Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638373a623030623a3a2f34382d3438203d3e203537383730.roa
File:                     326131333a646638373a623030623a3a2f34382d3438203d3e203537383730.roa (raw, json)
Hash identifier:          IbWDM1o8gKVbbWthBrB4ceP3DpzTmC+6PXOuWG5PPqs=
Subject key identifier:   CF:E5:91:BB:5D:71:10:C0:E1:38:17:65:B9:79:E2:81:29:1B:3A:C7
Certificate issuer:       /CN=74b90a27d86f6a1914c261c21469df853e32beb5
Certificate serial:       376907DEC025DEC038C4D1D9576C9D96BFA6C605
Authority key identifier: 74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638373a623030623a3a2f34382d3438203d3e203537383730.roa
Signing time:             Mon 24 Apr 2023 00:44:12 +0000
ROA not before:           Mon 24 Apr 2023 00:39:12 +0000
ROA not after:            Mon 22 Apr 2024 00:44:12 +0000
asID:                     57870
IP address blocks:        2a13:df87:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:69:07:de:c0:25:de:c0:38:c4:d1:d9:57:6c:9d:96:bf:a6:c6:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b90a27d86f6a1914c261c21469df853e32beb5
        Validity
            Not Before: Apr 24 00:39:12 2023 GMT
            Not After : Apr 22 00:44:12 2024 GMT
        Subject: CN=CFE591BB5D7110C0E1381765B979E281291B3AC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5d:5b:01:a4:9e:53:3e:72:82:6e:6d:c3:6d:
                    34:d5:3e:53:c8:d1:62:63:6c:2d:01:61:8f:4e:0d:
                    2d:85:e1:8f:72:0d:ee:81:03:de:b1:30:15:96:75:
                    98:8d:4d:76:0d:fd:47:7e:41:1c:ce:6e:4e:43:c1:
                    4a:f8:99:f2:09:2c:20:d4:af:83:f6:66:c1:47:b9:
                    17:57:0c:58:be:69:aa:03:6e:09:3d:82:5c:c9:44:
                    5b:8c:9e:5e:d9:c1:2f:6c:83:e8:08:99:f8:3a:89:
                    83:f2:d2:1d:45:da:d4:f5:b3:92:15:ff:17:78:10:
                    70:d1:4c:c2:ce:97:4c:52:3b:54:6d:54:ff:08:97:
                    9f:c4:d0:38:13:0e:81:3a:3d:41:87:3f:90:68:7f:
                    ac:2b:65:f5:0f:87:a6:d6:7f:41:8e:05:b2:49:ef:
                    64:d9:4a:d0:4d:2d:f3:93:50:58:13:08:ab:fb:3a:
                    ba:5e:4c:e1:b2:4b:e5:0f:00:e6:f2:bc:1d:ae:34:
                    09:c9:a0:e4:ad:f4:1d:1c:b6:23:b5:6f:e7:a1:57:
                    20:65:c8:37:06:17:8d:28:d5:6b:7b:03:18:6a:be:
                    ce:ba:f5:d4:c6:e5:0d:be:ee:b8:f7:94:f0:bb:90:
                    a0:a1:68:dd:9b:eb:21:32:6a:f9:b9:51:5e:64:ad:
                    99:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E5:91:BB:5D:71:10:C0:E1:38:17:65:B9:79:E2:81:29:1B:3A:C7
            X509v3 Authority Key Identifier:
                keyid:74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/74B90A27D86F6A1914C261C21469DF853E32BEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638373a623030623a3a2f34382d3438203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df87:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:7a:85:75:17:b4:bc:8d:08:12:57:0b:8a:04:db:1b:2c:32:
         1c:8d:27:f7:04:1f:22:c5:e7:70:b0:bb:a7:a6:17:e8:54:3d:
         65:24:1e:e5:b6:6d:ef:48:1a:c6:ff:66:1b:9c:a6:94:63:83:
         ee:af:99:e7:5c:09:48:c6:a0:42:7b:31:83:c9:36:c4:4d:07:
         c7:ad:08:10:87:3d:09:a2:29:3e:71:ee:7d:44:60:28:ea:56:
         4d:8d:69:d7:b3:6e:89:93:e3:a8:52:4b:de:0a:32:94:c0:5b:
         4c:3b:05:2d:65:66:04:ba:7e:d2:79:98:a5:2a:ec:05:ad:88:
         27:d4:c7:90:85:0c:c7:55:c7:2e:02:1e:6e:1f:ae:aa:4f:60:
         1e:93:10:be:df:05:00:45:3a:a3:61:5f:b3:b1:6e:c8:90:3e:
         84:41:45:c2:e1:8a:2c:54:42:15:cd:15:a4:8e:33:1f:cb:42:
         32:61:09:82:c5:96:36:41:a8:41:74:56:ce:04:1c:77:f9:e3:
         fc:2f:1f:af:03:9e:89:2f:b3:25:77:43:26:ba:5d:34:47:18:
         63:cc:8f:14:d3:12:a6:e8:43:ed:34:b6:cd:07:ea:9a:d6:30:
         fd:0c:09:03:34:20:87:e9:96:e7:08:2b:cc:85:b3:fb:99:27:
         fd:65:2b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----