Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638353a623030623a3a2f34382d3438203d3e203630373433.roa
File:                     326131333a646638353a623030623a3a2f34382d3438203d3e203630373433.roa (raw, json)
Hash identifier:          S+f0anl+MKHT8/ztD85dSqkU1wi6JZbtFmALA8dWPpo=
Subject key identifier:   F1:0D:19:CE:49:86:0F:D9:53:FF:17:E8:36:05:41:AD:76:D0:FA:76
Certificate issuer:       /CN=74b90a27d86f6a1914c261c21469df853e32beb5
Certificate serial:       2AE65AB7DF9F4C5A1B20671EB14D7CC2CC2EE974
Authority key identifier: 74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638353a623030623a3a2f34382d3438203d3e203630373433.roa
Signing time:             Mon 03 Apr 2023 14:51:01 +0000
ROA not before:           Mon 03 Apr 2023 14:46:01 +0000
ROA not after:            Mon 01 Apr 2024 14:51:01 +0000
asID:                     60743
IP address blocks:        2a13:df85:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:e6:5a:b7:df:9f:4c:5a:1b:20:67:1e:b1:4d:7c:c2:cc:2e:e9:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b90a27d86f6a1914c261c21469df853e32beb5
        Validity
            Not Before: Apr  3 14:46:01 2023 GMT
            Not After : Apr  1 14:51:01 2024 GMT
        Subject: CN=F10D19CE49860FD953FF17E8360541AD76D0FA76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:33:64:a9:ae:03:18:a3:d1:51:1a:d7:73:4d:
                    0f:67:c8:2c:ad:c6:5c:6b:f4:ea:76:57:11:00:8c:
                    a2:fe:7d:0c:30:11:87:7f:cf:c1:9f:87:a5:c7:1d:
                    5a:ec:d4:7b:1e:80:37:6b:a6:3d:19:ab:cf:21:de:
                    e3:91:90:c7:af:a3:aa:bc:dd:36:81:16:4f:d6:8c:
                    5b:da:cc:51:57:5f:73:06:be:7b:93:05:e9:05:6c:
                    e2:da:ee:e8:d3:6c:7d:02:fb:ae:31:0a:c3:41:2d:
                    f4:ac:6c:2b:5d:ad:b2:bc:90:5c:1f:a9:d2:0e:d4:
                    06:88:18:c1:34:09:bf:9f:2e:91:9c:11:06:93:f1:
                    88:d8:34:a4:d8:fc:96:86:7b:fb:5f:56:39:9f:36:
                    16:93:71:24:cb:18:23:05:c1:72:a9:93:80:d1:d3:
                    51:71:2b:6b:b8:70:2e:94:66:d8:c3:3e:2c:6c:a3:
                    6b:60:74:8b:01:88:a3:6b:1e:dd:9d:8a:68:a1:f7:
                    a3:b9:90:1f:96:2a:d9:2c:65:9c:27:ac:8b:f8:2e:
                    cf:e8:d4:ef:73:a2:fd:9a:c0:56:5e:92:82:01:2c:
                    c1:6b:33:59:99:d4:d7:de:3f:75:fd:65:82:b0:37:
                    6c:98:6a:64:34:cb:de:9c:d4:92:ef:69:9a:4a:15:
                    14:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0D:19:CE:49:86:0F:D9:53:FF:17:E8:36:05:41:AD:76:D0:FA:76
            X509v3 Authority Key Identifier:
                keyid:74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/74B90A27D86F6A1914C261C21469DF853E32BEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638353a623030623a3a2f34382d3438203d3e203630373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df85:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:06:d0:b2:ab:f2:ef:7e:e8:34:0a:8c:b8:50:57:a7:69:36:
         da:dd:8d:b9:37:90:c0:02:75:6b:54:9b:fa:d3:8e:34:8f:01:
         90:a5:fd:ab:b0:be:cd:c3:98:d0:c8:8d:69:5d:1a:e2:8c:cc:
         f5:c3:43:09:0e:24:0e:29:3c:4d:27:0a:9e:17:09:4b:24:35:
         c7:a8:0e:8f:2e:74:90:7a:55:d6:fd:58:15:b5:97:6d:fb:55:
         13:4e:aa:02:c9:33:e2:8c:c3:a3:d6:b3:d7:11:69:27:65:78:
         61:a1:65:df:50:d4:6b:0d:22:e6:ed:03:55:05:41:06:73:81:
         84:2d:ec:e0:2d:ba:e7:45:16:92:94:4c:e8:61:9f:a5:2b:66:
         be:0b:6e:dd:da:49:19:35:42:df:e5:18:d2:c1:4c:7b:eb:0b:
         3f:59:d9:ce:f3:21:89:90:dd:22:64:f0:70:88:2d:07:10:0e:
         53:83:71:e9:e4:7d:12:09:d1:8b:6f:de:d5:e0:ae:e4:2d:69:
         fe:83:7c:44:8e:36:77:36:9d:0f:aa:d8:40:4c:2c:1e:e7:5e:
         48:6b:57:bf:16:ac:0c:5b:42:25:4c:b7:d5:68:c7:22:44:06:
         8d:91:73:f5:8a:d9:f0:ef:7b:b6:a3:20:b7:cc:30:91:82:d3:
         d4:10:e3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----