Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a656530303a3a2f34302d3438203d3e20313939303532.roa
File:                     326131333a656634343a656530303a3a2f34302d3438203d3e20313939303532.roa (raw, json)
Hash identifier:          iq7DchZB6NZFaN/jIITvQMv4xrDBb2rdLxaw6y32EoY=
Subject key identifier:   CF:F2:E8:47:98:FF:E6:87:A1:87:70:97:EC:6C:14:9C:2C:63:37:DA
Certificate issuer:       /CN=c3044238bb4721d91399f8b02719dfd22edf0087
Certificate serial:       5F5552DFA18107561C4398738B569FDB1CBE2B87
Authority key identifier: C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a656530303a3a2f34302d3438203d3e20313939303532.roa
Signing time:             Sun 17 Dec 2023 16:02:25 +0000
ROA not before:           Sun 17 Dec 2023 15:57:25 +0000
ROA not after:            Sun 15 Dec 2024 16:02:25 +0000
asID:                     199052
IP address blocks:        2a13:ef44:ee00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:55:52:df:a1:81:07:56:1c:43:98:73:8b:56:9f:db:1c:be:2b:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3044238bb4721d91399f8b02719dfd22edf0087
        Validity
            Not Before: Dec 17 15:57:25 2023 GMT
            Not After : Dec 15 16:02:25 2024 GMT
        Subject: CN=CFF2E84798FFE687A1877097EC6C149C2C6337DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:70:42:c3:a7:4b:42:9c:30:05:38:e4:1b:81:
                    b1:b0:2b:9d:11:34:fd:ca:f1:ed:97:90:fd:49:ed:
                    57:84:2a:76:be:0d:cf:69:e1:91:74:55:76:f3:e3:
                    b7:61:04:44:00:a5:48:bc:55:9d:d1:e7:43:8a:7a:
                    04:0e:b7:0f:77:b8:19:1f:36:64:df:df:25:12:53:
                    ba:93:da:81:e6:10:c2:ca:ef:e1:a9:94:7c:ad:d5:
                    23:99:b9:34:a5:cd:40:62:72:3e:cb:9d:1c:b6:98:
                    38:d0:f7:9b:ab:b0:c1:3f:e3:78:8b:a8:72:1e:a9:
                    f0:98:f8:a2:9c:97:6e:77:e2:82:8f:d9:1e:e3:29:
                    10:ac:a9:5b:6c:9a:14:98:1c:3f:9c:f9:1c:d6:ac:
                    85:14:a4:f5:6b:8e:cd:9b:3f:17:48:2a:70:33:28:
                    14:07:22:b2:e6:b1:ca:06:f8:8d:84:ad:a9:3b:2d:
                    c4:9d:be:3e:dd:c1:bf:79:8d:13:01:c0:81:5d:19:
                    6a:ca:a9:f2:86:9c:37:06:40:8d:f5:c1:0c:94:e1:
                    18:8b:71:51:91:71:73:17:51:a3:38:d6:0b:e9:d1:
                    1a:3c:b9:15:67:ac:84:89:28:46:0a:8c:56:24:42:
                    c3:f2:03:61:c3:d9:84:e0:e3:ed:c1:7f:2f:8c:65:
                    52:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F2:E8:47:98:FF:E6:87:A1:87:70:97:EC:6C:14:9C:2C:63:37:DA
            X509v3 Authority Key Identifier:
                keyid:C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/C3044238BB4721D91399F8B02719DFD22EDF0087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a656530303a3a2f34302d3438203d3e20313939303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ef44:ee00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b4:d6:7a:46:67:6e:af:e2:3b:e7:7d:77:78:f0:7a:22:cf:bd:
         a8:6b:1c:be:f4:8c:e1:9f:04:52:a7:38:af:71:a3:19:6c:f1:
         91:de:4f:ea:b0:0d:73:ec:63:81:51:3e:01:5f:8e:3e:d5:9e:
         c1:54:21:93:5c:7a:f5:0a:ee:f5:b7:94:06:bb:c3:a6:1b:c4:
         cd:6e:95:4b:9e:81:09:2f:f4:c9:35:b1:f5:a6:7f:71:62:42:
         69:56:f6:c0:02:17:82:e8:34:44:2e:90:28:7d:1e:5c:e9:d0:
         66:be:6b:84:c3:b7:5b:21:2f:46:d9:a0:92:5d:d1:7f:98:3c:
         c9:63:eb:3b:4c:97:35:2c:c8:6c:df:ca:22:c1:12:3b:3d:07:
         78:97:4b:07:63:70:67:4e:63:96:ec:d7:53:36:ef:8e:23:c8:
         ad:db:ce:06:48:2a:0b:ff:f3:df:4f:69:a1:a7:24:31:5e:96:
         3b:7c:3d:0f:a3:f5:1c:bd:91:91:18:50:14:39:1d:43:fb:91:
         89:0b:bc:d9:ec:c4:3b:91:86:0e:2a:2d:94:40:96:9a:6c:1a:
         ce:68:0d:8d:2e:dc:a2:e1:c6:0c:4e:f1:bf:f2:df:51:ea:ee:
         58:73:8e:20:3c:24:ce:29:27:bc:5e:46:5f:06:bd:7f:5b:e0:
         b0:67:40:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----