Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638363a623030623a3a2f34382d3438203d3e203537383730.roa
File:                     326131333a646638363a623030623a3a2f34382d3438203d3e203537383730.roa (raw, json)
Hash identifier:          fT6ifYCsQAiCSroY6IwOquI/nht+Mn5nbIZ8Rv4FTT8=
Subject key identifier:   B7:CA:39:EC:37:A0:70:C3:A5:00:F4:6D:4C:6D:86:A0:5C:AC:EA:AA
Certificate issuer:       /CN=74b90a27d86f6a1914c261c21469df853e32beb5
Certificate serial:       477F160522F6913098BC4BCBF82681A7F80294EC
Authority key identifier: 74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638363a623030623a3a2f34382d3438203d3e203537383730.roa
Signing time:             Sun 23 Apr 2023 13:04:47 +0000
ROA not before:           Sun 23 Apr 2023 12:59:47 +0000
ROA not after:            Sun 21 Apr 2024 13:04:47 +0000
asID:                     57870
IP address blocks:        2a13:df86:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:7f:16:05:22:f6:91:30:98:bc:4b:cb:f8:26:81:a7:f8:02:94:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b90a27d86f6a1914c261c21469df853e32beb5
        Validity
            Not Before: Apr 23 12:59:47 2023 GMT
            Not After : Apr 21 13:04:47 2024 GMT
        Subject: CN=B7CA39EC37A070C3A500F46D4C6D86A05CACEAAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9e:76:57:2e:c2:1e:2d:ff:92:3c:55:96:c6:
                    3a:63:95:02:ef:39:ee:4f:48:60:e4:76:2e:8f:7c:
                    14:45:f9:19:be:bc:3b:ae:74:0a:8a:17:a5:bd:2d:
                    00:ed:23:ed:c3:6d:4c:05:e0:2e:76:81:cd:d9:3c:
                    29:34:f5:98:a7:2c:68:fc:1a:2f:36:2f:25:8f:83:
                    17:73:b0:10:93:33:7b:1e:3f:54:8b:c1:aa:73:93:
                    f4:e0:1a:07:84:67:17:5a:0a:d1:d3:a2:6e:52:0d:
                    f9:20:8b:18:41:d1:fd:f5:30:1d:35:73:f8:88:1f:
                    64:32:83:64:25:52:da:5e:c9:96:5d:6e:85:cc:7e:
                    03:a5:1a:fa:c7:f9:7a:6b:86:c2:0d:85:fa:0f:d1:
                    bd:de:c1:66:5d:b9:29:f0:96:88:58:42:05:20:5d:
                    9e:a1:4f:17:f9:50:41:f4:12:0a:a4:2d:ff:96:64:
                    fd:93:b9:d5:f5:bf:c4:b1:9d:ce:3e:85:07:a0:97:
                    77:6c:ce:00:94:d6:e5:ba:71:b4:88:82:5e:64:8c:
                    5e:48:4b:59:5e:05:92:7a:9e:bc:ca:50:32:7c:69:
                    66:5e:ee:03:a3:6e:21:9e:bb:e0:70:de:95:da:24:
                    6b:87:03:8b:d6:c0:97:c0:cb:e5:8d:ba:27:8d:05:
                    0e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:CA:39:EC:37:A0:70:C3:A5:00:F4:6D:4C:6D:86:A0:5C:AC:EA:AA
            X509v3 Authority Key Identifier:
                keyid:74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/74B90A27D86F6A1914C261C21469DF853E32BEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638363a623030623a3a2f34382d3438203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df86:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:66:f9:b6:ac:f3:09:26:7e:f6:96:92:13:4f:10:16:e0:4d:
         1f:44:a4:ec:a5:e3:83:6c:4a:d6:87:6b:1f:0b:e2:29:b6:c9:
         0a:fc:a9:0e:06:be:0c:8f:be:47:0c:6a:37:b3:7b:33:f6:eb:
         e4:24:61:87:69:f6:fd:6a:a5:9a:b0:a0:7e:33:5c:7e:4f:2e:
         6b:a7:5b:fd:91:68:23:4c:1a:4e:be:f8:c7:dd:a6:36:6c:00:
         28:b8:44:37:7d:5b:71:d4:15:a8:e8:61:35:90:71:33:6f:e0:
         a3:b8:f1:e1:50:84:c3:0d:fb:9c:af:94:2d:3c:cb:e6:dd:ef:
         64:19:de:d4:99:5c:a6:2f:96:c8:e0:87:05:f5:4b:a5:0a:14:
         34:7c:28:3b:af:21:93:1c:3a:e9:af:44:83:fe:50:81:cf:45:
         42:60:a0:bc:77:d0:63:f0:f9:74:9f:73:cd:8a:ab:23:de:36:
         97:28:c8:b7:04:97:86:a7:7b:cf:69:85:40:6b:00:c2:ce:d0:
         7d:20:a5:e3:35:1d:b8:fd:01:c3:c6:53:3f:e2:00:be:86:46:
         2f:a0:9d:58:07:08:a8:4d:c5:9e:e2:47:28:93:4e:9c:45:9c:
         c7:d3:5e:85:dd:f3:c1:0c:13:06:50:fa:5a:98:56:8b:f5:dd:
         7d:2e:89:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----