Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638373a3a2f33322d3332203d3e203537383730.roa
File:                     326131333a646638373a3a2f33322d3332203d3e203537383730.roa (raw, json)
Hash identifier:          TKr7jAkmloEvqOtyEg0VErFhT/QQ+UwwLSQJ97CSUpA=
Subject key identifier:   22:55:CE:8B:F6:EC:3B:1D:CC:5A:58:B0:70:30:CB:C8:8E:23:D5:64
Certificate issuer:       /CN=74b90a27d86f6a1914c261c21469df853e32beb5
Certificate serial:       310DAF435118DDC77B238E76FE0C98BE4CF83396
Authority key identifier: 74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638373a3a2f33322d3332203d3e203537383730.roa
Signing time:             Mon 24 Apr 2023 00:44:09 +0000
ROA not before:           Mon 24 Apr 2023 00:39:09 +0000
ROA not after:            Mon 22 Apr 2024 00:44:09 +0000
asID:                     57870
IP address blocks:        2a13:df87::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:0d:af:43:51:18:dd:c7:7b:23:8e:76:fe:0c:98:be:4c:f8:33:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b90a27d86f6a1914c261c21469df853e32beb5
        Validity
            Not Before: Apr 24 00:39:09 2023 GMT
            Not After : Apr 22 00:44:09 2024 GMT
        Subject: CN=2255CE8BF6EC3B1DCC5A58B07030CBC88E23D564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a5:37:42:6b:28:0f:ae:0d:51:9e:26:d8:13:
                    d8:ba:14:4f:9b:7d:ed:b5:a7:0a:79:f4:cf:1f:24:
                    5f:4b:03:fc:78:b2:d0:18:65:8b:8d:23:48:51:04:
                    6a:9f:03:56:29:99:2d:a1:98:98:2c:dd:77:8c:58:
                    43:28:79:9d:28:10:7c:4f:21:8e:0c:e4:4b:1a:6d:
                    a6:9f:e9:f4:74:20:cb:85:f7:1c:54:fb:c3:e9:ee:
                    a0:7c:1c:be:ba:6b:89:e8:29:39:1d:66:4f:24:1d:
                    8e:c9:f3:8d:15:92:f4:af:e2:0c:2a:03:14:49:de:
                    1f:54:92:49:b4:47:06:99:a6:a8:05:7c:02:d7:03:
                    0b:a8:45:54:ad:54:5c:75:0c:88:7a:e7:dc:70:a0:
                    3e:01:26:ca:57:0e:40:bf:5f:1b:5d:96:8e:c5:aa:
                    1a:fe:48:6c:7b:3e:1d:c9:36:5d:67:7d:bf:a8:59:
                    23:44:7d:0a:7c:16:7c:db:e7:e8:24:2e:5c:f1:13:
                    b4:cb:1f:cf:95:b9:8d:ff:d2:34:d4:81:05:bf:e9:
                    7e:1d:79:6b:e8:10:47:98:9c:63:33:31:8e:2a:f2:
                    cc:65:5c:1e:da:92:f3:fd:73:2e:4b:7f:d2:6e:ce:
                    62:46:5e:7b:9c:bb:6d:88:80:58:2c:33:f5:d1:97:
                    e0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:55:CE:8B:F6:EC:3B:1D:CC:5A:58:B0:70:30:CB:C8:8E:23:D5:64
            X509v3 Authority Key Identifier:
                keyid:74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/74B90A27D86F6A1914C261C21469DF853E32BEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638373a3a2f33322d3332203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df87::/32

    Signature Algorithm: sha256WithRSAEncryption
         d9:c8:04:97:89:1a:cc:a8:46:71:2a:57:e2:c6:9d:1c:8b:2c:
         2c:2e:30:ae:5a:7b:bb:d6:56:e9:61:0c:64:02:23:df:78:bf:
         78:f9:5a:a4:3c:df:79:24:4a:0d:9a:09:45:d6:d7:4b:21:78:
         59:f7:90:ec:d0:dd:93:92:07:49:96:b0:5b:08:5f:96:a7:da:
         c9:d5:1a:b6:e5:ec:1b:a2:ab:ae:6d:62:ae:de:ae:b5:6b:64:
         18:04:eb:7a:b0:92:61:04:bd:88:2d:c9:a1:8d:2f:a6:66:b9:
         c8:89:a3:59:94:9b:6a:2d:af:de:ac:29:aa:3d:bc:da:92:6c:
         9c:54:75:58:f0:85:37:d3:79:0e:4e:5a:e6:e7:db:ce:5d:e8:
         54:51:2b:d7:d5:e9:65:69:7e:8c:40:1c:71:7e:e0:a2:5f:0f:
         fe:fe:ad:a3:6a:bb:e2:2a:da:96:1b:c3:b5:2f:3c:45:fd:03:
         47:7b:dd:b4:be:6a:0e:3c:21:7f:f9:40:b3:48:34:83:1d:32:
         5c:ea:06:e5:20:0d:c2:23:8b:c0:b0:0a:62:cb:a7:b5:e7:3a:
         77:fc:55:e3:83:4d:ad:e9:f6:c5:76:d6:29:18:b5:93:84:7a:
         93:15:9f:38:ee:97:0d:bf:bc:d4:2d:7d:2c:6c:ed:98:70:4a:
         a7:17:24:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----