Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a3a2f32392d3239203d3e20323130393132.roa
File:                     326131333a646638303a3a2f32392d3239203d3e20323130393132.roa (raw, json)
Hash identifier:          uJuvo72J0cQIYrXZOVmsJ6RNcpCLuLzxjXVg7yPD5AQ=
Subject key identifier:   6B:1D:3C:07:5E:9C:AC:A9:B4:83:42:B1:CB:9E:DD:C1:68:20:A8:F0
Certificate issuer:       /CN=74b90a27d86f6a1914c261c21469df853e32beb5
Certificate serial:       15B6666BF77A31179D795F483962F7B5D174A57C
Authority key identifier: 74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a3a2f32392d3239203d3e20323130393132.roa
Signing time:             Mon 27 Mar 2023 18:13:35 +0000
ROA not before:           Mon 27 Mar 2023 18:08:35 +0000
ROA not after:            Mon 25 Mar 2024 18:13:35 +0000
asID:                     210912
IP address blocks:        2a13:df80::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:b6:66:6b:f7:7a:31:17:9d:79:5f:48:39:62:f7:b5:d1:74:a5:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b90a27d86f6a1914c261c21469df853e32beb5
        Validity
            Not Before: Mar 27 18:08:35 2023 GMT
            Not After : Mar 25 18:13:35 2024 GMT
        Subject: CN=6B1D3C075E9CACA9B48342B1CB9EDDC16820A8F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bf:ae:1b:a5:7c:91:99:fa:89:ae:93:bc:c3:
                    f3:4f:ce:6a:2e:2d:51:4e:b5:10:62:6a:3d:10:91:
                    5e:db:78:9c:0a:e8:11:50:16:02:9b:96:5c:b0:9a:
                    20:f9:44:6d:ca:0c:7c:a6:c3:0d:fd:4c:d6:c9:15:
                    92:7d:e8:b1:47:21:7f:a1:14:a3:d7:69:f9:8f:7e:
                    4b:b7:a6:22:ca:9d:c3:80:c2:a3:dc:dc:12:bd:b5:
                    4f:3a:a1:18:17:9b:89:0d:30:22:86:53:c3:27:1b:
                    07:cc:45:71:50:a6:1c:88:e2:f5:07:4b:f8:80:01:
                    a9:ae:a2:7d:8c:0c:c4:98:0f:cf:31:74:15:42:26:
                    f6:ab:2f:81:28:64:3c:70:3b:e0:6d:0e:f6:08:6b:
                    bb:6c:25:b0:4e:f2:5f:43:8e:fd:04:9a:33:5e:5c:
                    d3:c1:9a:38:8e:25:b7:f3:a4:06:4a:d2:17:98:17:
                    00:bf:53:86:51:36:3e:46:80:ff:dc:61:95:70:f8:
                    0c:3f:65:d9:45:79:33:8a:6f:c3:b2:dd:8e:56:46:
                    1e:d0:e0:36:dc:fb:0d:09:ae:db:3c:f3:24:c6:cc:
                    11:0e:4c:e8:74:3f:44:19:2a:2a:a3:b5:de:40:73:
                    f6:4c:c2:af:92:5c:95:1c:13:bb:2b:53:27:9e:18:
                    9e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1D:3C:07:5E:9C:AC:A9:B4:83:42:B1:CB:9E:DD:C1:68:20:A8:F0
            X509v3 Authority Key Identifier:
                keyid:74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/74B90A27D86F6A1914C261C21469DF853E32BEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a3a2f32392d3239203d3e20323130393132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80::/29

    Signature Algorithm: sha256WithRSAEncryption
         02:a2:b3:39:c6:2a:ee:c6:1f:b2:b7:9e:8e:0a:eb:59:5b:5c:
         fc:2b:bf:af:8b:56:6a:76:17:92:bf:68:a1:2a:0f:64:dc:25:
         74:88:3f:4c:42:32:c2:2d:6e:37:5c:f2:de:6d:50:90:b0:a0:
         3a:a2:51:21:66:cb:95:2a:4a:54:50:d4:6e:12:d3:1c:36:d1:
         f5:10:98:9e:bd:18:d3:ff:3f:f1:12:eb:6a:43:95:d7:06:25:
         b5:00:89:bd:cc:08:e1:c2:fc:19:b1:dc:d1:aa:3f:41:dd:9a:
         2e:7a:23:d6:d6:78:89:fa:a2:bd:f7:0c:05:85:11:06:58:3a:
         2d:d5:fc:59:4d:ab:18:40:86:0c:66:fc:19:84:3f:80:5c:aa:
         c8:1c:bc:fa:93:75:17:e0:14:b4:63:cd:eb:f8:aa:65:a3:c2:
         45:fe:3d:79:c9:cc:ab:3a:40:d5:87:32:39:2f:06:28:8b:18:
         aa:bd:cf:a2:55:4c:6a:e6:80:08:71:04:90:ec:f8:7a:0e:59:
         42:17:3a:22:e9:47:5d:9d:87:66:9f:91:de:ec:59:72:ad:e5:
         3a:7f:a3:3f:47:5f:34:7a:2a:d9:75:ea:59:f7:df:47:8c:53:
         b1:49:d0:c1:74:4b:48:59:7e:cf:ff:0a:00:f5:4b:4b:ac:79:
         0c:27:a6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----