Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634313a623030303a3a2f33362d3438203d3e20323039383036.roa
File:                     326131333a656634313a623030303a3a2f33362d3438203d3e20323039383036.roa (raw, json)
Hash identifier:          rOPitNMCm4m81Q7uhI0EfVJM65OxZAhWkz9rjq2VM+8=
Subject key identifier:   83:A5:A3:8E:07:C2:47:1A:D5:C7:9A:BB:9B:BA:CB:48:F7:46:15:D0
Certificate issuer:       /CN=c3044238bb4721d91399f8b02719dfd22edf0087
Certificate serial:       5F719DAFF5C8C51B5DAB0AA3D85C199A8C720EFB
Authority key identifier: C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634313a623030303a3a2f33362d3438203d3e20323039383036.roa
Signing time:             Mon 18 Dec 2023 20:57:51 +0000
ROA not before:           Mon 18 Dec 2023 20:52:51 +0000
ROA not after:            Mon 16 Dec 2024 20:57:51 +0000
asID:                     209806
IP address blocks:        2a13:ef41:b000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:71:9d:af:f5:c8:c5:1b:5d:ab:0a:a3:d8:5c:19:9a:8c:72:0e:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3044238bb4721d91399f8b02719dfd22edf0087
        Validity
            Not Before: Dec 18 20:52:51 2023 GMT
            Not After : Dec 16 20:57:51 2024 GMT
        Subject: CN=83A5A38E07C2471AD5C79ABB9BBACB48F74615D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:66:ac:7e:e5:13:b3:7c:e8:27:68:c4:f3:b8:
                    c1:d2:15:8d:42:f7:bf:17:97:ef:de:8c:63:11:04:
                    a0:5e:9c:22:05:3f:bf:e3:c3:1f:c4:bf:c2:a1:9b:
                    c5:7e:c6:0a:9a:90:9a:98:bb:52:e7:f4:93:95:36:
                    4f:d5:95:cf:e2:61:41:c7:9a:c4:ce:d4:88:29:3f:
                    6b:87:75:16:e8:38:15:82:4e:76:16:6c:05:e8:06:
                    77:36:61:59:42:6e:b9:57:e0:d7:d4:b1:d2:e1:73:
                    44:fa:0c:d8:d8:22:5f:8c:1d:2b:ce:6b:38:c9:26:
                    b0:15:b8:ff:1f:1f:3a:97:cb:02:cb:52:59:18:09:
                    fc:31:7d:b8:21:d9:2b:84:40:ce:fa:f3:f2:9d:04:
                    25:26:f3:fd:cf:18:51:e5:9a:b7:5f:c6:31:75:94:
                    61:65:27:da:7f:5a:6a:67:19:78:31:0e:3d:4d:af:
                    43:cf:8c:9c:f2:cc:18:a7:a1:48:85:5b:ac:71:76:
                    f1:e3:d0:f5:c7:a9:82:d8:ff:4c:62:18:4e:d1:4b:
                    bf:bb:57:43:f6:ec:d8:42:2f:e1:4b:4a:4b:99:10:
                    cc:50:d6:5b:20:d0:24:d9:21:b5:7e:f2:cf:62:2b:
                    6f:6d:cc:39:2a:4b:14:0d:27:8e:b3:1f:e1:fd:68:
                    86:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A5:A3:8E:07:C2:47:1A:D5:C7:9A:BB:9B:BA:CB:48:F7:46:15:D0
            X509v3 Authority Key Identifier:
                keyid:C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/C3044238BB4721D91399F8B02719DFD22EDF0087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634313a623030303a3a2f33362d3438203d3e20323039383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ef41:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         92:41:f7:e7:c0:14:16:d5:bc:3b:a2:bf:ce:cb:f5:3c:11:f4:
         b7:87:63:95:04:c5:de:5a:aa:55:09:27:06:89:9a:bb:2d:9c:
         29:0b:3a:d8:07:0a:ff:03:ec:ce:50:92:3d:4e:cb:92:6b:43:
         6a:a9:41:1f:ba:1d:a0:eb:a7:2a:05:e0:5f:e2:a7:44:06:06:
         23:e3:f7:49:81:4f:c4:db:17:18:08:d1:d8:e7:6b:d5:31:c0:
         1e:3a:8c:c6:52:e6:4d:c7:04:82:d9:e5:22:6b:0c:8b:98:28:
         c6:08:9a:ef:ee:7c:19:4e:c6:2d:01:db:dd:84:86:81:e9:fe:
         95:8f:f6:fc:64:d9:c4:f0:79:c5:72:d2:92:13:5d:c2:25:37:
         24:db:d0:dd:29:9e:74:70:fc:ad:66:c5:4d:24:cd:e9:4c:86:
         ed:08:07:32:e9:f5:59:fc:b1:c1:07:0a:8b:74:5f:d2:45:e3:
         5a:40:ed:88:5d:1b:57:18:66:8e:e2:50:a9:be:36:4e:56:27:
         c0:1e:6c:83:d3:c5:fb:a6:c8:14:41:7f:6b:70:7f:26:b3:47:
         77:4c:7e:58:04:6c:a8:18:64:bf:33:a7:1b:56:c1:18:62:c3:
         af:ff:3b:c9:19:e1:e0:e8:1b:0b:27:b7:ff:86:e4:e1:79:6f:
         c0:24:02:79
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUX3Gdr/XIxRtdqwqj2FwZmoxyDvswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzMwNDQyMzhiYjQ3MjFkOTEzOTlmOGIwMjcxOWRmZDIy
ZWRmMDA4NzAeFw0yMzEyMTgyMDUyNTFaFw0yNDEyMTYyMDU3NTFaMDMxMTAvBgNV
BAMTKDgzQTVBMzhFMDdDMjQ3MUFENUM3OUFCQjlCQkFDQjQ4Rjc0NjE1RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgZqx+5ROzfOgnaMTzuMHSFY1C
978Xl+/ejGMRBKBenCIFP7/jwx/Ev8Khm8V+xgqakJqYu1Ln9JOVNk/Vlc/iYUHH
msTO1IgpP2uHdRboOBWCTnYWbAXoBnc2YVlCbrlX4NfUsdLhc0T6DNjYIl+MHSvO
azjJJrAVuP8fHzqXywLLUlkYCfwxfbgh2SuEQM768/KdBCUm8/3PGFHlmrdfxjF1
lGFlJ9p/WmpnGXgxDj1Nr0PPjJzyzBinoUiFW6xxdvHj0PXHqYLY/0xiGE7RS7+7
V0P27NhCL+FLSkuZEMxQ1lsg0CTZIbV+8s9iK29tzDkqSxQNJ46zH+H9aIZdAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQUg6WjjgfCRxrVx5q7m7rLSPdGFdAwHwYDVR0j
BBgwFoAUwwRCOLtHIdkTmfiwJxnf0i7fAIcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTRlMTE5ZTEtYTM0MC00MTE2LWEyOTctN2NhZjdmMTFh
YzVkLzAvQzMwNDQyMzhCQjQ3MjFEOTEzOTlGOEIwMjcxOURGRDIyRURGMDA4Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3d3UkNPTHRISWRrVG1maXdKeG5mMGk3
ZkFJYy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTRlMTE5ZTEt
YTM0MC00MTE2LWEyOTctN2NhZjdmMTFhYzVkLzAvMzI2MTMxMzMzYTY1NjYzNDMx
M2E2MjMwMzAzMDNhM2EyZjMzMzYyZDM0MzgyMDNkM2UyMDMyMzAzOTM4MzAzNi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGBCoT70GwMA0GCSqGSIb3DQEBCwUAA4IBAQCSQffnwBQW1bw7or/O
y/U8EfS3h2OVBMXeWqpVCScGiZq7LZwpCzrYBwr/A+zOUJI9TsuSa0NqqUEfuh2g
66cqBeBf4qdEBgYj4/dJgU/E2xcYCNHY52vVMcAeOozGUuZNxwSC2eUiawyLmCjG
CJrv7nwZTsYtAdvdhIaB6f6Vj/b8ZNnE8HnFctKSE13CJTck29DdKZ50cPytZsVN
JM3pTIbtCAcy6fVZ/LHBBwqLdF/SReNaQO2IXRtXGGaO4lCpvjZOVifAHmyD08X7
psgUQX9rcH8ms0d3TH5YBGyoGGS/M6cbVsEYYsOv/zvJGeHg6BsLJ7f/huTheW/A
JAJ5
-----END CERTIFICATE-----