Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a663030393a3a2f34382d3438203d3e20323132323934.roa
File:                     326131333a656634343a663030393a3a2f34382d3438203d3e20323132323934.roa (raw, json)
Hash identifier:          P4aJJsOyIBrb7nhXFM/uRqMxkZ4yCrjFxeqtCbgS03M=
Subject key identifier:   CD:E3:4B:78:D7:B8:10:E9:64:33:CB:42:B6:E1:AD:3D:9C:9F:41:51
Certificate issuer:       /CN=c3044238bb4721d91399f8b02719dfd22edf0087
Certificate serial:       0B93157D5CE172E7F98FAA703899C03C37AA19E7
Authority key identifier: C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a663030393a3a2f34382d3438203d3e20323132323934.roa
Signing time:             Sun 17 Dec 2023 16:07:10 +0000
ROA not before:           Sun 17 Dec 2023 16:02:10 +0000
ROA not after:            Sun 15 Dec 2024 16:07:10 +0000
asID:                     212294
IP address blocks:        2a13:ef44:f009::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:93:15:7d:5c:e1:72:e7:f9:8f:aa:70:38:99:c0:3c:37:aa:19:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3044238bb4721d91399f8b02719dfd22edf0087
        Validity
            Not Before: Dec 17 16:02:10 2023 GMT
            Not After : Dec 15 16:07:10 2024 GMT
        Subject: CN=CDE34B78D7B810E96433CB42B6E1AD3D9C9F4151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0e:81:b7:9d:83:5c:bd:2e:e3:89:62:29:9e:
                    24:e6:b8:c8:66:9a:56:f4:d9:a2:11:0b:fc:a1:00:
                    db:02:c8:5f:bf:8c:65:61:fc:5a:e9:98:bf:da:78:
                    23:85:01:83:35:fa:5f:5b:5d:af:20:e0:e7:e7:f1:
                    b7:62:10:99:cd:46:4a:63:8e:96:75:f7:f6:71:db:
                    ad:2e:d8:ea:2e:2d:59:09:2f:c9:35:92:e4:25:77:
                    c7:bf:65:e4:74:fd:21:58:6f:61:9e:c5:af:fa:38:
                    41:fb:bd:b6:ad:bd:dc:9b:bd:65:e1:3d:f4:2c:24:
                    c5:c0:97:92:e4:39:9a:3a:f0:0f:d2:9e:b6:a2:5c:
                    aa:77:30:4b:d1:83:41:e6:5f:02:f3:9e:25:da:91:
                    7e:f4:21:3b:d2:3f:c6:6e:e7:77:33:c3:e7:7f:a0:
                    02:b1:b6:75:36:28:61:23:28:e6:09:df:cf:1e:c7:
                    9e:e4:af:db:50:89:38:6f:b7:e7:be:d5:92:81:e3:
                    b4:05:4a:d8:32:b3:3c:30:fc:d8:55:60:7c:1c:b9:
                    e4:4e:1d:8b:30:25:74:9b:17:95:25:a5:68:c9:4f:
                    1a:2f:8f:68:22:b8:9b:06:39:ad:48:eb:6d:a2:07:
                    c9:e6:37:f3:d7:df:2b:95:f4:bd:3d:97:44:01:ba:
                    43:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E3:4B:78:D7:B8:10:E9:64:33:CB:42:B6:E1:AD:3D:9C:9F:41:51
            X509v3 Authority Key Identifier:
                keyid:C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/C3044238BB4721D91399F8B02719DFD22EDF0087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a663030393a3a2f34382d3438203d3e20323132323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ef44:f009::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:75:4c:43:36:c1:92:e5:40:10:62:82:4e:dc:7a:e5:5d:41:
         8a:89:61:1a:ff:33:ba:ce:f7:bf:f3:c1:1d:db:3a:4c:ef:4a:
         87:67:a0:23:50:b4:f4:33:f8:50:e3:2f:c3:a1:3a:4f:8f:00:
         4a:a5:31:81:07:6a:42:4f:cd:09:6f:f5:b0:ea:d4:5a:ad:5e:
         63:25:98:77:8e:81:93:00:62:15:1e:16:b9:44:1c:1d:b1:99:
         01:5a:73:b3:52:03:f3:cc:3b:2e:28:da:68:3b:48:39:04:26:
         89:1b:30:94:2f:4d:d0:10:1f:54:2e:80:bb:cd:ac:e9:61:31:
         58:41:c1:39:14:24:11:1a:2a:dc:a2:8b:20:0c:28:e1:a8:87:
         81:8c:98:04:fc:5a:0e:c2:da:56:b2:ba:9f:12:ef:18:3b:a0:
         0e:62:7b:50:ac:8d:d3:8c:63:bc:b8:79:2f:f9:2c:8a:58:c9:
         72:4d:7c:0e:85:91:a9:6b:1f:33:3e:b7:79:de:6d:7f:4e:6b:
         91:1f:f7:78:a9:91:61:c9:02:a8:28:9e:fd:8a:55:0b:16:9c:
         71:f7:18:68:8b:3e:22:b1:0d:07:d2:89:eb:0b:94:78:21:45:
         26:81:30:45:7f:16:10:db:97:3f:36:d6:c4:aa:d8:1b:e0:22:
         73:45:e8:d7
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUC5MVfVzhcuf5j6pwOJnAPDeqGecwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzMwNDQyMzhiYjQ3MjFkOTEzOTlmOGIwMjcxOWRmZDIy
ZWRmMDA4NzAeFw0yMzEyMTcxNjAyMTBaFw0yNDEyMTUxNjA3MTBaMDMxMTAvBgNV
BAMTKENERTM0Qjc4RDdCODEwRTk2NDMzQ0I0MkI2RTFBRDNEOUM5RjQxNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIDoG3nYNcvS7jiWIpniTmuMhm
mlb02aIRC/yhANsCyF+/jGVh/FrpmL/aeCOFAYM1+l9bXa8g4Ofn8bdiEJnNRkpj
jpZ19/Zx260u2OouLVkJL8k1kuQld8e/ZeR0/SFYb2Gexa/6OEH7vbatvdybvWXh
PfQsJMXAl5LkOZo68A/SnraiXKp3MEvRg0HmXwLzniXakX70ITvSP8Zu53czw+d/
oAKxtnU2KGEjKOYJ388ex57kr9tQiThvt+e+1ZKB47QFStgyszww/NhVYHwcueRO
HYswJXSbF5UlpWjJTxovj2giuJsGOa1I622iB8nmN/PX3yuV9L09l0QBukNxAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUzeNLeNe4EOlkM8tCtuGtPZyfQVEwHwYDVR0j
BBgwFoAUwwRCOLtHIdkTmfiwJxnf0i7fAIcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTRlMTE5ZTEtYTM0MC00MTE2LWEyOTctN2NhZjdmMTFh
YzVkLzAvQzMwNDQyMzhCQjQ3MjFEOTEzOTlGOEIwMjcxOURGRDIyRURGMDA4Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3d3UkNPTHRISWRrVG1maXdKeG5mMGk3
ZkFJYy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTRlMTE5ZTEt
YTM0MC00MTE2LWEyOTctN2NhZjdmMTFhYzVkLzAvMzI2MTMxMzMzYTY1NjYzNDM0
M2E2NjMwMzAzOTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzMjMyMzkzNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoT70TwCTANBgkqhkiG9w0BAQsFAAOCAQEAqnVMQzbBkuVAEGKC
Ttx65V1BiolhGv8zus73v/PBHds6TO9Kh2egI1C09DP4UOMvw6E6T48ASqUxgQdq
Qk/NCW/1sOrUWq1eYyWYd46BkwBiFR4WuUQcHbGZAVpzs1ID88w7LijaaDtIOQQm
iRswlC9N0BAfVC6Au82s6WExWEHBORQkERoq3KKLIAwo4aiHgYyYBPxaDsLaVrK6
nxLvGDugDmJ7UKyN04xjvLh5L/ksiljJck18DoWRqWsfMz63ed5tf05rkR/3eKmR
YckCqCie/YpVCxaccfcYaIs+IrENB9KJ6wuUeCFFJoEwRX8WENuXPzbWxKrYG+Ai
c0Xo1w==
-----END CERTIFICATE-----