Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a663030383a3a2f34382d3438203d3e203632343134.roa
File:                     326131333a656634343a663030383a3a2f34382d3438203d3e203632343134.roa (raw, json)
Hash identifier:          Bfcg2nTBlD7bGM/di30Z5YpIn65j5CoHUYgw91K9s1Y=
Subject key identifier:   DC:06:2C:85:09:08:58:AD:44:07:AA:BC:DE:2E:BB:D2:16:4D:B9:F6
Certificate issuer:       /CN=c3044238bb4721d91399f8b02719dfd22edf0087
Certificate serial:       0906B036CC1EFFFF28CB279D5555318F79D7A352
Authority key identifier: C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a663030383a3a2f34382d3438203d3e203632343134.roa
Signing time:             Sun 17 Dec 2023 16:05:24 +0000
ROA not before:           Sun 17 Dec 2023 16:00:24 +0000
ROA not after:            Sun 15 Dec 2024 16:05:24 +0000
asID:                     62414
IP address blocks:        2a13:ef44:f008::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:06:b0:36:cc:1e:ff:ff:28:cb:27:9d:55:55:31:8f:79:d7:a3:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3044238bb4721d91399f8b02719dfd22edf0087
        Validity
            Not Before: Dec 17 16:00:24 2023 GMT
            Not After : Dec 15 16:05:24 2024 GMT
        Subject: CN=DC062C85090858AD4407AABCDE2EBBD2164DB9F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ef:50:82:1b:a2:0e:f8:41:cd:c6:74:97:ac:
                    60:94:83:c5:6a:3b:d8:8e:68:5e:84:6a:9c:7c:b9:
                    0a:9e:4b:3f:ee:5e:4a:07:f2:fb:02:0a:40:51:08:
                    98:5c:08:63:13:3f:e5:94:ec:f1:5c:1d:87:c5:d2:
                    15:4c:1a:84:6e:d9:93:ca:ac:cf:eb:53:3f:89:40:
                    f8:0c:6d:9c:5d:d1:94:bc:8e:44:14:40:14:50:32:
                    71:86:ba:aa:29:10:67:78:ec:6d:97:5b:30:42:ec:
                    79:77:5f:7d:9e:85:39:80:67:9c:93:04:a0:8b:cd:
                    ff:96:44:6e:28:76:7b:85:29:a9:14:64:03:17:4c:
                    b5:b9:bd:72:ef:1b:e8:4d:91:d7:0d:b2:8a:30:c2:
                    89:14:5b:5e:4d:52:84:35:a9:8d:74:aa:8c:35:61:
                    3e:24:69:64:64:43:5f:12:da:fd:2f:1d:89:29:6a:
                    dc:fd:f4:97:46:35:e0:8b:24:e8:35:5c:ac:30:73:
                    2d:8e:4d:4b:15:cd:a4:40:f2:7f:22:43:f0:f1:2c:
                    a9:eb:a1:e2:a5:05:e4:b0:9a:e0:dd:dc:66:fd:e8:
                    6e:86:75:18:c1:fe:5f:78:2f:83:fe:5a:09:7f:b6:
                    17:89:fb:fa:07:cb:3b:ce:40:f3:9f:b7:b4:cd:ff:
                    b5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:06:2C:85:09:08:58:AD:44:07:AA:BC:DE:2E:BB:D2:16:4D:B9:F6
            X509v3 Authority Key Identifier:
                keyid:C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/C3044238BB4721D91399F8B02719DFD22EDF0087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a663030383a3a2f34382d3438203d3e203632343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ef44:f008::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:99:4a:b9:11:d3:e8:e8:70:bb:9e:e7:29:b8:dd:d1:9d:63:
         26:e1:0f:48:42:7b:dc:9d:00:41:4f:00:17:28:f7:ba:a2:12:
         64:74:eb:36:d6:7b:01:a9:6b:d0:e2:17:71:ee:52:6b:73:58:
         c4:30:81:a4:54:ed:84:51:d1:fc:7e:2c:14:e0:08:7a:d4:25:
         eb:e3:d4:ba:a9:bd:f5:89:23:2b:1e:f2:20:f9:f6:ea:18:9d:
         e3:d7:af:f6:47:ea:22:ed:35:61:fe:00:9b:bf:95:61:3e:de:
         f5:6e:fc:00:a3:57:a9:e4:5f:45:3a:3a:e4:cb:fa:d4:56:f7:
         0d:8b:c4:c7:12:55:a4:0a:09:03:1f:32:36:9c:16:59:18:9e:
         19:69:d1:57:b1:3a:71:d5:cd:28:7b:56:ee:f6:94:cf:9b:af:
         57:90:8a:45:1a:6d:9f:ac:c7:c1:5d:12:7b:72:d5:94:1c:92:
         f1:10:9d:92:7e:58:9f:4c:c2:19:68:df:33:12:bd:19:45:ce:
         e0:7c:a3:2c:62:ec:5f:ec:f3:de:6c:00:13:2d:2f:3d:36:f9:
         7d:1b:63:36:0a:da:1f:b0:ae:8b:3a:a9:bb:82:d6:48:fb:20:
         78:c1:1e:ed:09:b6:50:09:75:d0:89:7a:f2:f4:e5:5e:a6:72:
         bd:a1:37:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----