Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a663030323a3a2f34382d3438203d3e203630383538.roa
File:                     326131333a656634343a663030323a3a2f34382d3438203d3e203630383538.roa (raw, json)
Hash identifier:          gon4KTNRFnU2hnKJT+fAiN3UEhOc5lYXjfHvJlGDDZM=
Subject key identifier:   E5:FE:21:D2:2B:4C:38:0A:C9:5E:B9:20:C0:93:9D:04:08:8C:F4:D2
Certificate issuer:       /CN=c3044238bb4721d91399f8b02719dfd22edf0087
Certificate serial:       7DE9FBBE8D9509EAD43B976FF5D661645BC0AAC3
Authority key identifier: C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a663030323a3a2f34382d3438203d3e203630383538.roa
Signing time:             Sun 17 Dec 2023 15:48:36 +0000
ROA not before:           Sun 17 Dec 2023 15:43:36 +0000
ROA not after:            Sun 15 Dec 2024 15:48:36 +0000
asID:                     60858
IP address blocks:        2a13:ef44:f002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:e9:fb:be:8d:95:09:ea:d4:3b:97:6f:f5:d6:61:64:5b:c0:aa:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3044238bb4721d91399f8b02719dfd22edf0087
        Validity
            Not Before: Dec 17 15:43:36 2023 GMT
            Not After : Dec 15 15:48:36 2024 GMT
        Subject: CN=E5FE21D22B4C380AC95EB920C0939D04088CF4D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a8:4b:31:b1:80:7f:a1:c3:4d:c5:09:fc:59:
                    fb:a1:d4:40:68:ed:19:90:64:f3:4b:13:0f:7a:06:
                    e6:6b:6f:9a:02:4e:5b:b4:19:3f:79:46:78:dc:73:
                    05:a1:61:35:89:33:1b:28:cb:7d:09:a8:25:2d:a3:
                    32:39:fe:a9:c2:54:30:01:e3:bf:c9:3e:67:cc:4f:
                    0e:05:ab:80:d5:96:9b:23:e4:15:a7:cd:bc:ac:94:
                    d9:c2:7c:d9:e5:e5:1c:f6:13:fd:07:33:c5:ec:ba:
                    ad:cc:22:ab:18:4d:9c:24:30:e2:a8:74:b3:eb:51:
                    49:ef:f6:aa:e6:4a:bf:31:d1:88:c2:3d:1c:cc:a7:
                    1d:f8:3e:56:3c:0f:28:e7:38:f1:e3:55:9d:a6:1c:
                    09:70:cd:20:92:de:04:a9:4c:06:35:35:09:1c:b2:
                    57:52:26:e0:64:f5:af:76:e2:70:2e:a0:f7:11:5d:
                    e0:bb:0b:5a:14:c9:80:36:af:b0:1a:0c:5c:4b:28:
                    d1:5a:50:7c:3d:61:b4:b0:49:19:9e:0f:11:13:91:
                    35:e2:eb:00:68:d2:c9:6f:56:e7:98:b7:e2:30:15:
                    b0:79:16:0f:ad:8f:a7:58:40:b3:f7:db:14:36:5f:
                    07:5f:d2:81:e2:88:ad:0c:2c:e1:e2:33:8f:26:56:
                    2c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FE:21:D2:2B:4C:38:0A:C9:5E:B9:20:C0:93:9D:04:08:8C:F4:D2
            X509v3 Authority Key Identifier:
                keyid:C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/C3044238BB4721D91399F8B02719DFD22EDF0087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a663030323a3a2f34382d3438203d3e203630383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ef44:f002::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:b2:ac:be:78:23:95:9e:09:1d:73:45:25:31:0a:c1:c2:02:
         b3:c0:22:76:51:dd:e2:46:c9:9a:08:ad:1e:25:f2:6b:66:05:
         b1:8b:59:a3:59:1d:80:9f:c9:22:ca:77:8d:fa:53:45:6e:28:
         11:97:73:e3:a6:de:5b:25:5b:26:74:6b:c1:fa:d5:8c:c2:54:
         99:fd:4d:a5:e6:c5:57:1b:68:dc:91:b3:a1:2a:e0:fa:e0:bd:
         cf:64:81:00:2c:2a:58:16:20:07:16:3f:98:ee:13:fd:5b:b4:
         e0:8a:64:92:61:21:b0:d4:3c:d1:dd:33:17:3f:b6:ed:ec:fe:
         1c:3a:1e:30:4f:93:4e:47:16:dc:91:1d:d9:8d:c7:76:75:bf:
         1d:54:42:ba:13:bd:4e:85:2e:79:8d:71:5a:82:44:0b:44:e0:
         23:fe:44:b6:0a:0a:58:7f:a9:5d:07:3b:99:fd:54:6c:07:79:
         9b:db:3d:2b:cc:e8:a6:4b:d0:dd:bf:76:4b:e1:13:bc:c4:cd:
         1f:d2:1b:78:b2:e8:3c:e6:08:c8:f8:4d:1c:ee:b9:21:e8:aa:
         93:f7:52:f4:11:59:1c:56:7d:c8:c2:78:68:10:03:19:cb:3e:
         b7:e4:7b:dd:16:84:86:ed:33:3d:0a:3d:4b:51:3a:a4:bc:26:
         83:4e:d7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----