Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a663030373a3a2f34382d3438203d3e20323136333938.roa
File:                     326131333a656634343a663030373a3a2f34382d3438203d3e20323136333938.roa (raw, json)
Hash identifier:          inN/4Z3q3gYqusn4wPLo3QS34TxUmMKAvIEEqROaLWk=
Subject key identifier:   B1:33:94:E7:35:0E:D5:BA:62:3A:0E:18:17:FD:76:27:67:80:56:CA
Certificate issuer:       /CN=c3044238bb4721d91399f8b02719dfd22edf0087
Certificate serial:       319CA4703DF665CA3FFB9A86EB186DE6C926F424
Authority key identifier: C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a663030373a3a2f34382d3438203d3e20323136333938.roa
Signing time:             Sun 17 Dec 2023 16:05:04 +0000
ROA not before:           Sun 17 Dec 2023 16:00:04 +0000
ROA not after:            Sun 15 Dec 2024 16:05:04 +0000
asID:                     216398
IP address blocks:        2a13:ef44:f007::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:9c:a4:70:3d:f6:65:ca:3f:fb:9a:86:eb:18:6d:e6:c9:26:f4:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3044238bb4721d91399f8b02719dfd22edf0087
        Validity
            Not Before: Dec 17 16:00:04 2023 GMT
            Not After : Dec 15 16:05:04 2024 GMT
        Subject: CN=B13394E7350ED5BA623A0E1817FD7627678056CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:93:d6:0c:26:b1:8c:6c:e5:ae:bb:85:74:41:
                    38:8e:10:4b:59:e9:78:b1:54:63:5c:14:e0:f4:31:
                    aa:a0:59:1a:ff:88:3c:4b:24:4a:1e:37:da:36:29:
                    6b:a6:12:86:09:87:49:e7:5d:5b:cf:0a:8c:51:28:
                    73:9e:3f:e3:6d:64:9c:56:ea:bd:ad:46:bb:b7:79:
                    0c:66:1f:8f:d3:f2:11:ae:37:5e:ca:b6:90:96:6c:
                    13:24:af:00:9c:38:aa:14:c5:6b:f5:2b:9b:53:80:
                    c4:21:2a:02:01:ef:00:6b:85:f3:78:50:46:a4:7f:
                    8b:05:61:66:02:20:48:ac:fb:5b:8c:7d:ac:63:f0:
                    7c:b9:89:9c:cc:c6:ca:43:5f:86:77:85:d2:d1:e5:
                    30:c8:f4:fb:a8:83:a9:6d:eb:eb:a0:aa:b0:11:b1:
                    8d:ab:82:c6:d0:cc:e9:c0:82:f4:5a:80:3c:c7:56:
                    67:0b:f8:8d:f4:43:84:09:10:c1:1a:f9:7f:8d:a4:
                    54:f6:77:11:a7:68:cc:88:cc:5d:18:71:bc:e7:d9:
                    80:b4:f0:81:13:96:eb:35:ef:14:9e:2e:35:d1:22:
                    69:12:df:18:c2:5a:91:34:ca:79:97:f1:62:d2:a1:
                    bf:db:cb:8d:fc:0e:8c:44:4c:d6:69:ba:46:65:84:
                    b0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:33:94:E7:35:0E:D5:BA:62:3A:0E:18:17:FD:76:27:67:80:56:CA
            X509v3 Authority Key Identifier:
                keyid:C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/C3044238BB4721D91399F8B02719DFD22EDF0087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a663030373a3a2f34382d3438203d3e20323136333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ef44:f007::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:a0:cd:ab:8c:c6:e8:2d:5e:3d:55:30:28:1c:13:59:60:c4:
         4e:87:b2:5e:9f:2c:dd:fa:26:be:73:fc:2a:d4:a1:b3:58:73:
         28:ae:ad:d1:ad:32:10:02:b5:2b:10:d9:dc:0c:5b:c3:1c:36:
         e2:a3:7f:1e:39:80:2d:8d:81:4c:2b:76:b0:8d:27:7f:ff:af:
         30:13:e5:65:e3:b6:e3:78:00:45:97:4f:ca:1a:62:6f:93:d5:
         cb:ff:2b:b3:b8:90:d8:9a:de:2d:36:d2:a6:ce:21:8b:7c:f0:
         48:ff:72:2c:0f:5e:92:ff:28:97:9b:6b:c6:9e:51:14:76:a0:
         16:b6:cf:a2:12:5a:84:a9:44:97:1a:d4:db:d5:ca:26:9f:1b:
         47:9e:49:c6:02:cb:ee:10:d4:b3:07:7d:59:44:8f:8b:f1:58:
         ed:4f:20:f9:6b:68:b4:f1:c7:82:21:cc:b7:62:44:f1:d4:ba:
         9d:50:02:5a:d4:4e:9b:76:01:8f:1c:c5:cd:64:84:47:73:54:
         09:f7:be:24:45:7a:0e:2d:5b:39:0b:14:d8:2e:72:0e:41:aa:
         fa:57:15:f6:6d:c2:3f:ae:a6:b2:40:54:e5:cc:63:11:b3:4e:
         4a:df:42:79:60:1e:ce:ad:3e:11:c4:c8:8a:ec:8b:96:8e:7b:
         f2:0c:4e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----