Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e223bda5-1f94-4319-b448-83db71861695/1/326131333a646638303a37303a3a2f34342d3438203d3e203630393030.roa
File:                     326131333a646638303a37303a3a2f34342d3438203d3e203630393030.roa (raw, json)
Hash identifier:          21HrR3UkyTuE4aqE+9pJdWk28MD50mYHY4NbePlK3wY=
Subject key identifier:   E1:E5:9A:7D:C4:9E:B2:E8:91:5D:24:AC:69:53:D2:7F:F6:12:67:1F
Certificate issuer:       /CN=FBF2AD3783A3C96E2652481F7A77CFC5BE779213
Certificate serial:       10927ED9D3FB32D7F2DEA5AA8C4D292C69514BA9
Authority key identifier: FB:F2:AD:37:83:A3:C9:6E:26:52:48:1F:7A:77:CF:C5:BE:77:92:13
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/FBF2AD3783A3C96E2652481F7A77CFC5BE779213.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e223bda5-1f94-4319-b448-83db71861695/1/326131333a646638303a37303a3a2f34342d3438203d3e203630393030.roa
Signing time:             Wed 19 Apr 2023 21:14:06 +0000
ROA not before:           Wed 19 Apr 2023 21:09:06 +0000
ROA not after:            Wed 17 Apr 2024 21:14:06 +0000
asID:                     60900
IP address blocks:        2a13:df80:70::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:92:7e:d9:d3:fb:32:d7:f2:de:a5:aa:8c:4d:29:2c:69:51:4b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF2AD3783A3C96E2652481F7A77CFC5BE779213
        Validity
            Not Before: Apr 19 21:09:06 2023 GMT
            Not After : Apr 17 21:14:06 2024 GMT
        Subject: CN=E1E59A7DC49EB2E8915D24AC6953D27FF612671F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:59:e9:ff:4e:88:de:a8:b2:f3:de:85:7a:b3:
                    19:55:e6:80:7b:71:59:fb:f6:53:b0:06:47:fb:3f:
                    6c:72:28:71:32:4a:12:59:af:af:86:9a:48:b2:0e:
                    53:c6:12:1d:75:cc:8e:3a:24:6a:f8:8d:2a:33:88:
                    3e:3c:fc:87:8e:e5:9a:10:2c:69:31:ff:84:b6:a6:
                    ee:18:87:4d:d4:75:8e:f3:40:d4:a7:41:0a:42:94:
                    69:a4:08:77:50:c4:f4:c5:1f:1f:0b:9b:76:2e:48:
                    76:e8:e5:d5:c1:cf:41:33:9f:83:a5:5a:05:d3:c1:
                    ab:6a:5c:be:69:cd:af:a7:7a:e3:9b:64:cd:57:dd:
                    5b:d7:65:d6:3f:4a:8d:63:59:7e:a3:9d:35:31:68:
                    46:bc:82:88:6b:a9:80:61:78:e1:f4:af:35:23:bc:
                    77:a2:8a:76:00:63:31:c9:25:4d:f6:91:ea:03:51:
                    91:78:22:d2:6e:c7:b7:d9:84:b4:e0:1d:7d:78:a0:
                    3a:b4:f1:98:e0:c1:84:88:dd:37:56:e7:c4:c3:bb:
                    d1:69:53:55:78:2b:d4:6f:a7:72:60:92:54:c4:29:
                    9d:0f:d3:89:36:82:a1:dd:2c:72:c7:4f:43:04:81:
                    08:1d:23:35:09:55:69:d5:ab:f5:74:75:ac:ed:a7:
                    1d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E5:9A:7D:C4:9E:B2:E8:91:5D:24:AC:69:53:D2:7F:F6:12:67:1F
            X509v3 Authority Key Identifier:
                keyid:FB:F2:AD:37:83:A3:C9:6E:26:52:48:1F:7A:77:CF:C5:BE:77:92:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e223bda5-1f94-4319-b448-83db71861695/1/FBF2AD3783A3C96E2652481F7A77CFC5BE779213.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/FBF2AD3783A3C96E2652481F7A77CFC5BE779213.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e223bda5-1f94-4319-b448-83db71861695/1/326131333a646638303a37303a3a2f34342d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:70::/44

    Signature Algorithm: sha256WithRSAEncryption
         b0:b9:7a:f7:12:b5:11:70:ae:6d:80:7f:ce:4c:00:12:38:4b:
         41:2c:a9:ae:a8:c4:6b:22:e3:1d:45:d6:85:47:c0:a8:70:72:
         c5:65:c5:42:8b:7f:c3:1a:45:47:cf:f7:3c:0a:b9:7a:e8:31:
         4a:69:a5:7c:e4:ca:6e:d2:4c:f6:12:e0:08:60:53:87:a3:36:
         f0:9f:ee:01:2c:da:1f:62:b4:a0:16:ea:ce:a1:e2:43:59:d4:
         f8:f4:78:69:6d:a9:a0:16:9f:91:aa:16:71:f8:39:95:cd:05:
         a6:e4:26:e6:87:b5:f6:07:c9:35:34:52:d5:23:83:e0:80:3a:
         ea:42:76:db:1e:4f:70:40:ea:f8:4e:8e:8a:a9:7b:09:81:27:
         9b:54:5d:30:93:3f:96:b6:52:c4:74:f3:ca:c2:81:31:3e:b8:
         2e:56:90:a6:f4:ee:38:f9:60:55:25:a5:f1:93:66:0a:f9:47:
         3b:ab:e1:5a:37:ed:90:31:bc:ea:a3:7c:28:ef:59:2d:47:43:
         53:5b:77:fb:7f:f1:42:b9:e4:d5:8c:4a:59:a4:47:7e:93:0f:
         6c:5c:d7:54:47:67:16:85:a8:70:08:de:3a:65:5a:26:96:5c:
         03:a2:7a:1d:12:a4:7f:59:b5:44:42:46:bc:f8:dd:d4:eb:48:
         c4:3b:87:55
-----BEGIN CERTIFICATE-----
MIIFdTCCBF2gAwIBAgIUEJJ+2dP7Mtfy3qWqjE0pLGlRS6kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJGMkFEMzc4M0EzQzk2RTI2NTI0ODFGN0E3N0NGQzVC
RTc3OTIxMzAeFw0yMzA0MTkyMTA5MDZaFw0yNDA0MTcyMTE0MDZaMDMxMTAvBgNV
BAMTKEUxRTU5QTdEQzQ5RUIyRTg5MTVEMjRBQzY5NTNEMjdGRjYxMjY3MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNWen/TojeqLLz3oV6sxlV5oB7
cVn79lOwBkf7P2xyKHEyShJZr6+GmkiyDlPGEh11zI46JGr4jSoziD48/IeO5ZoQ
LGkx/4S2pu4Yh03UdY7zQNSnQQpClGmkCHdQxPTFHx8Lm3YuSHbo5dXBz0Ezn4Ol
WgXTwatqXL5pza+neuObZM1X3VvXZdY/So1jWX6jnTUxaEa8gohrqYBheOH0rzUj
vHeiinYAYzHJJU32keoDUZF4ItJux7fZhLTgHX14oDq08ZjgwYSI3TdW58TDu9Fp
U1V4K9Rvp3JgklTEKZ0P04k2gqHdLHLHT0MEgQgdIzUJVWnVq/V0daztpx2XAgMB
AAGjggJ/MIICezAdBgNVHQ4EFgQU4eWafcSesuiRXSSsaVPSf/YSZx8wHwYDVR0j
BBgwFoAU+/KtN4OjyW4mUkgfenfPxb53khMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTIyM2JkYTUtMWY5NC00MzE5LWI0NDgtODNkYjcxODYx
Njk1LzEvRkJGMkFEMzc4M0EzQzk2RTI2NTI0ODFGN0E3N0NGQzVCRTc3OTIxMy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NGZjNDc1Mi1mODFhLTQ3
YjYtOGYwZC1mZjc0YzhiMGIwYTQvMC9GQkYyQUQzNzgzQTNDOTZFMjY1MjQ4MUY3
QTc3Q0ZDNUJFNzc5MjEzLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF
BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9lMjIzYmRhNS0xZjk0LTQzMTktYjQ0OC04M2RiNzE4NjE2OTUvMS8zMjYxMzEz
MzNhNjQ2NjM4MzAzYTM3MzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzNjMwMzkz
MDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcEKhPfgABwMA0GCSqGSIb3DQEBCwUAA4IBAQCwuXr3ErUR
cK5tgH/OTAASOEtBLKmuqMRrIuMdRdaFR8CocHLFZcVCi3/DGkVHz/c8Crl66DFK
aaV85Mpu0kz2EuAIYFOHozbwn+4BLNofYrSgFurOoeJDWdT49HhpbamgFp+RqhZx
+DmVzQWm5Cbmh7X2B8k1NFLVI4PggDrqQnbbHk9wQOr4To6KqXsJgSebVF0wkz+W
tlLEdPPKwoExPrguVpCm9O44+WBVJaXxk2YK+Uc7q+FaN+2QMbzqo3wo71ktR0NT
W3f7f/FCueTVjEpZpEd+kw9sXNdUR2cWhahwCN46ZVomllwDonodEqR/WbVEQka8
+N3U60jEO4dV
-----END CERTIFICATE-----