Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638353a3a2f33322d3438203d3e203537383730.roa
File:                     326131333a646638353a3a2f33322d3438203d3e203537383730.roa (raw, json)
Hash identifier:          ogIku9YPgc9erObDBcQgXb4Zm8vHwOuXpomyFR0xVCw=
Subject key identifier:   DE:75:08:34:DC:9C:F6:C5:3A:69:62:1B:78:7D:C8:FF:1C:B6:AD:D3
Certificate issuer:       /CN=74b90a27d86f6a1914c261c21469df853e32beb5
Certificate serial:       11330E57E7817A5A1533909F6842AAB4E82A2A0C
Authority key identifier: 74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638353a3a2f33322d3438203d3e203537383730.roa
Signing time:             Fri 14 Apr 2023 15:24:45 +0000
ROA not before:           Fri 14 Apr 2023 15:19:45 +0000
ROA not after:            Fri 12 Apr 2024 15:24:45 +0000
asID:                     57870
IP address blocks:        2a13:df85::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:33:0e:57:e7:81:7a:5a:15:33:90:9f:68:42:aa:b4:e8:2a:2a:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b90a27d86f6a1914c261c21469df853e32beb5
        Validity
            Not Before: Apr 14 15:19:45 2023 GMT
            Not After : Apr 12 15:24:45 2024 GMT
        Subject: CN=DE750834DC9CF6C53A69621B787DC8FF1CB6ADD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a3:fb:26:4d:f4:61:29:35:ec:4d:81:2c:5e:
                    2f:6b:da:d7:5c:f4:d9:3c:01:06:02:2c:04:73:7d:
                    39:d7:12:85:c7:22:c9:0b:97:8f:c7:6e:a6:14:4a:
                    ac:93:6a:09:62:4d:31:1f:7f:43:57:11:e6:8a:10:
                    62:26:8f:4a:54:92:d5:be:b2:d8:61:8a:a7:1f:4b:
                    a2:18:f6:2e:da:b2:0b:ab:33:1e:ae:c0:50:7e:eb:
                    ae:c6:8d:11:8f:be:b0:e1:b4:9d:c2:db:c5:6b:49:
                    54:37:11:02:31:0e:ea:3b:84:65:5c:57:97:9d:88:
                    49:36:a9:6f:ca:19:95:79:8c:08:74:02:28:d4:f3:
                    ae:ff:39:f5:bc:7f:8f:1b:35:75:64:71:db:7b:62:
                    4d:1c:5d:e5:4a:7a:d4:5e:f8:8c:ee:de:2c:f0:3a:
                    5a:b6:51:c7:35:4e:0c:a8:1d:7f:46:1e:e8:4c:d0:
                    17:e4:8a:04:42:48:c1:0e:16:3d:b6:9d:4d:cf:ae:
                    06:18:f2:f0:15:96:96:65:ae:04:76:87:00:f3:d3:
                    ce:65:0d:4a:ad:37:54:65:62:87:3e:de:e0:69:e9:
                    58:4e:d3:e5:ef:20:49:85:3b:eb:76:ef:c2:d4:0e:
                    09:3f:04:8c:1a:12:28:9d:2d:2c:bd:6f:3b:23:17:
                    8c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:75:08:34:DC:9C:F6:C5:3A:69:62:1B:78:7D:C8:FF:1C:B6:AD:D3
            X509v3 Authority Key Identifier:
                keyid:74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/74B90A27D86F6A1914C261C21469DF853E32BEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638353a3a2f33322d3438203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df85::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:ae:68:fd:30:62:40:f7:5f:ca:ad:4d:76:dd:68:f3:c7:f2:
         2e:53:2e:05:49:8d:8a:36:f5:89:6a:b5:49:65:b8:cd:ea:78:
         89:a9:83:25:b3:c1:f2:56:4e:5e:16:1d:a5:10:4a:9a:86:09:
         21:e9:82:25:b8:75:df:34:71:4f:97:cb:9f:ea:22:30:b3:54:
         de:72:5d:02:53:92:17:16:61:65:1e:3c:d5:cf:02:6a:02:2a:
         6a:2d:6e:13:e3:7f:cc:30:31:f9:73:f9:bd:0e:df:a1:d7:76:
         7b:59:ea:96:1e:3a:cb:e4:a3:87:fa:fc:11:17:8a:d2:e6:9e:
         99:4e:bd:d8:eb:eb:c9:df:f1:90:ee:7f:4c:14:3b:4d:cd:ef:
         04:d2:91:34:ee:50:23:a5:09:aa:e5:e1:cc:84:45:cf:c1:3a:
         f1:ca:e8:78:20:31:a2:26:9a:09:f2:78:b6:db:47:d5:8c:4d:
         ce:50:26:43:d4:d1:7f:c3:44:77:68:f7:93:da:0c:38:e9:c5:
         ae:af:14:8e:1a:ff:fa:b7:0b:f5:22:90:27:2f:c3:23:93:85:
         d3:f9:9a:5d:dd:c2:30:91:34:34:b1:21:18:e0:7d:e4:a6:e9:
         f2:72:dd:1e:fb:95:63:18:cb:81:94:bb:28:d5:98:b2:a6:13:
         e5:14:95:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----