Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a3a2f33322d3438203d3e20323136333938.roa
File:                     326131333a656634343a3a2f33322d3438203d3e20323136333938.roa (raw, json)
Hash identifier:          +Yn+hQ0eOM5fDGb64tugT9dONHXBan5/I+AB9NssRCg=
Subject key identifier:   8C:E7:83:D3:E6:2C:76:00:77:0F:04:3B:09:78:E0:5F:2B:E5:EF:F9
Certificate issuer:       /CN=c3044238bb4721d91399f8b02719dfd22edf0087
Certificate serial:       78A96624FF50395A7FDFBF2CC3B3EAD5E3C704C4
Authority key identifier: C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a3a2f33322d3438203d3e20323136333938.roa
Signing time:             Sun 24 Dec 2023 22:43:33 +0000
ROA not before:           Sun 24 Dec 2023 22:38:33 +0000
ROA not after:            Sun 22 Dec 2024 22:43:33 +0000
asID:                     216398
IP address blocks:        2a13:ef44::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a9:66:24:ff:50:39:5a:7f:df:bf:2c:c3:b3:ea:d5:e3:c7:04:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3044238bb4721d91399f8b02719dfd22edf0087
        Validity
            Not Before: Dec 24 22:38:33 2023 GMT
            Not After : Dec 22 22:43:33 2024 GMT
        Subject: CN=8CE783D3E62C7600770F043B0978E05F2BE5EFF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d6:84:b9:58:ff:0d:3b:28:7c:86:9b:d2:14:
                    26:a5:3f:c9:74:1a:59:d7:14:3b:62:3b:97:71:dd:
                    2e:23:89:d9:ca:a0:53:a0:db:50:99:a2:ed:10:52:
                    df:a8:d4:5c:c1:c8:69:76:5b:15:e9:ee:dc:d6:c9:
                    a2:8e:34:d2:16:0e:2c:86:5c:f2:0b:c4:4f:93:9e:
                    f8:42:b4:f7:34:4a:1b:84:3a:1b:52:24:5f:3e:73:
                    7e:6d:2e:7d:d1:1f:c1:19:7d:71:21:21:e6:ee:c9:
                    21:d4:c3:48:9c:1e:8f:06:90:de:2d:11:bd:5d:3c:
                    16:84:84:dc:aa:e9:22:29:7e:f9:f1:38:cf:62:3b:
                    7f:a0:7b:34:d5:77:d0:c6:a0:f3:6d:57:98:67:0b:
                    df:2f:61:71:70:a7:92:5f:f3:9c:9d:ce:2e:af:7d:
                    51:a1:6d:c0:f2:a0:13:60:46:58:1f:bd:f4:da:89:
                    c3:7b:6e:4c:16:d8:0e:63:a8:94:20:32:6b:c7:63:
                    da:f9:8e:c9:77:a8:77:02:57:76:68:da:4f:53:ef:
                    ed:a5:39:63:2f:3e:04:d0:48:56:9a:66:96:35:ef:
                    0f:4f:aa:55:90:a7:3b:b2:f2:78:f9:e2:fb:aa:d7:
                    6e:cf:32:2e:b6:6b:dc:29:08:54:64:b6:b8:cd:1a:
                    9c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E7:83:D3:E6:2C:76:00:77:0F:04:3B:09:78:E0:5F:2B:E5:EF:F9
            X509v3 Authority Key Identifier:
                keyid:C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/C3044238BB4721D91399F8B02719DFD22EDF0087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a3a2f33322d3438203d3e20323136333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ef44::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:e9:21:5f:ee:9f:8a:f0:99:01:fd:e8:e2:7b:9a:c7:56:e9:
         6b:47:5f:49:3f:32:5c:15:0b:29:e3:92:74:7e:d8:35:d7:f8:
         e2:78:de:79:0c:d0:fb:0e:ca:2d:b3:7c:de:af:e6:8f:dd:ee:
         20:3c:e7:38:69:55:79:3e:e6:e6:53:c0:45:d4:ff:3e:22:48:
         96:f9:dd:4e:6c:96:83:cc:17:50:bd:93:19:0d:62:cb:89:62:
         93:be:39:cb:74:d4:84:da:45:ee:cc:56:19:31:bb:b6:fb:1a:
         58:be:fc:0c:68:2d:2a:75:ae:86:b7:34:56:f1:3c:4d:20:ac:
         22:6a:de:0a:21:6f:d7:c5:17:9d:bc:31:42:1e:0c:d2:b8:2b:
         0d:6a:2c:a5:1d:ca:8a:49:73:5d:09:20:04:e7:92:52:96:22:
         9e:b8:c5:06:6d:d8:35:e5:df:9f:ff:70:c5:80:fc:91:b8:81:
         fd:45:cb:71:2e:16:98:e2:3b:32:64:7d:e2:93:ae:56:59:19:
         25:c7:2a:8f:ff:95:db:e9:fa:d0:29:06:7a:0b:74:d5:c4:3b:
         20:92:dc:2b:cc:dd:eb:9c:e8:20:7d:87:b0:23:15:cc:39:49:
         79:6f:dd:95:7c:83:72:b6:03:fd:6b:f4:01:33:ae:16:0e:b4:
         e3:4c:dd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----