
                    96:97:fa:3a:22:7d:6b:c3:0b:b2:ee:84:b0:9b:e9:
                    51:fe:90:12:49:ef:21:88:42:cf:40:06:67:fa:ec:
                    d9:90:8c:aa:e5:32:2d:ff:d2:e7:41:7a:a0:c7:74:
                    d7:d7:e9:d0:a6:2b:41:47:e5:52:08:72:34:96:69:
                    6e:a1:2d:f0:da:58:8f:b0:69:66:62:ca:ed:f7:b8:
                    1d:2a:8b:77:71:4e:16:53:88:aa:ca:2c:40:f8:20:
                    e4:60:ff:1b:f5:8c:56:01:48:9d:63:dc:d1:bc:29:
                    90:95:cc:a2:c7:4f:14:c7:f5:9d:c9:af:29:68:47:
                    2d:e9:15:48:d8:3f:43:05:32:8b:b2:6f:cd:72:68:
                    47:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B4:FD:40:06:CE:34:E6:23:D9:25:B8:0A:5E:70:E6:82:49:30:C4
            X509v3 Authority Key Identifier:
                keyid:74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/74B90A27D86F6A1914C261C21469DF853E32BEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a37313a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:71::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:04:64:7a:0b:43:9d:c9:09:94:6f:37:16:33:50:00:75:5b:
         a4:68:9b:09:be:d8:b8:f1:9c:d0:a7:df:20:6d:7f:ec:c4:91:
         26:d6:1e:4a:36:36:a6:6f:11:c0:ef:eb:f4:64:96:8b:6b:4a:
         68:22:a2:7c:a0:cb:bc:e1:86:c8:3d:5f:b9:e8:0c:06:69:85:
         48:62:26:36:d8:25:3b:26:72:46:6b:44:71:2c:4d:45:8c:c7:
         c3:4f:78:78:96:53:77:5c:9a:ef:f5:4d:6a:b6:13:f7:4c:69:
         64:b2:1c:9a:58:af:f2:65:59:cc:0b:f9:38:0c:7c:e7:86:aa:
         e6:5e:b5:77:95:cd:2f:41:f0:8d:82:58:c8:56:df:ac:fb:48:
         52:ea:e6:43:a0:64:63:56:19:bd:c2:e5:66:4f:6f:fb:e6:fc:
         0b:c1:a2:c9:77:ba:15:6d:48:62:16:6f:cc:54:85:66:33:96:
         57:7a:50:d2:67:6f:7b:72:c5:7b:16:96:b2:64:c6:ae:f8:c7:
         9c:3a:49:1d:5d:83:22:b4:51:ea:b3:c4:77:21:26:f0:c6:26:
         c7:7f:34:06:6f:28:ff:9f:83:c8:f2:e4:1a:cd:30:77:e9:f3:
         c4:c8:47:f2:68:25:1a:eb:e3:e6:88:1f:23:42:57:ef:0e:be:
         f6:1a:ad:8a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----