Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638333a623030623a3a2f34382d3438203d3e203537383730.roa
File:                     326131333a646638333a623030623a3a2f34382d3438203d3e203537383730.roa (raw, json)
Hash identifier:          DsCi3N4pE2DDU4Hz/unJZLSSDDkGk/habR3Q1h8s4gg=
Subject key identifier:   5F:DD:29:32:41:03:61:57:9F:1E:8D:03:4C:8B:FC:BA:19:C4:31:C4
Certificate issuer:       /CN=74b90a27d86f6a1914c261c21469df853e32beb5
Certificate serial:       10DD83094A37960609C12AB2609CE1370005C73C
Authority key identifier: 74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638333a623030623a3a2f34382d3438203d3e203537383730.roa
Signing time:             Tue 02 May 2023 09:09:14 +0000
ROA not before:           Tue 02 May 2023 09:04:14 +0000
ROA not after:            Tue 30 Apr 2024 09:09:14 +0000
asID:                     57870
IP address blocks:        2a13:df83:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:dd:83:09:4a:37:96:06:09:c1:2a:b2:60:9c:e1:37:00:05:c7:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b90a27d86f6a1914c261c21469df853e32beb5
        Validity
            Not Before: May  2 09:04:14 2023 GMT
            Not After : Apr 30 09:09:14 2024 GMT
        Subject: CN=5FDD2932410361579F1E8D034C8BFCBA19C431C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:aa:5f:9b:90:66:12:f6:e3:36:14:15:8d:d1:
                    7f:b6:89:52:2c:92:0d:98:96:67:13:60:6b:3f:1b:
                    e0:8d:65:35:de:a0:0f:88:2f:2a:c9:60:33:ea:82:
                    1b:5c:51:73:9e:d2:26:8f:3a:7e:94:e2:77:c5:76:
                    59:cc:1d:5c:cd:27:f4:ab:47:89:20:ec:2d:92:69:
                    5f:f2:a0:1a:11:71:b5:c4:78:52:40:33:01:48:b0:
                    f5:eb:34:87:7c:a7:3c:08:24:86:18:87:e4:05:70:
                    08:b9:00:04:b2:a3:b9:57:6c:22:51:49:5d:28:38:
                    49:a0:28:ae:8d:bc:b6:ee:8f:ae:3e:93:a0:e4:ad:
                    e0:b4:f4:ce:43:a0:af:a6:f4:e8:35:c1:c7:3b:f9:
                    80:dd:3d:6a:b8:4a:89:25:f4:8f:36:e2:72:6b:4e:
                    3c:94:4a:14:29:d1:01:10:d5:62:db:4f:94:3d:5b:
                    25:2e:17:e0:e3:df:5d:fc:92:ee:ea:3b:2f:9d:ff:
                    82:1f:b6:34:fc:ad:c2:67:b4:6a:d2:b8:3e:a7:5e:
                    3c:9f:29:11:9e:b6:a9:b3:85:05:3e:01:71:ff:bb:
                    96:83:90:88:76:b4:a9:0f:a4:48:64:13:be:7f:ba:
                    05:1c:84:e3:5c:02:99:a3:fb:6c:03:51:d2:f9:86:
                    fd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DD:29:32:41:03:61:57:9F:1E:8D:03:4C:8B:FC:BA:19:C4:31:C4
            X509v3 Authority Key Identifier:
                keyid:74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/74B90A27D86F6A1914C261C21469DF853E32BEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638333a623030623a3a2f34382d3438203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df83:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:5d:21:6b:32:22:7c:1f:c6:0e:f7:22:2e:82:ee:a5:38:9b:
         4f:16:9c:b1:71:26:65:8a:59:98:4f:2a:e9:17:97:37:86:3b:
         bb:d0:7b:1c:f3:a5:0b:dd:f7:64:17:08:e9:77:66:28:73:f6:
         0f:c6:59:de:76:e9:b6:27:c1:db:97:6c:3e:89:14:e2:e5:7a:
         b0:d5:f2:9c:b6:29:28:16:cd:94:79:a7:ba:40:74:04:a5:f4:
         1b:d2:fe:3b:a0:50:1b:5a:f9:46:26:6b:06:c3:d8:51:fc:48:
         df:09:f0:1a:2a:de:fd:76:96:67:85:9a:33:ef:b1:04:06:8d:
         cb:ac:bd:d2:81:b2:64:a1:d3:eb:26:16:cd:16:d5:58:13:9f:
         b7:cd:19:e4:d2:02:ec:90:6e:a6:22:16:db:92:64:91:9c:e5:
         96:d3:10:92:79:bd:2b:86:fc:3a:d1:48:06:a8:82:85:8b:d4:
         65:9e:75:e0:58:c7:db:db:52:0c:e0:3d:df:89:e8:05:10:af:
         3c:d1:9e:e1:e2:00:41:bd:1f:4a:79:fc:cc:f7:88:a5:c0:d7:
         4d:ee:9f:62:9d:09:1d:06:1a:46:e9:75:fb:22:43:a6:39:6b:
         38:bf:e6:19:4d:18:c0:9b:24:a1:a6:19:06:e9:57:56:41:da:
         fa:24:41:35
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUEN2DCUo3lgYJwSqyYJzhNwAFxzwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzRiOTBhMjdkODZmNmExOTE0YzI2MWMyMTQ2OWRmODUz
ZTMyYmViNTAeFw0yMzA1MDIwOTA0MTRaFw0yNDA0MzAwOTA5MTRaMDMxMTAvBgNV
BAMTKDVGREQyOTMyNDEwMzYxNTc5RjFFOEQwMzRDOEJGQ0JBMTlDNDMxQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ql+bkGYS9uM2FBWN0X+2iVIs
kg2YlmcTYGs/G+CNZTXeoA+ILyrJYDPqghtcUXOe0iaPOn6U4nfFdlnMHVzNJ/Sr
R4kg7C2SaV/yoBoRcbXEeFJAMwFIsPXrNId8pzwIJIYYh+QFcAi5AASyo7lXbCJR
SV0oOEmgKK6NvLbuj64+k6DkreC09M5DoK+m9Og1wcc7+YDdPWq4Sokl9I824nJr
TjyUShQp0QEQ1WLbT5Q9WyUuF+Dj3138ku7qOy+d/4IftjT8rcJntGrSuD6nXjyf
KRGetqmzhQU+AXH/u5aDkIh2tKkPpEhkE75/ugUchONcApmj+2wDUdL5hv15AgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUX90pMkEDYVefHo0DTIv8uhnEMcQwHwYDVR0j
BBgwFoAUdLkKJ9hvahkUwmHCFGnfhT4yvrUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTRmYzQ3NTItZjgxYS00N2I2LThmMGQtZmY3NGM4YjBi
MGE0LzAvNzRCOTBBMjdEODZGNkExOTE0QzI2MUMyMTQ2OURGODUzRTMyQkVCNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RMa0tKOWh2YWhrVXdtSENGR25maFQ0
eXZyVS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTRmYzQ3NTIt
ZjgxYS00N2I2LThmMGQtZmY3NGM4YjBiMGE0LzAvMzI2MTMxMzMzYTY0NjYzODMz
M2E2MjMwMzA2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzczODM3MzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqE9+DsAswDQYJKoZIhvcNAQELBQADggEBAJNdIWsyInwfxg73Ii6C
7qU4m08WnLFxJmWKWZhPKukXlzeGO7vQexzzpQvd92QXCOl3Zihz9g/GWd526bYn
wduXbD6JFOLlerDV8py2KSgWzZR5p7pAdASl9BvS/jugUBta+UYmawbD2FH8SN8J
8Boq3v12lmeFmjPvsQQGjcusvdKBsmSh0+smFs0W1VgTn7fNGeTSAuyQbqYiFtuS
ZJGc5ZbTEJJ5vSuG/DrRSAaogoWL1GWedeBYx9vbUgzgPd+J6AUQrzzRnuHiAEG9
H0p5/Mz3iKXA103un2KdCR0GGkbpdfsiQ6Y5azi/5hlNGMCbJKGmGQbpV1ZB2vok
QTU=
-----END CERTIFICATE-----