Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a313a3a2f34382d3438203d3e20323136333938.roa
File:                     326131333a656634343a313a3a2f34382d3438203d3e20323136333938.roa (raw, json)
Hash identifier:          CCigd+cqwq7KlU8G6eb6a+M11yUonFORn1y7cSiz52o=
Subject key identifier:   B5:D7:33:B8:12:15:1D:B9:C2:D7:CD:1C:26:49:AA:B6:F1:4A:F3:4F
Certificate issuer:       /CN=c3044238bb4721d91399f8b02719dfd22edf0087
Certificate serial:       57A45EC514049F2A94C70C5076C37D67C8230FD5
Authority key identifier: C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a313a3a2f34382d3438203d3e20323136333938.roa
Signing time:             Sun 24 Dec 2023 22:47:37 +0000
ROA not before:           Sun 24 Dec 2023 22:42:37 +0000
ROA not after:            Sun 22 Dec 2024 22:47:37 +0000
asID:                     216398
IP address blocks:        2a13:ef44:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a4:5e:c5:14:04:9f:2a:94:c7:0c:50:76:c3:7d:67:c8:23:0f:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3044238bb4721d91399f8b02719dfd22edf0087
        Validity
            Not Before: Dec 24 22:42:37 2023 GMT
            Not After : Dec 22 22:47:37 2024 GMT
        Subject: CN=B5D733B812151DB9C2D7CD1C2649AAB6F14AF34F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:49:76:2d:00:6b:52:01:67:63:c8:f3:0a:29:
                    7f:2f:b5:6c:bc:61:d3:04:4b:1d:4b:fa:ca:d4:e9:
                    72:80:8e:bd:e8:49:36:e6:c4:e7:d1:4c:55:d0:f8:
                    6c:ed:6c:e6:08:66:e6:76:bf:0c:eb:21:21:6f:22:
                    dd:7d:8a:76:14:c5:23:8e:be:ae:41:5d:a5:36:9f:
                    5e:80:c2:d6:a8:44:2a:10:f6:aa:21:90:64:b3:11:
                    7d:0c:7a:4e:a3:1b:47:8e:42:6b:b1:8e:89:b2:3b:
                    18:e9:bf:b2:40:19:1d:8a:2c:73:e0:db:db:dd:8a:
                    42:c6:71:15:e1:c6:81:32:22:38:57:0c:88:56:d5:
                    8b:75:c0:11:80:aa:e8:3d:7f:e5:db:1e:30:0d:d6:
                    40:2e:4f:ff:d6:c5:19:f5:60:ee:69:d7:80:5b:57:
                    10:bc:ee:c1:74:b9:23:b3:9b:c2:e0:aa:f8:c2:e9:
                    21:45:bf:6f:f2:18:18:85:ae:07:0c:de:c0:85:9d:
                    df:37:c9:d9:c3:36:bf:c1:cb:2e:98:9b:1a:fb:58:
                    af:79:35:1a:e6:60:fa:d9:c6:7b:3a:e5:27:74:5f:
                    ba:54:fe:1c:55:f5:3e:4b:44:49:c8:09:d8:11:5e:
                    e4:6d:36:55:1f:ff:41:f7:55:71:ac:d9:2a:c2:2c:
                    0c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D7:33:B8:12:15:1D:B9:C2:D7:CD:1C:26:49:AA:B6:F1:4A:F3:4F
            X509v3 Authority Key Identifier:
                keyid:C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/C3044238BB4721D91399F8B02719DFD22EDF0087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a313a3a2f34382d3438203d3e20323136333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ef44:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:92:77:fc:9d:4b:ce:4b:ff:48:b5:c9:cf:d3:0c:4f:20:ae:
         a6:ec:32:92:03:59:a4:ee:db:16:ce:27:6c:3a:5d:b7:46:d1:
         61:bb:e2:19:45:8c:10:78:bf:d9:1c:24:b3:a4:9f:a7:8e:1b:
         49:82:bd:4d:1d:19:66:a5:74:00:09:0d:38:64:fc:73:40:e2:
         ab:27:bd:69:c3:1c:21:c5:e3:e1:da:a8:a8:c0:6d:a7:3a:39:
         8d:4a:78:f5:35:73:74:c9:4b:cd:c4:67:54:8c:5d:7f:9c:81:
         7b:4e:f7:a9:07:dd:4d:2b:d3:26:70:c1:57:e3:69:f1:82:44:
         45:18:b6:e5:40:cb:1a:9e:12:cc:f7:ef:fe:e1:f0:07:00:35:
         38:02:b6:09:6b:31:db:cc:a0:b8:b2:9e:ff:dd:91:e0:61:c1:
         3e:c2:ca:cd:df:5e:dc:e1:5d:06:cb:3e:ab:e4:ff:3f:f5:cc:
         52:52:ee:33:b7:1a:b2:b3:99:78:a2:6f:2c:48:fc:59:b8:88:
         85:cd:fd:ca:ab:62:a5:4d:b3:66:6e:e8:5c:06:c1:24:cc:be:
         34:d0:f9:99:f8:d6:e5:3b:9f:6d:af:8c:8d:b2:6b:d9:64:79:
         0a:78:f8:f0:50:7f:50:18:92:02:75:34:dd:50:5e:89:65:60:
         0c:87:86:67
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----