Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd8bbcab-b55f-4551-afed-83e6fb646138/1/326131333a3830303a3a2f32392d3239203d3e203531303838.roa
File:                     326131333a3830303a3a2f32392d3239203d3e203531303838.roa (raw, json)
Hash identifier:          Q9Q0Mu9oUVn+1N/ZfBxNc79Zp3AH6m2rIO4IxHYU3/c=
Subject key identifier:   5D:7B:4C:6D:4A:55:9E:3E:76:57:E2:E2:55:20:0C:9A:2E:D4:FC:F8
Certificate issuer:       /CN=0d5f4fd1267e75116cfbbf22bd52efbda97fb9c4
Certificate serial:       654D868582F389D869A3E57296E53066216FF681
Authority key identifier: 0D:5F:4F:D1:26:7E:75:11:6C:FB:BF:22:BD:52:EF:BD:A9:7F:B9:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DV9P0SZ-dRFs-78ivVLvval_ucQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd8bbcab-b55f-4551-afed-83e6fb646138/1/326131333a3830303a3a2f32392d3239203d3e203531303838.roa
Signing time:             Tue 06 Dec 2022 10:00:21 +0000
ROA not before:           Tue 06 Dec 2022 09:55:21 +0000
ROA not after:            Tue 05 Dec 2023 10:00:21 +0000
asID:                     51088
IP address blocks:        2a13:800::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:4d:86:85:82:f3:89:d8:69:a3:e5:72:96:e5:30:66:21:6f:f6:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d5f4fd1267e75116cfbbf22bd52efbda97fb9c4
        Validity
            Not Before: Dec  6 09:55:21 2022 GMT
            Not After : Dec  5 10:00:21 2023 GMT
        Subject: CN=5D7B4C6D4A559E3E7657E2E255200C9A2ED4FCF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e2:bc:59:e6:48:39:d1:72:c8:74:ec:45:96:
                    54:e7:6c:10:7e:6d:28:fc:36:4a:50:49:06:b7:20:
                    50:49:de:41:7c:cb:92:12:29:f3:1a:2c:fe:e8:8c:
                    60:31:a1:59:75:35:ad:fe:8a:b0:7b:32:6d:ab:0e:
                    ec:fd:3d:3d:8a:58:2e:ac:86:38:30:8d:e4:21:14:
                    52:19:47:84:ae:cc:12:a7:dc:f8:42:19:93:8d:85:
                    a1:e9:07:1a:2d:55:c2:70:89:77:ac:e9:49:ad:51:
                    ec:5e:62:b8:92:7a:80:60:00:5e:08:d2:63:7b:79:
                    46:cb:7a:1b:b4:b9:ca:a1:b4:36:50:58:7e:61:57:
                    33:df:d7:23:47:ed:94:41:67:ba:81:a9:6f:f6:07:
                    33:cf:64:e5:ee:96:a7:88:28:6a:97:18:26:57:37:
                    b5:49:3a:56:22:88:a1:ec:91:bd:e2:fa:46:9f:a7:
                    c6:fe:65:98:6e:b9:07:64:47:07:14:47:56:00:77:
                    73:81:70:2b:4c:1f:3c:14:51:ef:0f:2b:d3:e5:5e:
                    1a:dd:10:08:d3:f2:3e:a4:50:82:b3:24:f4:44:dd:
                    56:2f:0c:67:22:fc:85:50:5e:04:9f:fc:8d:cb:79:
                    99:c5:4d:78:b9:75:78:fc:f2:a6:7c:48:6e:32:98:
                    9f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:7B:4C:6D:4A:55:9E:3E:76:57:E2:E2:55:20:0C:9A:2E:D4:FC:F8
            X509v3 Authority Key Identifier:
                keyid:0D:5F:4F:D1:26:7E:75:11:6C:FB:BF:22:BD:52:EF:BD:A9:7F:B9:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd8bbcab-b55f-4551-afed-83e6fb646138/1/0D5F4FD1267E75116CFBBF22BD52EFBDA97FB9C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DV9P0SZ-dRFs-78ivVLvval_ucQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd8bbcab-b55f-4551-afed-83e6fb646138/1/326131333a3830303a3a2f32392d3239203d3e203531303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:800::/29

    Signature Algorithm: sha256WithRSAEncryption
         9f:13:73:b4:9e:b1:bb:55:47:04:e9:5e:0c:61:81:b4:f5:80:
         19:26:cc:c5:9b:0c:3b:f0:d3:94:d7:2f:23:98:21:9d:17:ae:
         45:b8:5a:0d:05:2d:00:e3:1f:01:e5:22:41:46:e5:48:a4:ce:
         64:7b:ab:1c:e0:10:2c:86:fc:ba:e9:17:6c:0e:60:61:60:72:
         d0:5b:cd:87:73:f0:57:41:1e:0e:64:35:44:4a:76:35:b1:da:
         60:f2:e1:39:82:d3:5f:66:fe:c7:92:df:cc:57:18:28:00:63:
         30:a7:28:78:9d:c6:e0:1f:b1:63:50:ae:ce:51:42:0b:f9:17:
         61:56:7e:fd:18:65:2a:4a:ad:1d:a1:80:3c:54:66:02:63:9d:
         c2:4a:4b:1f:2d:4e:c7:07:1a:d0:79:4d:eb:84:c0:61:09:3f:
         dc:5d:01:f7:64:65:87:1d:7b:f9:13:95:94:52:9e:07:2d:f8:
         41:b9:ec:60:9c:0a:5a:1f:9e:3b:ba:bf:45:02:39:aa:f0:85:
         8f:ae:df:38:a9:a8:ff:be:f0:7b:fb:50:73:2c:bd:0a:a3:54:
         51:51:20:b6:3d:41:da:9e:29:99:f1:fa:cc:8b:34:b3:3e:17:
         10:b7:b5:a5:f9:03:3b:4c:54:ce:2b:e9:d8:48:82:2e:9f:b3:
         7d:80:ef:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----