Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638313a623030623a3a2f34382d3438203d3e203537383730.roa
File:                     326131333a646638313a623030623a3a2f34382d3438203d3e203537383730.roa (raw, json)
Hash identifier:          vDOwJTBUEuv0lBTiGPobsjsUW1Es2FP4gHKb7JBfo1I=
Subject key identifier:   3D:16:F3:0C:3F:4C:E1:AC:8E:61:FC:3F:0C:3B:39:FA:0C:42:7F:25
Certificate issuer:       /CN=74b90a27d86f6a1914c261c21469df853e32beb5
Certificate serial:       2978437C5342EC8F49CA9D68D1304E3799FAD638
Authority key identifier: 74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638313a623030623a3a2f34382d3438203d3e203537383730.roa
Signing time:             Tue 02 May 2023 09:09:37 +0000
ROA not before:           Tue 02 May 2023 09:04:37 +0000
ROA not after:            Tue 30 Apr 2024 09:09:37 +0000
asID:                     57870
IP address blocks:        2a13:df81:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:78:43:7c:53:42:ec:8f:49:ca:9d:68:d1:30:4e:37:99:fa:d6:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b90a27d86f6a1914c261c21469df853e32beb5
        Validity
            Not Before: May  2 09:04:37 2023 GMT
            Not After : Apr 30 09:09:37 2024 GMT
        Subject: CN=3D16F30C3F4CE1AC8E61FC3F0C3B39FA0C427F25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2c:3f:d7:c1:32:56:03:9b:b5:7f:e4:03:d3:
                    c4:e9:2f:51:62:f9:b9:3f:0a:e6:bf:39:fb:4c:6e:
                    c8:a8:33:4f:b2:ee:74:5a:9c:a5:f0:ac:99:bb:1a:
                    cf:5a:92:f8:24:e0:3e:f0:47:6d:37:9d:36:3b:26:
                    b5:30:f0:12:23:10:78:95:1c:d9:86:7a:f9:4e:59:
                    f4:0b:aa:0d:c3:28:57:03:41:ef:99:a5:be:ff:71:
                    dd:4e:ed:9b:56:a8:db:a3:78:dc:69:1d:33:88:7c:
                    a8:92:bb:71:e8:ea:0c:72:d2:f5:dc:c1:1d:f5:11:
                    36:87:33:63:5b:c6:32:0f:71:ee:50:82:e1:f0:c4:
                    95:24:06:ab:76:f5:b0:2d:4b:ec:09:d1:2c:b5:c2:
                    43:b1:86:d5:a6:b6:91:4b:b7:12:e7:38:ad:56:74:
                    da:dd:14:05:70:6c:83:02:70:3b:9a:55:23:8e:27:
                    03:59:a9:3c:3a:c6:de:db:20:41:1b:25:b6:61:ff:
                    e7:4c:c0:d9:4b:be:eb:8c:af:67:86:c6:f6:a0:11:
                    3c:ee:1d:f8:d6:b1:85:67:ea:5e:b6:ab:aa:a9:7b:
                    0c:d3:32:38:bd:49:a8:f7:56:66:15:98:a1:a9:da:
                    76:be:97:f5:ee:0c:80:56:76:b3:2a:d1:f5:36:40:
                    9f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:16:F3:0C:3F:4C:E1:AC:8E:61:FC:3F:0C:3B:39:FA:0C:42:7F:25
            X509v3 Authority Key Identifier:
                keyid:74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/74B90A27D86F6A1914C261C21469DF853E32BEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638313a623030623a3a2f34382d3438203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df81:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:60:45:61:2f:71:24:d0:8f:f3:0e:62:4e:0e:5f:22:e9:8b:
         be:0e:5c:64:68:9a:f1:65:6c:a1:20:0b:3a:31:16:b3:69:4b:
         79:92:36:37:1e:8f:8c:ff:43:b8:30:fd:d9:1e:ad:69:10:75:
         c2:b0:6e:c8:0c:13:ce:b0:2e:70:92:88:79:71:d6:d5:17:1a:
         7e:0a:a8:50:b7:5a:ed:2f:15:a0:5f:c5:be:b6:54:e0:cf:ac:
         bf:dc:d2:d2:ce:5b:b2:6d:b2:38:5f:03:00:36:3c:1c:b9:d7:
         c5:0a:c6:04:5e:dd:d5:33:ff:39:d0:70:46:a6:4f:c4:b3:90:
         55:09:0f:d1:f1:0d:eb:87:aa:e3:f4:0f:3e:a2:b0:74:6b:21:
         c1:14:16:3e:01:24:e4:ab:9e:48:fd:e3:e7:11:87:9b:d9:1a:
         e7:92:4f:e1:f2:27:16:1c:f8:22:54:87:75:24:ae:f9:d6:e5:
         b3:95:81:03:df:86:8a:ca:9b:3f:5e:5b:55:70:63:c8:ed:09:
         e7:db:e0:ff:7b:5d:2c:a7:01:52:4e:1f:29:1a:5f:65:32:f1:
         df:ea:58:03:f1:c0:2c:e7:63:55:6b:2e:67:25:4c:4a:b1:56:
         9e:18:e5:c9:be:2a:54:75:07:31:61:4d:b3:dc:8c:75:91:d8:
         5c:9d:a3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----