Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a663030623a3a2f34382d3438203d3e203434343233.roa
File:                     326131333a656634343a663030623a3a2f34382d3438203d3e203434343233.roa (raw, json)
Hash identifier:          bf8ofuHLQs6Qyyh+BuX5v8EKRVu9BNmyLTkV+pXhgkA=
Subject key identifier:   37:87:03:98:0F:39:8A:5B:FA:88:F8:A0:E1:F3:35:5A:64:80:DF:23
Certificate issuer:       /CN=c3044238bb4721d91399f8b02719dfd22edf0087
Certificate serial:       6D97D4AAD35C4109B3CACB6362778198389DA4E5
Authority key identifier: C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a663030623a3a2f34382d3438203d3e203434343233.roa
Signing time:             Sun 17 Dec 2023 16:29:13 +0000
ROA not before:           Sun 17 Dec 2023 16:24:13 +0000
ROA not after:            Sun 15 Dec 2024 16:29:13 +0000
asID:                     44423
IP address blocks:        2a13:ef44:f00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:97:d4:aa:d3:5c:41:09:b3:ca:cb:63:62:77:81:98:38:9d:a4:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3044238bb4721d91399f8b02719dfd22edf0087
        Validity
            Not Before: Dec 17 16:24:13 2023 GMT
            Not After : Dec 15 16:29:13 2024 GMT
        Subject: CN=378703980F398A5BFA88F8A0E1F3355A6480DF23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:19:e1:9f:ad:b2:6b:fe:6a:f7:2f:c6:2f:a4:
                    db:53:b5:1b:d1:40:c9:81:1a:9c:c8:2c:3f:44:4f:
                    32:a3:b3:54:07:8a:d2:04:27:e1:aa:ad:85:a0:6f:
                    d0:06:52:56:cc:f5:75:f6:45:01:7d:64:c8:90:1f:
                    d5:d3:cc:eb:66:8a:00:38:60:8d:9a:ff:ab:eb:cc:
                    fd:02:f2:8b:b3:1f:50:ab:f3:ea:e3:64:47:0d:ff:
                    27:19:d2:e6:f2:53:10:8c:9e:04:88:cd:48:c6:39:
                    57:37:c3:32:e2:14:a2:1b:e5:6d:0c:53:bb:b8:be:
                    b4:37:5e:da:7c:6b:1c:61:09:68:63:a7:aa:30:86:
                    4c:88:38:cc:41:d6:18:e3:59:2e:d2:95:73:9d:b5:
                    b5:50:26:34:85:c3:ad:a8:b7:a2:33:ca:1a:b6:ca:
                    1d:ae:41:09:f4:10:15:dc:e7:8d:d5:0f:f5:7f:69:
                    da:fa:66:3b:c3:80:b7:ba:53:b6:e4:8e:4f:6b:ef:
                    ba:42:b5:07:79:a1:a7:19:90:09:5c:8f:5a:aa:53:
                    78:40:b7:e7:bf:00:ae:ab:34:78:5c:17:73:e3:d3:
                    9e:d9:d8:f3:57:36:37:d6:2e:04:b1:0a:45:4d:14:
                    b6:95:56:7a:43:da:cf:c3:00:60:33:fc:53:16:7a:
                    4a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:87:03:98:0F:39:8A:5B:FA:88:F8:A0:E1:F3:35:5A:64:80:DF:23
            X509v3 Authority Key Identifier:
                keyid:C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/C3044238BB4721D91399F8B02719DFD22EDF0087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a663030623a3a2f34382d3438203d3e203434343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ef44:f00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:1d:c0:76:88:e4:0e:0d:6b:bb:42:10:03:48:17:01:98:1f:
         15:79:8e:ee:b2:a2:0c:3f:b6:4e:7b:b4:d7:6c:ed:2a:dd:b1:
         e3:9a:bd:71:d6:3f:bf:9a:98:e9:ec:aa:91:40:8c:02:f6:61:
         1e:44:f5:50:d2:98:36:8e:4c:43:2c:23:ae:b6:92:e6:68:29:
         f8:d8:d6:c1:9e:79:ad:9a:a0:34:e2:d5:26:2b:77:0f:29:df:
         b2:71:1d:ca:51:a6:26:5f:99:ec:d9:d1:b4:a7:f6:2f:6d:6d:
         53:13:b7:db:f7:a8:0e:e4:72:bf:43:e3:dc:7d:bd:e4:e2:d1:
         77:96:ff:b8:dd:c4:86:44:51:a3:5e:b3:c4:d6:fd:af:0e:d9:
         ba:8b:47:64:33:73:52:ed:00:6d:04:ab:ad:a4:d3:d2:13:fd:
         14:17:f8:57:e5:87:4f:e6:13:66:f4:c1:16:10:f2:b4:46:7f:
         8f:f7:1b:7e:f0:1f:b2:7c:fc:79:93:d9:35:75:c0:41:16:0f:
         27:c9:b0:67:a6:d9:a8:01:91:2d:25:48:84:6c:7e:90:42:b2:
         5b:1a:58:97:df:31:a9:c3:02:c4:1a:0d:46:e6:ed:26:0f:f2:
         86:e7:c5:91:62:41:55:0d:f7:65:a6:8a:22:8c:00:b7:b3:20:
         f3:f0:6a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----