Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638353a623030623a3a2f34382d3438203d3e203537383730.roa
File:                     326131333a646638353a623030623a3a2f34382d3438203d3e203537383730.roa (raw, json)
Hash identifier:          tzAXxAID0yY5Y2L91U4IX1CThw7wosJXpjn4skfREY8=
Subject key identifier:   A0:83:23:52:14:CB:E7:62:86:1B:CB:DA:7C:0E:66:98:9C:46:06:A8
Certificate issuer:       /CN=74b90a27d86f6a1914c261c21469df853e32beb5
Certificate serial:       1552AE341C8E1E733BCFB9AC416C667B4ED657A7
Authority key identifier: 74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638353a623030623a3a2f34382d3438203d3e203537383730.roa
Signing time:             Tue 02 May 2023 09:08:45 +0000
ROA not before:           Tue 02 May 2023 09:03:45 +0000
ROA not after:            Tue 30 Apr 2024 09:08:45 +0000
asID:                     57870
IP address blocks:        2a13:df85:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:52:ae:34:1c:8e:1e:73:3b:cf:b9:ac:41:6c:66:7b:4e:d6:57:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b90a27d86f6a1914c261c21469df853e32beb5
        Validity
            Not Before: May  2 09:03:45 2023 GMT
            Not After : Apr 30 09:08:45 2024 GMT
        Subject: CN=A083235214CBE762861BCBDA7C0E66989C4606A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c7:b3:2c:ee:87:b2:81:4c:a3:8f:18:70:d1:
                    28:89:4e:a2:42:ec:66:5a:99:8c:8d:45:ef:a9:cc:
                    25:33:5d:98:27:31:ed:26:16:2b:3a:21:23:89:1b:
                    7c:7d:cb:36:17:ff:77:c7:40:b5:0d:3a:a5:dd:80:
                    9a:52:35:e7:25:f6:91:c3:80:c8:e6:e9:81:ce:d2:
                    39:9d:f2:eb:69:5d:cd:0c:7c:67:1d:a1:8f:c4:5d:
                    e0:b5:47:7e:94:39:c6:11:ec:9c:eb:fc:ec:58:17:
                    33:5b:3f:08:6f:36:a6:bb:31:8f:86:ed:22:9a:13:
                    70:f1:91:87:11:3a:d0:8f:ff:97:35:53:30:b9:ca:
                    21:5e:e5:ee:88:6a:c8:66:0f:63:3a:a5:89:77:71:
                    9f:62:cb:13:96:89:83:21:99:39:a0:f7:c6:41:95:
                    c5:47:ab:b6:28:fb:85:37:96:7d:da:10:ae:0b:c1:
                    b2:b1:17:37:b9:63:49:af:2a:a4:fe:66:1e:1f:61:
                    7c:62:6e:67:b7:d4:e5:97:97:82:f0:22:1e:74:db:
                    4e:79:18:93:f0:57:f8:fa:68:43:bd:7b:e3:5d:45:
                    96:6e:44:8d:9d:73:b5:84:3c:24:3a:21:a4:0d:97:
                    98:0a:29:7e:74:55:dd:3c:c0:d1:7a:04:31:01:a1:
                    95:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:83:23:52:14:CB:E7:62:86:1B:CB:DA:7C:0E:66:98:9C:46:06:A8
            X509v3 Authority Key Identifier:
                keyid:74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/74B90A27D86F6A1914C261C21469DF853E32BEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638353a623030623a3a2f34382d3438203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df85:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:13:23:6d:a9:db:13:0a:57:17:0c:be:8a:43:c0:0a:d8:e7:
         27:33:35:f6:6f:61:b8:75:65:58:84:64:dc:48:2d:90:95:88:
         5d:f3:ac:ef:c5:78:fb:e3:38:90:39:92:57:72:5c:9c:21:c3:
         0a:86:b1:f8:21:b4:ec:52:bb:b8:ad:2f:5a:7b:9f:b3:5a:46:
         bf:46:79:52:b5:f4:d3:63:eb:41:de:66:cd:b3:2e:e3:d5:04:
         3e:8e:4f:04:09:74:09:b5:99:f0:d7:85:fe:67:27:85:cb:d0:
         31:aa:cf:6a:ce:93:05:88:57:da:a4:4e:21:60:8a:60:04:86:
         8b:38:16:09:e6:5c:0c:c5:3f:7d:32:04:a9:ab:67:5c:e9:58:
         e8:c7:f1:c1:d1:62:ca:db:4c:80:26:d3:45:08:d9:75:88:c2:
         26:9b:5c:63:9a:36:b4:be:4d:f0:6f:e7:0a:73:d5:d7:bf:11:
         4a:7f:b9:1a:24:ab:0e:4a:dc:e3:dd:22:b1:a3:07:07:3b:5b:
         d5:56:01:15:6d:4b:12:e7:65:d1:5b:e5:a7:08:d8:0b:80:82:
         56:d4:43:95:76:76:5c:30:b1:bd:3d:ab:87:ec:c0:2e:1e:43:
         8d:96:f7:ef:bd:aa:6f:e1:ca:2e:cf:d8:ca:3b:5b:c3:c6:61:
         ed:97:86:c8
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUFVKuNByOHnM7z7msQWxme07WV6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzRiOTBhMjdkODZmNmExOTE0YzI2MWMyMTQ2OWRmODUz
ZTMyYmViNTAeFw0yMzA1MDIwOTAzNDVaFw0yNDA0MzAwOTA4NDVaMDMxMTAvBgNV
BAMTKEEwODMyMzUyMTRDQkU3NjI4NjFCQ0JEQTdDMEU2Njk4OUM0NjA2QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzx7Ms7oeygUyjjxhw0SiJTqJC
7GZamYyNRe+pzCUzXZgnMe0mFis6ISOJG3x9yzYX/3fHQLUNOqXdgJpSNecl9pHD
gMjm6YHO0jmd8utpXc0MfGcdoY/EXeC1R36UOcYR7Jzr/OxYFzNbPwhvNqa7MY+G
7SKaE3DxkYcROtCP/5c1UzC5yiFe5e6IashmD2M6pYl3cZ9iyxOWiYMhmTmg98ZB
lcVHq7Yo+4U3ln3aEK4LwbKxFze5Y0mvKqT+Zh4fYXxibme31OWXl4LwIh502055
GJPwV/j6aEO9e+NdRZZuRI2dc7WEPCQ6IaQNl5gKKX50Vd08wNF6BDEBoZVDAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUoIMjUhTL52KGG8vafA5mmJxGBqgwHwYDVR0j
BBgwFoAUdLkKJ9hvahkUwmHCFGnfhT4yvrUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTRmYzQ3NTItZjgxYS00N2I2LThmMGQtZmY3NGM4YjBi
MGE0LzAvNzRCOTBBMjdEODZGNkExOTE0QzI2MUMyMTQ2OURGODUzRTMyQkVCNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RMa0tKOWh2YWhrVXdtSENGR25maFQ0
eXZyVS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTRmYzQ3NTIt
ZjgxYS00N2I2LThmMGQtZmY3NGM4YjBiMGE0LzAvMzI2MTMxMzMzYTY0NjYzODM1
M2E2MjMwMzA2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzczODM3MzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqE9+FsAswDQYJKoZIhvcNAQELBQADggEBAGITI22p2xMKVxcMvopD
wArY5yczNfZvYbh1ZViEZNxILZCViF3zrO/FePvjOJA5kldyXJwhwwqGsfghtOxS
u7itL1p7n7NaRr9GeVK19NNj60HeZs2zLuPVBD6OTwQJdAm1mfDXhf5nJ4XL0DGq
z2rOkwWIV9qkTiFgimAEhos4FgnmXAzFP30yBKmrZ1zpWOjH8cHRYsrbTIAm00UI
2XWIwiabXGOaNrS+TfBv5wpz1de/EUp/uRokqw5K3OPdIrGjBwc7W9VWARVtSxLn
ZdFb5acI2AuAglbUQ5V2dlwwsb09q4fswC4eQ42W9++9qm/hyi7P2Mo7W8PGYe2X
hsg=
-----END CERTIFICATE-----