Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634313a623030303a3a2f33362d3438203d3e20313939353832.roa
File:                     326131333a656634313a623030303a3a2f33362d3438203d3e20313939353832.roa (raw, json)
Hash identifier:          /WDhmqhdRR5mOn4hx/TgtZ/aJdBB3f7ptkQ6wEX2GNM=
Subject key identifier:   A3:A4:9A:A5:4C:67:8D:8E:15:F8:18:1C:BA:08:51:A6:6D:C7:43:CF
Certificate issuer:       /CN=c3044238bb4721d91399f8b02719dfd22edf0087
Certificate serial:       3D8F81529C508C0172B7D01638ECCDC762C8CA03
Authority key identifier: C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634313a623030303a3a2f33362d3438203d3e20313939353832.roa
Signing time:             Mon 18 Dec 2023 20:57:37 +0000
ROA not before:           Mon 18 Dec 2023 20:52:37 +0000
ROA not after:            Mon 16 Dec 2024 20:57:37 +0000
asID:                     199582
IP address blocks:        2a13:ef41:b000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:8f:81:52:9c:50:8c:01:72:b7:d0:16:38:ec:cd:c7:62:c8:ca:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3044238bb4721d91399f8b02719dfd22edf0087
        Validity
            Not Before: Dec 18 20:52:37 2023 GMT
            Not After : Dec 16 20:57:37 2024 GMT
        Subject: CN=A3A49AA54C678D8E15F8181CBA0851A66DC743CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b9:98:48:fc:0b:23:42:4f:d5:cf:25:c1:d2:
                    f3:50:87:a2:54:39:93:2c:9c:1a:78:0e:c5:ea:84:
                    08:28:ac:84:0c:26:5a:2f:8d:24:34:f7:ab:e0:f0:
                    ed:7e:33:8e:eb:b2:ad:34:7a:5c:c5:4e:aa:a2:07:
                    85:52:71:34:fa:1c:7c:f7:0a:93:67:e5:97:9a:8e:
                    b6:df:ec:6d:8a:dd:cf:f5:c2:d7:97:5d:e4:3e:51:
                    76:a8:3a:be:3b:d9:6e:76:93:b3:c0:a7:41:1b:31:
                    76:5c:e6:6c:55:50:ac:c4:b4:8f:68:0e:48:24:39:
                    36:33:a8:3f:af:83:d5:90:7b:da:81:5d:a9:6e:bc:
                    9d:ba:92:27:b9:93:37:04:58:f3:d5:5e:12:26:e9:
                    f6:74:f6:db:f7:52:e1:26:48:13:81:ab:62:fd:42:
                    93:c2:9c:7a:de:ef:21:96:87:97:0b:c2:c6:d5:27:
                    2f:8d:a3:b7:74:29:78:26:06:47:c2:06:96:f6:ac:
                    6a:4d:e2:05:20:d4:13:dc:b5:75:76:e7:47:47:33:
                    40:de:62:7f:a2:6c:48:53:ea:3f:13:4f:f9:c8:b2:
                    91:8f:f4:8c:73:62:35:71:08:ba:01:57:50:65:87:
                    4e:f8:5c:5c:b5:86:b5:00:ee:51:37:53:01:21:0b:
                    9c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A4:9A:A5:4C:67:8D:8E:15:F8:18:1C:BA:08:51:A6:6D:C7:43:CF
            X509v3 Authority Key Identifier:
                keyid:C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/C3044238BB4721D91399F8B02719DFD22EDF0087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634313a623030303a3a2f33362d3438203d3e20313939353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ef41:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7d:83:35:f9:cc:da:dc:6f:7c:76:d1:0f:a5:b9:ac:e7:20:0d:
         2d:5c:d2:40:42:b0:18:4b:0a:88:c3:2e:60:76:72:35:12:47:
         9a:f4:bf:22:08:73:82:98:5f:3f:08:50:7d:8f:95:c1:40:98:
         46:05:1d:5e:38:33:f9:41:25:f5:4f:5d:06:d5:41:6b:65:82:
         26:cf:e5:a0:70:b2:20:65:e6:93:02:a6:73:ca:a3:8a:69:22:
         8b:dc:51:db:5f:dc:f6:f5:e6:f5:77:64:5e:4a:ed:f5:fd:df:
         32:69:90:dc:51:18:4d:f9:f0:b2:ed:06:4d:ba:4b:42:01:2b:
         fe:76:56:be:72:17:45:0d:48:65:ba:cc:6d:5d:87:d2:11:68:
         78:01:f2:21:b2:c1:61:7b:65:a9:d2:4d:67:3c:ab:7b:20:f0:
         3a:98:af:fe:5c:11:34:bc:86:80:20:e0:6e:3f:b6:f8:ac:ed:
         52:9b:e3:79:ad:d4:cc:1f:2c:fa:4a:20:e0:95:36:81:dd:ae:
         01:5c:79:8e:cc:9f:60:16:31:5f:4e:4b:f2:ed:51:16:54:9d:
         7b:d0:e5:5b:15:d9:39:35:11:4c:d0:98:25:99:68:13:60:a9:
         88:75:f4:78:f4:ed:ee:fa:b4:a1:eb:11:97:a3:02:ac:51:81:
         f9:d0:8f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----