Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f379202c-e970-43d7-85c2-0dac80b199c3/0/326131333a656634353a3a2f33322d3332203d3e20323136333938.roa
File:                     326131333a656634353a3a2f33322d3332203d3e20323136333938.roa (raw, json)
Hash identifier:          nQjtV45jZ2Up3nBBJeikcEdVLWeYDPXJaUcoqa/B15k=
Subject key identifier:   A6:9A:88:BC:44:51:A8:B2:0E:05:18:80:8C:FF:DA:88:32:E4:D1:1E
Certificate issuer:       /CN=de87352238d030dc2ab690bc1b25fe640745db3c
Certificate serial:       1BDD4A51E9BF699B01BB10F1BC53F833034E6245
Authority key identifier: DE:87:35:22:38:D0:30:DC:2A:B6:90:BC:1B:25:FE:64:07:45:DB:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3oc1IjjQMNwqtpC8GyX-ZAdF2zw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f379202c-e970-43d7-85c2-0dac80b199c3/0/326131333a656634353a3a2f33322d3332203d3e20323136333938.roa
Signing time:             Tue 26 Dec 2023 14:44:18 +0000
ROA not before:           Tue 26 Dec 2023 14:39:18 +0000
ROA not after:            Tue 24 Dec 2024 14:44:18 +0000
asID:                     216398
IP address blocks:        2a13:ef45::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:dd:4a:51:e9:bf:69:9b:01:bb:10:f1:bc:53:f8:33:03:4e:62:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de87352238d030dc2ab690bc1b25fe640745db3c
        Validity
            Not Before: Dec 26 14:39:18 2023 GMT
            Not After : Dec 24 14:44:18 2024 GMT
        Subject: CN=A69A88BC4451A8B20E0518808CFFDA8832E4D11E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:87:3c:cd:fc:a1:07:e7:e7:69:78:d7:bc:5a:
                    cb:10:c8:8d:16:32:38:f5:5a:bb:1c:ff:e1:4e:5e:
                    b0:ac:1d:5d:a7:38:ac:38:93:cd:77:94:ee:e4:b2:
                    be:f0:f0:6e:49:0b:fc:32:ab:38:9f:a1:63:cb:23:
                    52:6b:7e:ad:9e:7b:cc:75:16:0b:47:99:3d:75:83:
                    d2:5d:5a:79:25:c0:95:7b:b4:77:74:31:52:76:02:
                    a3:23:f2:2c:b8:5c:6e:62:ef:ad:d5:9a:08:d0:b2:
                    d0:d0:51:bf:78:6e:62:48:c6:bb:18:fd:c2:79:d3:
                    a3:c8:f7:df:88:c2:2c:cd:40:c3:5a:f9:36:bd:a7:
                    0c:c6:0a:12:4d:4b:a0:94:33:b7:dd:b1:b7:d6:f8:
                    76:e8:d3:57:09:01:fb:28:f5:81:e1:6c:4c:dd:a9:
                    50:ea:be:d5:bb:2d:c2:2e:3d:30:6e:61:ca:16:3a:
                    cb:ba:09:d1:6b:ed:5f:ac:67:e7:81:1c:4d:19:0a:
                    96:54:a0:f9:8b:70:db:0a:7a:2c:b7:9a:55:2d:d0:
                    87:7d:b8:c1:78:d0:18:7e:21:96:d8:f7:59:55:5d:
                    b3:fa:4b:ae:95:2e:e7:51:8e:51:5c:75:6e:46:36:
                    8e:af:0d:c4:32:3d:c9:f6:17:40:fd:20:f7:88:d1:
                    dc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9A:88:BC:44:51:A8:B2:0E:05:18:80:8C:FF:DA:88:32:E4:D1:1E
            X509v3 Authority Key Identifier:
                keyid:DE:87:35:22:38:D0:30:DC:2A:B6:90:BC:1B:25:FE:64:07:45:DB:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f379202c-e970-43d7-85c2-0dac80b199c3/0/DE87352238D030DC2AB690BC1B25FE640745DB3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oc1IjjQMNwqtpC8GyX-ZAdF2zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f379202c-e970-43d7-85c2-0dac80b199c3/0/326131333a656634353a3a2f33322d3332203d3e20323136333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ef45::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:17:9a:2f:ed:08:75:c3:a5:5b:cf:dc:45:32:c3:58:ce:ca:
         86:db:44:76:95:08:0a:8c:86:06:db:ee:41:d8:38:1e:91:b9:
         cb:1e:17:19:5e:d6:7f:0d:d7:bb:f0:c5:a6:6e:23:fc:da:b6:
         a5:99:69:7c:3b:c6:9d:28:c1:2b:5b:2a:78:a6:2e:7c:7c:35:
         75:12:12:95:7f:e4:27:6b:ea:f1:f7:b8:dc:b2:56:e9:50:45:
         8e:db:2d:9e:e4:93:56:82:3e:f2:ef:bc:74:f0:aa:25:68:12:
         27:ae:b2:bb:41:81:0d:7f:c2:50:77:39:5d:97:cf:5b:57:0a:
         f3:b3:8b:d8:57:47:65:cd:74:ea:a6:00:b1:5a:88:c3:40:fc:
         c4:ce:c4:eb:ea:34:a5:52:8e:d3:b4:de:6d:52:ef:70:4c:ff:
         ed:72:78:1e:ad:5a:10:7a:7b:34:f0:f8:a3:26:6c:4e:b4:22:
         44:82:8e:44:3a:40:67:d0:8b:d6:b9:7d:3b:e3:39:0e:17:a8:
         c9:02:d0:53:da:d1:a2:c2:af:69:e0:66:67:6b:65:c3:33:e8:
         b1:fd:ed:eb:a9:fd:d2:28:74:8b:b2:9a:6b:57:75:84:61:26:
         3d:d4:ee:e4:b4:e5:6c:3b:12:d6:e5:9c:b0:98:8e:dd:15:fa:
         56:15:63:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----