Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e223bda5-1f94-4319-b448-83db71861695/1/326131333a646638303a37313a3a2f34382d3438203d3e203630393030.roa
File:                     326131333a646638303a37313a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          pfnPbpYyFEbCQrKFY6QYKwovi7p3VO74wEOYd+ryU4k=
Subject key identifier:   75:FA:80:E3:4D:7E:A1:CD:44:E3:7F:3E:B5:98:F5:1F:71:6B:F5:9E
Certificate issuer:       /CN=FBF2AD3783A3C96E2652481F7A77CFC5BE779213
Certificate serial:       189A22592FF0C3ED33AD601D4AFE4D0A0923D0CB
Authority key identifier: FB:F2:AD:37:83:A3:C9:6E:26:52:48:1F:7A:77:CF:C5:BE:77:92:13
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/FBF2AD3783A3C96E2652481F7A77CFC5BE779213.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e223bda5-1f94-4319-b448-83db71861695/1/326131333a646638303a37313a3a2f34382d3438203d3e203630393030.roa
Signing time:             Thu 20 Apr 2023 16:16:56 +0000
ROA not before:           Thu 20 Apr 2023 16:11:56 +0000
ROA not after:            Thu 18 Apr 2024 16:16:56 +0000
asID:                     60900
IP address blocks:        2a13:df80:71::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:9a:22:59:2f:f0:c3:ed:33:ad:60:1d:4a:fe:4d:0a:09:23:d0:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF2AD3783A3C96E2652481F7A77CFC5BE779213
        Validity
            Not Before: Apr 20 16:11:56 2023 GMT
            Not After : Apr 18 16:16:56 2024 GMT
        Subject: CN=75FA80E34D7EA1CD44E37F3EB598F51F716BF59E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b3:1f:43:d7:f3:2c:ff:24:33:87:c7:08:d6:
                    b1:32:73:88:45:f3:d5:e4:cf:c0:e6:fb:6c:9a:8c:
                    51:ac:c9:13:bd:fe:3f:80:86:dd:2a:ab:1c:ab:c5:
                    b6:45:f3:05:c8:cf:e9:d6:47:53:45:33:59:74:29:
                    ee:98:0b:32:91:f9:0d:74:ee:51:12:20:a8:17:f7:
                    e4:11:d2:2c:d3:f0:44:62:2b:3d:fb:a2:5c:7e:fb:
                    03:b1:de:7e:da:12:5f:87:fe:11:1f:6a:56:5e:24:
                    78:c9:76:59:80:61:5d:8a:2d:2c:b0:b8:c7:06:5b:
                    27:22:44:20:0f:39:59:8f:91:4a:56:0a:d2:1f:da:
                    c4:e1:a6:9b:f8:25:ce:53:33:7d:2f:96:2c:42:ec:
                    1f:d3:5a:2f:58:16:d6:2f:03:db:5c:c5:5a:e7:e5:
                    ae:20:24:ce:2c:33:3b:7b:6e:b7:ec:72:ad:a0:16:
                    79:71:68:45:a5:b6:76:47:5d:0d:88:5b:f3:cb:3d:
                    45:31:69:a1:42:77:ac:e0:1c:b1:14:d8:74:2d:a5:
                    08:f6:37:37:bc:b8:51:70:97:9d:14:4b:fb:47:c1:
                    4d:48:37:4c:55:aa:16:b9:26:41:03:3b:ce:56:54:
                    69:ed:7e:27:6f:e4:e7:c6:60:ac:9f:e6:3a:1b:b0:
                    d7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FA:80:E3:4D:7E:A1:CD:44:E3:7F:3E:B5:98:F5:1F:71:6B:F5:9E
            X509v3 Authority Key Identifier:
                keyid:FB:F2:AD:37:83:A3:C9:6E:26:52:48:1F:7A:77:CF:C5:BE:77:92:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e223bda5-1f94-4319-b448-83db71861695/1/FBF2AD3783A3C96E2652481F7A77CFC5BE779213.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/FBF2AD3783A3C96E2652481F7A77CFC5BE779213.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e223bda5-1f94-4319-b448-83db71861695/1/326131333a646638303a37313a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:71::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:2d:d8:06:cf:66:ca:9c:23:21:a2:38:90:29:4f:36:4b:05:
         13:b9:eb:35:47:ff:1d:73:cd:ac:77:ac:47:6d:30:da:ad:07:
         08:32:a8:75:8d:b8:36:41:3c:43:b8:b4:c5:db:bb:b5:eb:3c:
         e8:0a:34:04:f0:03:48:33:41:48:b1:dd:b1:47:dc:ab:5f:cd:
         07:f3:47:1a:67:b5:98:48:4d:96:36:c3:95:b5:60:d7:11:ca:
         1c:be:97:f7:74:ad:c9:cd:78:52:f1:a0:31:de:98:d8:84:24:
         8c:65:73:f8:a5:73:f9:91:6f:b2:8e:e4:a2:5d:ed:70:21:b0:
         9b:4d:50:26:9a:f9:61:ea:5b:b5:67:d7:9d:97:01:d6:a3:09:
         a0:83:d2:05:ba:37:19:43:2e:f7:9d:48:70:81:e4:81:25:38:
         8a:e5:a5:99:41:90:12:de:99:0c:9e:8c:5c:7d:6f:b5:6c:b9:
         df:ab:ac:54:54:98:ed:68:43:b0:de:aa:82:97:4b:f7:ac:91:
         cc:d7:6f:3e:f5:db:8d:bf:94:19:04:bd:5d:d6:b2:37:f4:b0:
         cb:35:70:9f:04:2c:85:c1:ba:4a:ec:00:5b:b1:aa:cc:f5:9f:
         c8:98:10:3d:69:25:38:cc:d4:da:7b:46:4b:84:4b:07:50:fd:
         37:f8:4c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----