Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a623030623a3a2f34382d3438203d3e203537383730.roa
File:                     326131333a646638303a623030623a3a2f34382d3438203d3e203537383730.roa (raw, json)
Hash identifier:          D/7ij6puC3t/+s+iE4BFHbq8wpVy8mQMsyLen4NyjWw=
Subject key identifier:   B0:AF:FE:0F:3B:50:4F:05:A2:C5:9C:0D:6F:39:35:C2:7C:10:32:79
Certificate issuer:       /CN=74b90a27d86f6a1914c261c21469df853e32beb5
Certificate serial:       4A73E616B249411AA73E9CF54E1DD738978F313E
Authority key identifier: 74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a623030623a3a2f34382d3438203d3e203537383730.roa
Signing time:             Tue 02 May 2023 09:10:12 +0000
ROA not before:           Tue 02 May 2023 09:05:12 +0000
ROA not after:            Tue 30 Apr 2024 09:10:12 +0000
asID:                     57870
IP address blocks:        2a13:df80:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:73:e6:16:b2:49:41:1a:a7:3e:9c:f5:4e:1d:d7:38:97:8f:31:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b90a27d86f6a1914c261c21469df853e32beb5
        Validity
            Not Before: May  2 09:05:12 2023 GMT
            Not After : Apr 30 09:10:12 2024 GMT
        Subject: CN=B0AFFE0F3B504F05A2C59C0D6F3935C27C103279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:21:5e:7b:9a:c2:95:a5:fc:46:80:4b:3f:3b:
                    ca:eb:29:d0:22:1c:2a:d9:86:ad:bc:b2:31:f1:a4:
                    a0:08:88:06:5a:94:eb:b8:ee:4d:91:fe:72:fd:8e:
                    ec:18:42:3c:60:8f:07:cc:6b:8e:da:8b:54:2e:de:
                    bc:94:71:89:07:3a:55:59:1b:df:f7:58:fe:d6:c0:
                    74:61:32:05:a6:3f:c7:6b:b3:29:e9:7a:01:0d:64:
                    b1:58:ae:dc:e2:0e:66:c0:fc:1b:6e:0c:88:e3:1e:
                    80:77:04:33:62:f5:83:f4:79:df:56:71:cc:7b:0d:
                    06:1f:50:fa:17:8a:60:c0:bd:79:80:d1:b6:f3:e4:
                    f7:2f:07:8c:28:42:d2:cc:1d:f9:64:36:83:34:d7:
                    93:28:f1:dc:0c:a9:91:ee:24:9f:24:9a:04:50:e2:
                    c0:43:c0:5a:38:c2:e9:cf:09:ec:6e:15:6a:b0:77:
                    b5:a2:db:f4:de:e2:4e:fd:2d:5a:e9:9c:d8:01:05:
                    1f:c6:a2:bf:5f:7d:23:17:75:ab:20:fa:10:3d:6b:
                    f8:d8:a9:83:04:cf:cb:8e:6b:f6:20:75:a0:ec:8f:
                    18:62:4b:1a:f7:9e:97:98:4c:b7:1c:05:76:56:4d:
                    a8:99:de:0c:91:5b:6c:0a:0a:de:12:aa:dd:23:3a:
                    7d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AF:FE:0F:3B:50:4F:05:A2:C5:9C:0D:6F:39:35:C2:7C:10:32:79
            X509v3 Authority Key Identifier:
                keyid:74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/74B90A27D86F6A1914C261C21469DF853E32BEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a623030623a3a2f34382d3438203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:e9:90:88:72:57:98:c7:d1:3e:a1:19:88:a3:bd:22:1f:e7:
         49:25:af:a0:e0:00:68:7f:05:b5:dc:2c:b9:b4:d5:a3:b6:fb:
         11:70:bb:4e:4d:90:45:84:8a:22:c8:db:48:45:f2:2b:4e:70:
         34:79:ab:5e:9a:30:9d:c3:57:34:7c:51:41:db:e1:f8:5b:5f:
         95:65:dd:54:f5:77:ee:af:3b:cc:ab:f0:35:49:1d:df:4f:bc:
         8b:1d:7d:64:44:b4:8a:82:3f:8d:1c:8e:99:04:72:01:4d:f9:
         3a:92:7d:b3:09:34:f0:70:40:97:59:9e:c5:ed:94:6d:cc:77:
         2b:21:23:bb:f8:2c:b0:ae:03:91:d8:45:c9:61:87:b4:d9:8c:
         a1:09:02:9d:30:fe:76:40:ee:46:99:19:0f:ab:69:c0:24:32:
         e3:8f:be:e5:e1:0a:78:7e:02:36:4b:83:e1:45:45:e3:fa:35:
         e2:96:64:98:79:96:a9:56:ca:11:0d:42:59:37:dd:52:16:db:
         cd:07:e4:06:05:de:d7:f9:d1:58:92:e9:7f:09:ef:b0:9e:13:
         2d:4f:24:7c:aa:5d:0f:74:21:fa:5f:0c:de:28:7f:55:f7:5a:
         92:6d:16:42:e8:b2:62:e4:5a:de:ec:82:6d:dc:6f:4f:9a:40:
         6e:66:f5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----