Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638363a3a2f33322d3332203d3e203537383730.roa
File:                     326131333a646638363a3a2f33322d3332203d3e203537383730.roa (raw, json)
Hash identifier:          ra/mUiUVLx3rcP1tkkcoug5AfaMa9XIKAHXUZi+J/so=
Subject key identifier:   A2:43:39:C9:08:35:95:4A:91:27:3E:56:21:73:FD:D9:D9:92:0A:FB
Certificate issuer:       /CN=74b90a27d86f6a1914c261c21469df853e32beb5
Certificate serial:       4016BD76A1AAB7BEE600D31C7330185444C5DCEE
Authority key identifier: 74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638363a3a2f33322d3332203d3e203537383730.roa
Signing time:             Sun 23 Apr 2023 13:02:41 +0000
ROA not before:           Sun 23 Apr 2023 12:57:41 +0000
ROA not after:            Sun 21 Apr 2024 13:02:41 +0000
asID:                     57870
IP address blocks:        2a13:df86::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:16:bd:76:a1:aa:b7:be:e6:00:d3:1c:73:30:18:54:44:c5:dc:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b90a27d86f6a1914c261c21469df853e32beb5
        Validity
            Not Before: Apr 23 12:57:41 2023 GMT
            Not After : Apr 21 13:02:41 2024 GMT
        Subject: CN=A24339C90835954A91273E562173FDD9D9920AFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f9:f7:dd:60:56:d1:94:c6:40:84:ab:63:b6:
                    4e:a9:1f:3e:20:dd:63:2e:23:68:d9:91:ca:9c:51:
                    82:db:d3:ad:b8:5e:0f:5a:b8:1d:ad:eb:89:02:5d:
                    d0:3d:f1:69:3c:cb:2f:2c:a3:2e:52:08:29:f8:31:
                    95:52:e4:28:6c:68:c9:69:71:87:ea:96:62:6c:d7:
                    bf:02:00:0c:28:07:a2:59:e4:a7:59:6d:76:58:0b:
                    b5:65:77:f5:91:c1:d1:6b:72:2e:49:d6:5a:22:8c:
                    98:cf:d2:73:09:0b:bf:96:30:63:12:4b:c2:f9:3d:
                    65:a9:4e:54:32:96:3f:ec:e7:17:70:b7:46:fb:0c:
                    ae:12:6e:12:58:56:9a:eb:d9:46:56:f5:f7:5f:f3:
                    09:b3:46:62:02:ca:c3:f3:39:c6:65:b2:01:a4:fe:
                    69:95:13:4d:7b:95:1e:0d:20:94:34:f4:cd:4e:08:
                    b6:96:97:fe:f5:64:da:0f:56:29:a1:8e:ec:6a:56:
                    3c:ce:f9:5e:d4:9d:b2:26:9e:57:a5:07:58:cf:90:
                    0c:c5:40:44:64:04:36:cb:88:ed:75:a4:87:20:53:
                    d6:cb:14:b5:a7:e1:0a:16:2e:a3:1c:21:88:bb:53:
                    88:3f:40:88:c6:2a:22:c0:ca:ff:f8:d5:ad:5b:69:
                    86:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:43:39:C9:08:35:95:4A:91:27:3E:56:21:73:FD:D9:D9:92:0A:FB
            X509v3 Authority Key Identifier:
                keyid:74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/74B90A27D86F6A1914C261C21469DF853E32BEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638363a3a2f33322d3332203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df86::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:d5:06:7a:8b:d4:19:6b:fb:35:59:98:22:5d:04:f8:1e:ef:
         79:74:16:c0:8f:d1:80:5f:7b:71:21:e5:c8:0c:85:1d:c4:26:
         51:89:18:a0:b6:4a:8f:39:4b:64:f9:36:ab:47:00:9f:2c:f4:
         20:7e:d1:f5:c4:fc:19:06:32:2c:61:4c:e7:17:26:a3:48:88:
         82:dc:9f:5e:bf:d9:1c:ed:d6:85:dc:00:86:a8:e9:95:9e:b3:
         bc:d1:12:b2:71:11:7e:82:fc:04:c7:67:69:e9:94:85:44:25:
         e1:e1:63:3a:22:34:6a:01:c5:4c:8a:72:db:2a:7a:be:37:e6:
         68:59:ba:18:c7:ee:8d:c7:39:52:04:77:5d:00:97:f9:d5:3d:
         90:20:9b:12:b2:17:9b:c6:2b:91:af:05:89:f5:eb:58:61:82:
         1d:e9:42:d2:09:bf:c0:8e:43:d5:0d:a3:7a:fe:5d:57:a7:20:
         3e:93:17:84:c8:87:32:d0:d1:90:75:ac:0a:c9:bc:2f:e3:bd:
         0a:5d:ea:5b:94:b9:3b:7b:bf:88:7e:75:cf:83:a0:ce:f3:26:
         d5:16:c4:6f:8b:1d:f3:75:f6:79:a2:fe:e6:12:44:ff:20:13:
         f7:a6:a0:c3:36:9b:b1:d3:72:ee:70:71:1f:17:20:76:8e:81:
         e5:af:67:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----