Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638343a623030623a3a2f34382d3438203d3e203537383730.roa
File:                     326131333a646638343a623030623a3a2f34382d3438203d3e203537383730.roa (raw, json)
Hash identifier:          TRROeU0E/pBGjL9LPZjp0Dd58LMlkiIYm5fKXUpLsP8=
Subject key identifier:   5E:F3:BE:A3:28:2B:5B:DE:17:38:6A:9D:EC:A7:4D:F1:43:1A:F9:C6
Certificate issuer:       /CN=74b90a27d86f6a1914c261c21469df853e32beb5
Certificate serial:       4486F8F07B0EA3EACA71DC31C6C0FBBE0460D62F
Authority key identifier: 74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638343a623030623a3a2f34382d3438203d3e203537383730.roa
Signing time:             Tue 02 May 2023 09:09:00 +0000
ROA not before:           Tue 02 May 2023 09:04:00 +0000
ROA not after:            Tue 30 Apr 2024 09:09:00 +0000
asID:                     57870
IP address blocks:        2a13:df84:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:86:f8:f0:7b:0e:a3:ea:ca:71:dc:31:c6:c0:fb:be:04:60:d6:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b90a27d86f6a1914c261c21469df853e32beb5
        Validity
            Not Before: May  2 09:04:00 2023 GMT
            Not After : Apr 30 09:09:00 2024 GMT
        Subject: CN=5EF3BEA3282B5BDE17386A9DECA74DF1431AF9C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:22:d2:17:d1:dd:6a:38:21:a4:da:c6:67:96:
                    53:51:c3:b9:77:c1:b8:f5:b4:68:24:38:40:87:15:
                    11:35:3f:f0:d7:5a:78:7a:ee:4f:2a:cc:62:96:6d:
                    bb:24:c0:14:9e:5a:f3:47:43:fb:ff:3f:b9:cd:f9:
                    0e:8b:1f:6f:8c:91:ec:84:2d:42:28:4c:8b:69:55:
                    40:ef:d4:95:94:c8:f8:3e:7d:00:fa:60:d7:25:6e:
                    b5:e4:4f:70:f1:aa:c1:f0:1c:c1:84:db:ec:80:6b:
                    cf:7e:17:d3:aa:4d:d8:52:b4:a6:ea:93:b2:a0:09:
                    8a:ff:78:c1:19:42:94:84:a3:cb:d0:01:af:f7:8b:
                    4c:fc:fe:1e:a8:44:cc:5f:86:46:70:d8:ca:bf:f5:
                    c6:56:9d:80:a4:32:58:33:39:0d:d0:55:e6:e3:b3:
                    c0:da:55:0a:bb:97:81:1a:45:df:ca:4d:e9:77:2d:
                    05:f0:f8:65:38:ca:70:f4:df:c3:81:e8:d4:8c:a7:
                    3a:05:0b:d6:95:f7:16:26:4e:7e:6f:d8:47:4c:a7:
                    2e:0c:2d:85:19:2c:e6:18:97:d5:d4:ac:ac:60:09:
                    ca:cf:db:ad:c7:9d:65:74:31:15:0e:d6:17:da:d7:
                    16:9c:80:b5:00:68:7b:8a:14:9c:38:2b:84:09:e9:
                    da:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F3:BE:A3:28:2B:5B:DE:17:38:6A:9D:EC:A7:4D:F1:43:1A:F9:C6
            X509v3 Authority Key Identifier:
                keyid:74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/74B90A27D86F6A1914C261C21469DF853E32BEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638343a623030623a3a2f34382d3438203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df84:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:89:80:f6:da:38:36:f0:b5:46:54:85:ea:36:cf:01:cd:e1:
         00:27:7a:37:ca:54:b5:70:12:e6:81:7c:d3:45:31:6c:8e:eb:
         0f:8e:fc:55:21:60:0d:6b:6e:a4:f0:08:11:38:f1:5b:37:9b:
         c5:25:34:46:ab:d5:4d:e4:b8:bf:36:40:a6:15:67:90:ed:93:
         c2:02:b6:66:91:b8:99:76:0b:2a:c9:02:fc:c8:66:e9:ef:0b:
         c7:0d:04:5e:f0:cd:32:97:64:cb:a5:9a:f5:75:af:5f:76:1a:
         d8:68:20:a7:36:71:7f:22:6e:11:c3:4b:da:44:05:5f:bf:9a:
         44:7f:4e:01:69:fd:ce:2c:e3:e4:02:e9:8d:9b:76:54:ba:b7:
         0b:e6:bc:95:ab:35:d2:0a:5d:81:57:e1:bb:0e:0a:43:44:0c:
         c4:45:53:bf:5b:89:f7:50:f0:ca:8d:88:f0:a4:04:ac:80:24:
         d3:ba:df:86:e4:0b:9b:b2:27:f7:70:d9:a0:74:e9:e7:46:e2:
         31:a3:2d:ad:05:54:dd:6f:5b:e5:27:d0:1a:44:78:b8:65:9c:
         7b:82:db:50:40:24:7c:69:2d:d8:d8:e1:24:fc:7f:38:6b:7f:
         0f:81:76:2f:ca:87:02:bb:a3:9b:5e:41:60:12:d1:04:65:10:
         7d:bd:5c:f5
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIURIb48HsOo+rKcdwxxsD7vgRg1i8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzRiOTBhMjdkODZmNmExOTE0YzI2MWMyMTQ2OWRmODUz
ZTMyYmViNTAeFw0yMzA1MDIwOTA0MDBaFw0yNDA0MzAwOTA5MDBaMDMxMTAvBgNV
BAMTKDVFRjNCRUEzMjgyQjVCREUxNzM4NkE5REVDQTc0REYxNDMxQUY5QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpItIX0d1qOCGk2sZnllNRw7l3
wbj1tGgkOECHFRE1P/DXWnh67k8qzGKWbbskwBSeWvNHQ/v/P7nN+Q6LH2+MkeyE
LUIoTItpVUDv1JWUyPg+fQD6YNclbrXkT3DxqsHwHMGE2+yAa89+F9OqTdhStKbq
k7KgCYr/eMEZQpSEo8vQAa/3i0z8/h6oRMxfhkZw2Mq/9cZWnYCkMlgzOQ3QVebj
s8DaVQq7l4EaRd/KTel3LQXw+GU4ynD038OB6NSMpzoFC9aV9xYmTn5v2EdMpy4M
LYUZLOYYl9XUrKxgCcrP263HnWV0MRUO1hfa1xacgLUAaHuKFJw4K4QJ6dr5AgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUXvO+oygrW94XOGqd7KdN8UMa+cYwHwYDVR0j
BBgwFoAUdLkKJ9hvahkUwmHCFGnfhT4yvrUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTRmYzQ3NTItZjgxYS00N2I2LThmMGQtZmY3NGM4YjBi
MGE0LzAvNzRCOTBBMjdEODZGNkExOTE0QzI2MUMyMTQ2OURGODUzRTMyQkVCNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RMa0tKOWh2YWhrVXdtSENGR25maFQ0
eXZyVS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTRmYzQ3NTIt
ZjgxYS00N2I2LThmMGQtZmY3NGM4YjBiMGE0LzAvMzI2MTMxMzMzYTY0NjYzODM0
M2E2MjMwMzA2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzczODM3MzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqE9+EsAswDQYJKoZIhvcNAQELBQADggEBAFiJgPbaODbwtUZUheo2
zwHN4QAnejfKVLVwEuaBfNNFMWyO6w+O/FUhYA1rbqTwCBE48Vs3m8UlNEar1U3k
uL82QKYVZ5Dtk8ICtmaRuJl2CyrJAvzIZunvC8cNBF7wzTKXZMulmvV1r192Gtho
IKc2cX8ibhHDS9pEBV+/mkR/TgFp/c4s4+QC6Y2bdlS6twvmvJWrNdIKXYFX4bsO
CkNEDMRFU79bifdQ8MqNiPCkBKyAJNO634bkC5uyJ/dw2aB06edG4jGjLa0FVN1v
W+Un0BpEeLhlnHuC21BAJHxpLdjY4ST8fzhrfw+Bdi/KhwK7o5teQWAS0QRlEH29
XPU=
-----END CERTIFICATE-----