Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a38303a3a2f34342d3438203d3e203632343134.roa
File:                     326131333a646638303a38303a3a2f34342d3438203d3e203632343134.roa (raw, json)
Hash identifier:          9iBwCxJZbJF6w4UhM8wlXT0G4JU21jou9aOi0Wg7Wt8=
Subject key identifier:   17:48:C1:C4:0D:33:F1:DE:FF:A3:F8:3D:AD:05:F0:5E:C0:C4:DA:4C
Certificate issuer:       /CN=74b90a27d86f6a1914c261c21469df853e32beb5
Certificate serial:       02113E673AEE1A028130E52498ADBD1DE636050F
Authority key identifier: 74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a38303a3a2f34342d3438203d3e203632343134.roa
Signing time:             Tue 18 Apr 2023 14:08:46 +0000
ROA not before:           Tue 18 Apr 2023 14:03:46 +0000
ROA not after:            Tue 16 Apr 2024 14:08:46 +0000
asID:                     62414
IP address blocks:        2a13:df80:80::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:11:3e:67:3a:ee:1a:02:81:30:e5:24:98:ad:bd:1d:e6:36:05:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b90a27d86f6a1914c261c21469df853e32beb5
        Validity
            Not Before: Apr 18 14:03:46 2023 GMT
            Not After : Apr 16 14:08:46 2024 GMT
        Subject: CN=1748C1C40D33F1DEFFA3F83DAD05F05EC0C4DA4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:69:94:c9:b0:23:3a:45:83:b8:77:1e:10:f1:
                    5f:b7:0f:c8:5a:c1:58:27:70:f0:94:6f:f7:fb:07:
                    8f:bf:ef:2a:36:cd:bf:f8:a5:48:68:99:28:fc:cf:
                    ea:32:f0:7f:32:38:45:01:6d:c4:e4:40:d3:88:d1:
                    fd:84:d3:b2:56:93:f0:16:6b:12:13:fe:79:be:dd:
                    c9:9e:62:21:0f:dd:97:cc:15:f6:72:86:54:ad:10:
                    32:9b:e3:a3:ee:6e:1a:e7:c0:9b:6a:27:db:56:ef:
                    93:e5:de:1e:58:3a:75:ff:b3:99:2a:74:5d:29:6c:
                    5d:df:3a:20:4f:8e:b4:6f:29:fe:b6:c3:b8:a6:3c:
                    aa:be:cd:fb:63:b6:b7:38:ed:a3:be:53:15:cc:4b:
                    00:6c:d5:6b:5a:0d:d3:d0:6f:12:9a:5f:f6:0a:4f:
                    6c:c6:b1:7d:ea:e4:2e:74:ce:d1:31:87:83:0f:fd:
                    d5:99:6e:91:f5:6b:07:3d:6b:6d:b8:bb:c9:be:70:
                    ea:ea:d7:b5:59:7d:9d:8f:ef:d5:d5:50:b2:a7:77:
                    90:eb:a2:45:44:73:93:46:bf:92:4d:15:35:41:95:
                    60:81:0e:6d:01:cf:fe:db:15:b1:07:6e:70:2f:65:
                    77:1b:a4:ff:25:83:24:01:2a:45:74:66:64:df:3a:
                    14:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:48:C1:C4:0D:33:F1:DE:FF:A3:F8:3D:AD:05:F0:5E:C0:C4:DA:4C
            X509v3 Authority Key Identifier:
                keyid:74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/74B90A27D86F6A1914C261C21469DF853E32BEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a38303a3a2f34342d3438203d3e203632343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:80::/44

    Signature Algorithm: sha256WithRSAEncryption
         4a:ad:9a:7e:d1:28:62:ce:79:6d:d4:5d:2f:3c:48:36:80:43:
         40:b7:99:14:f2:12:30:44:b6:8b:13:fa:60:db:e9:aa:65:dd:
         88:f7:9b:fb:63:86:37:a0:88:0a:fd:27:4c:9f:ba:3b:e6:ae:
         bc:fa:2b:50:91:1b:d6:63:ca:90:b6:9a:74:c6:cb:08:58:93:
         4f:a4:ef:aa:0a:94:6c:0b:b6:39:d4:9c:12:3b:3d:fe:5c:99:
         28:b5:00:7e:53:d6:29:91:7f:19:ed:ea:ba:66:e3:41:7c:a4:
         17:3b:ba:15:04:f9:de:12:ea:fa:3d:67:67:60:78:86:89:16:
         11:1d:26:ca:92:72:9a:f0:c5:a2:82:c6:9a:81:59:b9:88:5d:
         57:9a:0d:6a:37:a1:01:b6:cf:fa:ba:f0:92:bd:19:97:38:b2:
         ef:3f:8f:9e:6e:57:69:19:fa:ae:f2:32:0d:57:9f:ab:d4:35:
         4e:8a:a4:55:cb:af:85:23:7e:8c:b7:23:81:53:c9:d5:93:0d:
         28:8a:60:15:81:50:f7:76:58:af:e6:a6:be:90:e0:9b:39:e8:
         10:bd:92:17:2b:af:bb:ce:f2:9b:4f:8b:eb:76:5f:61:0c:38:
         5a:bf:ae:ac:ff:6b:18:6c:b1:3b:e3:fe:cf:66:ff:48:4f:92:
         08:3c:c7:d5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----