Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a63303a3a2f34342d3438203d3e20313938353835.roa
File:                     326131333a646638303a63303a3a2f34342d3438203d3e20313938353835.roa (raw, json)
Hash identifier:          elT5f8bs8RY6r8m7R7ysYNtrNP49SqQ7u5waC/x+hr8=
Subject key identifier:   57:1B:A5:D4:15:74:73:BF:C2:66:09:CD:3E:2D:92:51:6A:35:86:37
Certificate issuer:       /CN=74b90a27d86f6a1914c261c21469df853e32beb5
Certificate serial:       49C480B881B79B5A489EA0F5F3C70A52820AED0C
Authority key identifier: 74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a63303a3a2f34342d3438203d3e20313938353835.roa
Signing time:             Sat 13 May 2023 22:02:28 +0000
ROA not before:           Sat 13 May 2023 21:57:28 +0000
ROA not after:            Sat 11 May 2024 22:02:28 +0000
asID:                     198585
IP address blocks:        2a13:df80:c0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c4:80:b8:81:b7:9b:5a:48:9e:a0:f5:f3:c7:0a:52:82:0a:ed:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b90a27d86f6a1914c261c21469df853e32beb5
        Validity
            Not Before: May 13 21:57:28 2023 GMT
            Not After : May 11 22:02:28 2024 GMT
        Subject: CN=571BA5D4157473BFC26609CD3E2D92516A358637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8b:75:75:c3:13:f2:fe:76:7b:74:07:8c:12:
                    2a:40:ad:94:97:51:eb:b9:5f:ce:16:71:09:e7:cc:
                    fd:c8:63:85:b1:d4:62:f0:60:9c:b1:fa:b9:8e:d0:
                    b2:71:bf:35:21:54:6f:88:c4:41:f4:28:ba:06:93:
                    b4:81:d1:ef:7f:4e:94:0d:64:fc:ca:e9:17:4d:64:
                    aa:17:21:c3:03:4d:7f:e5:2c:16:f2:6e:bb:ee:b2:
                    75:53:fe:15:a0:94:df:12:0c:63:fb:e5:21:91:23:
                    6d:81:0c:56:42:f4:e8:49:42:0d:a9:54:72:50:60:
                    14:1d:a0:11:cf:68:21:31:90:83:5b:29:b8:93:56:
                    bd:a9:ef:f6:0b:32:67:28:55:bc:d9:56:50:7a:93:
                    a9:af:6f:db:97:c0:9c:50:60:d3:b6:33:b1:4e:0a:
                    69:8a:e1:0f:11:68:82:ab:be:f3:b6:12:19:16:50:
                    08:de:60:ef:89:4c:32:ec:ba:9e:32:21:ab:51:51:
                    b1:99:e1:77:78:e4:7c:08:2a:b8:91:88:22:bf:41:
                    10:22:f1:27:22:73:ce:87:77:e4:fe:c2:3d:e4:45:
                    8d:e0:41:d4:84:07:ca:c2:1a:be:ff:69:fc:f7:d6:
                    e9:b7:bb:a0:dd:fb:fe:4b:3f:ee:bd:59:f0:55:2c:
                    6c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1B:A5:D4:15:74:73:BF:C2:66:09:CD:3E:2D:92:51:6A:35:86:37
            X509v3 Authority Key Identifier:
                keyid:74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/74B90A27D86F6A1914C261C21469DF853E32BEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a63303a3a2f34342d3438203d3e20313938353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         d9:fb:a8:8e:51:34:8f:c6:d6:56:18:c8:c9:4a:e9:c3:39:e6:
         b6:3c:41:ec:cf:cb:f0:b3:e8:39:0d:d4:5d:82:8c:ee:22:d4:
         b9:91:7c:a7:d5:c1:0a:b4:d6:43:c6:a6:43:60:ac:87:f0:b9:
         9f:e5:1e:ef:e1:1b:af:52:4c:38:44:76:af:31:af:e1:5e:03:
         6d:7c:ac:c2:01:23:d7:f2:43:93:3c:58:a0:75:6a:68:84:e6:
         15:71:c6:65:64:c0:b1:9f:96:41:3d:e3:2d:8d:60:1e:f2:f2:
         05:3a:0c:1c:87:69:6b:a5:75:12:a2:0c:30:d8:96:15:47:bc:
         01:c3:dc:f9:e9:7e:0d:5c:78:e9:8f:ce:8f:9d:58:bd:e8:1c:
         39:26:79:af:48:e4:72:49:81:fd:e2:99:da:ab:81:63:d1:c1:
         e7:48:c1:f9:7c:54:21:29:6d:a3:66:56:99:5c:9e:fa:99:f3:
         09:d3:95:31:da:ac:a6:a6:25:5d:52:34:00:fe:55:ed:e5:e7:
         29:2d:0c:ba:15:c0:91:9b:85:71:87:2f:4c:99:9c:db:75:b1:
         c9:40:18:f1:cf:9f:42:30:84:c8:88:8e:4e:3d:ab:eb:f1:83:
         7b:9f:e5:f2:94:6c:ed:c9:0d:9c:23:05:b4:e1:a1:ad:7e:13:
         c9:b2:37:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----