Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a3a2f32392d3239203d3e20313938393830.roa
File:                     326131333a646638303a3a2f32392d3239203d3e20313938393830.roa (raw, json)
Hash identifier:          c+jS4wQyydwv7ybKj3hlzRuR5wobTUxqRPkhJO0xyYY=
Subject key identifier:   3F:60:87:4F:A2:C2:3A:BD:F3:ED:54:97:F9:52:2E:B8:F3:BF:28:47
Certificate issuer:       /CN=74b90a27d86f6a1914c261c21469df853e32beb5
Certificate serial:       6840CDEC7D3B6BB7A996C4B0FB0656F8EA06673E
Authority key identifier: 74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a3a2f32392d3239203d3e20313938393830.roa
Signing time:             Wed 26 Apr 2023 00:54:37 +0000
ROA not before:           Wed 26 Apr 2023 00:49:37 +0000
ROA not after:            Wed 24 Apr 2024 00:54:37 +0000
asID:                     198980
IP address blocks:        2a13:df80::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:40:cd:ec:7d:3b:6b:b7:a9:96:c4:b0:fb:06:56:f8:ea:06:67:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b90a27d86f6a1914c261c21469df853e32beb5
        Validity
            Not Before: Apr 26 00:49:37 2023 GMT
            Not After : Apr 24 00:54:37 2024 GMT
        Subject: CN=3F60874FA2C23ABDF3ED5497F9522EB8F3BF2847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:46:6d:8c:73:fb:fb:36:cb:3d:d8:68:e6:e7:
                    4f:c2:62:cd:ad:ad:ec:fd:cd:b4:79:35:33:b5:02:
                    55:7d:41:24:43:1d:11:67:23:eb:0d:29:3e:98:a3:
                    85:ec:8a:b5:94:7c:1d:86:8b:2b:7f:cd:6c:00:66:
                    75:fc:a2:c7:7e:83:cb:ae:89:21:38:8d:ae:8d:00:
                    60:07:00:f7:57:f1:d1:b0:7a:8d:cd:83:4f:3d:38:
                    06:a0:14:98:c9:4b:ff:d3:22:b9:6c:0c:6d:34:42:
                    40:1b:e8:68:bd:84:e3:ec:69:9b:72:77:ed:9f:18:
                    3f:28:d2:db:d7:bf:aa:b6:1e:ed:c3:5d:2f:e3:4b:
                    74:e2:9f:98:dd:09:01:59:ec:dd:17:f7:af:d7:37:
                    4f:f7:2a:ee:8c:5e:4d:b9:07:72:80:33:db:8d:62:
                    31:57:3b:58:c8:08:52:d9:f4:5f:5b:08:83:d1:1e:
                    91:5d:c3:52:df:d8:93:1c:c8:f7:fb:d3:e7:a0:e0:
                    a9:19:0a:53:ce:37:07:ab:36:d2:eb:79:6f:92:61:
                    68:d5:e0:a9:41:85:d5:97:5a:7e:18:d4:40:25:66:
                    53:ad:cc:05:09:1f:5a:61:6c:f3:2c:70:c9:6f:7e:
                    d2:21:fa:69:58:91:ce:87:16:06:26:8f:1d:fc:71:
                    70:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:60:87:4F:A2:C2:3A:BD:F3:ED:54:97:F9:52:2E:B8:F3:BF:28:47
            X509v3 Authority Key Identifier:
                keyid:74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/74B90A27D86F6A1914C261C21469DF853E32BEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a3a2f32392d3239203d3e20313938393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80::/29

    Signature Algorithm: sha256WithRSAEncryption
         c0:b6:c0:ce:1f:66:ef:c0:11:f3:3e:9e:e1:99:26:ff:d4:6e:
         b8:ad:9f:63:59:88:8e:13:fe:89:42:c8:e0:fa:cb:29:1d:16:
         86:f4:a2:d2:05:e0:8b:f6:e6:22:e7:ce:61:b0:29:cb:0a:9b:
         64:db:b1:b8:ca:c2:b5:ed:14:09:03:72:0d:09:c7:d4:1d:b5:
         2f:77:c4:b6:ad:9c:90:3e:7f:d6:a0:25:cc:e7:90:39:9c:e0:
         4c:06:e4:72:57:42:7f:4b:b1:8a:79:ca:57:e6:f3:b0:21:97:
         3b:29:24:01:3f:d0:74:51:9d:23:95:3a:ab:79:2e:8d:e4:56:
         bb:ca:18:bd:bf:98:44:df:fd:81:5b:c1:b4:fe:d7:65:70:bb:
         3c:94:a7:95:1a:15:1d:e0:18:65:cf:c0:50:15:ee:de:83:05:
         14:d0:9a:7f:c9:41:5b:d0:ba:de:65:d9:81:5f:ce:f9:14:85:
         01:26:18:01:af:3f:e2:d9:f1:06:ab:23:35:e2:ff:e4:92:5b:
         d6:9d:c7:2e:a6:55:1d:25:cb:5c:56:52:8d:f5:59:98:ad:51:
         ea:50:d7:ba:59:69:0d:b9:b7:2a:bf:d1:51:61:c8:b1:92:5f:
         34:95:5f:3f:3a:c2:ef:65:06:67:93:94:b6:66:74:e6:75:f2:
         f4:fa:56:19
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUaEDN7H07a7eplsSw+wZW+OoGZz4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzRiOTBhMjdkODZmNmExOTE0YzI2MWMyMTQ2OWRmODUz
ZTMyYmViNTAeFw0yMzA0MjYwMDQ5MzdaFw0yNDA0MjQwMDU0MzdaMDMxMTAvBgNV
BAMTKDNGNjA4NzRGQTJDMjNBQkRGM0VENTQ5N0Y5NTIyRUI4RjNCRjI4NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaRm2Mc/v7Nss92Gjm50/CYs2t
rez9zbR5NTO1AlV9QSRDHRFnI+sNKT6Yo4XsirWUfB2Giyt/zWwAZnX8osd+g8uu
iSE4ja6NAGAHAPdX8dGweo3Ng089OAagFJjJS//TIrlsDG00QkAb6Gi9hOPsaZty
d+2fGD8o0tvXv6q2Hu3DXS/jS3Tin5jdCQFZ7N0X96/XN0/3Ku6MXk25B3KAM9uN
YjFXO1jICFLZ9F9bCIPRHpFdw1Lf2JMcyPf70+eg4KkZClPONwerNtLreW+SYWjV
4KlBhdWXWn4Y1EAlZlOtzAUJH1phbPMscMlvftIh+mlYkc6HFgYmjx38cXB7AgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQUP2CHT6LCOr3z7VSX+VIuuPO/KEcwHwYDVR0j
BBgwFoAUdLkKJ9hvahkUwmHCFGnfhT4yvrUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTRmYzQ3NTItZjgxYS00N2I2LThmMGQtZmY3NGM4YjBi
MGE0LzAvNzRCOTBBMjdEODZGNkExOTE0QzI2MUMyMTQ2OURGODUzRTMyQkVCNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RMa0tKOWh2YWhrVXdtSENGR25maFQ0
eXZyVS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTRmYzQ3NTIt
ZjgxYS00N2I2LThmMGQtZmY3NGM4YjBiMGE0LzAvMzI2MTMxMzMzYTY0NjYzODMw
M2EzYTJmMzIzOTJkMzIzOTIwM2QzZTIwMzEzOTM4MzkzODMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUD
KhPfgDANBgkqhkiG9w0BAQsFAAOCAQEAwLbAzh9m78AR8z6e4Zkm/9RuuK2fY1mI
jhP+iULI4PrLKR0WhvSi0gXgi/bmIufOYbApywqbZNuxuMrCte0UCQNyDQnH1B21
L3fEtq2ckD5/1qAlzOeQOZzgTAbkcldCf0uxinnKV+bzsCGXOykkAT/QdFGdI5U6
q3kujeRWu8oYvb+YRN/9gVvBtP7XZXC7PJSnlRoVHeAYZc/AUBXu3oMFFNCaf8lB
W9C63mXZgV/O+RSFASYYAa8/4tnxBqsjNeL/5JJb1p3HLqZVHSXLXFZSjfVZmK1R
6lDXullpDbm3Kr/RUWHIsZJfNJVfPzrC72UGZ5OUtmZ05nXy9PpWGQ==
-----END CERTIFICATE-----