Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638323a623030623a3a2f34382d3438203d3e203537383730.roa
File:                     326131333a646638323a623030623a3a2f34382d3438203d3e203537383730.roa (raw, json)
Hash identifier:          riVPKNiY4swjnAnCvbEgZ7I5jiepWwIWjLURQnfAZd8=
Subject key identifier:   FA:36:F8:39:DC:74:70:26:7D:63:6C:94:7F:B9:3B:4B:06:58:DB:06
Certificate issuer:       /CN=74b90a27d86f6a1914c261c21469df853e32beb5
Certificate serial:       4916E1B56299C514D362065B62DAAF65CA73F4A7
Authority key identifier: 74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638323a623030623a3a2f34382d3438203d3e203537383730.roa
Signing time:             Tue 02 May 2023 09:09:28 +0000
ROA not before:           Tue 02 May 2023 09:04:28 +0000
ROA not after:            Tue 30 Apr 2024 09:09:28 +0000
asID:                     57870
IP address blocks:        2a13:df82:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:16:e1:b5:62:99:c5:14:d3:62:06:5b:62:da:af:65:ca:73:f4:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b90a27d86f6a1914c261c21469df853e32beb5
        Validity
            Not Before: May  2 09:04:28 2023 GMT
            Not After : Apr 30 09:09:28 2024 GMT
        Subject: CN=FA36F839DC7470267D636C947FB93B4B0658DB06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3a:44:2b:a0:93:02:b3:51:d4:c5:27:52:3f:
                    8a:e4:e3:e9:14:fd:c6:7c:a8:2e:aa:93:c6:d9:c1:
                    d8:69:6e:c2:e8:9b:ce:a8:2f:9e:0f:ed:7d:ab:fe:
                    c2:f1:b8:0b:92:ce:c2:37:e3:58:55:6c:37:e9:88:
                    f8:28:1d:8f:1c:96:a3:38:ea:9a:4e:96:62:78:06:
                    b7:9c:1d:eb:58:9f:7e:9d:04:79:9e:ba:44:f0:8a:
                    87:2d:b2:76:3b:96:0b:d5:88:7a:41:57:89:17:43:
                    17:0e:23:04:34:f8:1f:43:b3:df:88:7b:4c:c8:18:
                    08:90:14:21:90:aa:20:d2:8a:c5:33:9e:92:85:5b:
                    92:97:b7:69:f9:c0:87:d5:9d:fa:d9:0c:63:30:2c:
                    c3:d8:1f:81:98:4e:06:be:9a:97:f0:fa:39:a3:81:
                    5e:19:b4:7e:b0:92:44:9f:3f:e7:38:c8:75:ae:70:
                    96:87:78:50:1f:32:2e:b3:d2:0e:ce:ae:93:d9:71:
                    39:ea:2d:b6:ab:ec:3b:ae:26:98:4e:cd:7c:cf:e5:
                    f3:00:5d:04:aa:6b:8c:90:53:9d:dd:e4:9b:34:88:
                    cb:56:fa:41:9e:9e:e9:b1:64:1d:b9:af:7c:27:99:
                    f0:51:45:a2:2e:55:2b:a6:a0:1c:74:60:97:d7:98:
                    d3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:36:F8:39:DC:74:70:26:7D:63:6C:94:7F:B9:3B:4B:06:58:DB:06
            X509v3 Authority Key Identifier:
                keyid:74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/74B90A27D86F6A1914C261C21469DF853E32BEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638323a623030623a3a2f34382d3438203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df82:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:d5:9c:7f:47:5a:e7:e9:d7:6e:03:2e:00:9e:b9:c4:d2:9a:
         31:4c:78:6f:ba:57:11:ce:64:6c:d6:96:e7:22:1e:b8:1c:9b:
         f2:72:35:7e:2b:da:17:78:b0:32:bf:5a:4e:bd:52:e0:6b:11:
         15:de:cb:5c:ff:db:1e:a3:f2:f1:0f:f6:68:ff:c2:8a:e2:03:
         5c:3b:79:8f:05:83:57:99:68:8f:d8:92:57:6d:c5:ee:cf:5f:
         ac:0b:f4:0a:d8:46:c2:bd:13:d7:52:67:f9:43:d7:3e:62:44:
         dc:68:21:da:d3:97:c7:0b:47:6e:b5:a0:30:84:22:eb:4a:2d:
         6a:2b:d7:59:84:e6:92:c7:3a:f1:be:9d:f6:c1:64:1e:06:0b:
         b3:81:93:5e:49:68:8c:a6:78:dd:fb:a7:2b:de:3a:44:fe:77:
         80:5a:c3:de:05:b6:09:c5:98:b6:9a:f2:17:e1:0a:3b:2f:6f:
         50:07:a5:26:b6:9b:dd:c7:1c:bf:23:e1:73:19:9d:40:a2:60:
         93:56:d1:19:85:84:a3:df:a3:36:0e:20:ce:92:fa:d2:1e:d3:
         a4:ed:8a:ab:93:8d:20:cb:aa:a1:ab:2b:ac:40:1e:bd:79:57:
         77:b1:95:f3:5c:97:b0:67:ea:11:02:de:46:2c:b3:c6:74:4d:
         ea:76:ad:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----