Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7b57da9-ce2d-410c-8898-b096f7e90f50/0/326131333a646638343a313a3a2f34382d3438203d3e203630363339.roa
File:                     326131333a646638343a313a3a2f34382d3438203d3e203630363339.roa (raw, json)
Hash identifier:          q5uqcUyFzKmCTz6jccQM1wTFXDtluwNLcf8yEF58iGk=
Subject key identifier:   A2:36:B4:D7:06:D5:52:2D:3F:DC:0F:1A:55:58:D7:84:86:32:C6:23
Certificate issuer:       /CN=C733D4ED636DF1253237FE26C90A8F298B550237
Certificate serial:       14179297C3D0E9D76AC38ADB98F4D6B8C2A413C0
Authority key identifier: C7:33:D4:ED:63:6D:F1:25:32:37:FE:26:C9:0A:8F:29:8B:55:02:37
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/C733D4ED636DF1253237FE26C90A8F298B550237.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7b57da9-ce2d-410c-8898-b096f7e90f50/0/326131333a646638343a313a3a2f34382d3438203d3e203630363339.roa
Signing time:             Sun 03 Sep 2023 09:09:46 +0000
ROA not before:           Sun 03 Sep 2023 09:04:46 +0000
ROA not after:            Sun 01 Sep 2024 09:09:46 +0000
asID:                     60639
IP address blocks:        2a13:df84:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:17:92:97:c3:d0:e9:d7:6a:c3:8a:db:98:f4:d6:b8:c2:a4:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C733D4ED636DF1253237FE26C90A8F298B550237
        Validity
            Not Before: Sep  3 09:04:46 2023 GMT
            Not After : Sep  1 09:09:46 2024 GMT
        Subject: CN=A236B4D706D5522D3FDC0F1A5558D7848632C623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:da:95:93:36:ca:04:a6:04:39:5d:25:5a:de:
                    b2:86:1c:c5:21:ef:dd:d7:46:ac:67:9d:eb:1f:96:
                    d7:75:7f:1f:b7:7a:00:9a:18:11:43:02:c0:09:84:
                    23:d2:26:78:35:f3:bf:03:9c:ba:63:ae:85:a4:f4:
                    ab:e1:01:3d:0c:1a:13:4d:89:74:dd:26:cd:fb:fe:
                    69:66:ec:ac:3b:6d:7c:4b:e6:17:4f:30:1e:05:fc:
                    0c:66:c8:21:fa:fe:fb:d9:f1:7c:42:52:60:07:4f:
                    a0:98:6a:d2:63:41:27:fb:14:68:c1:6b:9b:d5:ca:
                    78:ec:af:22:80:30:cb:f2:d0:57:95:dd:b8:b6:7d:
                    e8:ca:07:c3:47:5c:4c:8d:cf:ca:1e:be:0f:d5:e0:
                    7a:6c:0d:4e:8c:18:50:c0:59:30:e1:25:78:c4:38:
                    e2:27:5c:37:f7:d2:7d:9d:48:38:b4:46:01:3e:36:
                    f1:5d:32:7a:e6:95:17:23:b6:3b:82:4f:f7:a0:f6:
                    a7:f3:8a:2c:23:9d:00:91:8d:94:f8:b5:d3:70:6f:
                    43:82:f9:f1:4f:a3:6f:f3:26:a0:c6:61:36:d1:ed:
                    ff:cc:31:b3:bc:8c:aa:2b:6c:e4:1e:3e:ea:3d:9b:
                    f5:0d:58:2f:50:dc:5c:da:49:65:9a:e8:2a:07:14:
                    1d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:36:B4:D7:06:D5:52:2D:3F:DC:0F:1A:55:58:D7:84:86:32:C6:23
            X509v3 Authority Key Identifier:
                keyid:C7:33:D4:ED:63:6D:F1:25:32:37:FE:26:C9:0A:8F:29:8B:55:02:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7b57da9-ce2d-410c-8898-b096f7e90f50/0/C733D4ED636DF1253237FE26C90A8F298B550237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/C733D4ED636DF1253237FE26C90A8F298B550237.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7b57da9-ce2d-410c-8898-b096f7e90f50/0/326131333a646638343a313a3a2f34382d3438203d3e203630363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df84:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:40:e3:58:6d:b4:6e:72:5f:44:21:20:3a:84:12:a4:2f:55:
         d6:a7:be:2c:06:08:49:92:25:3e:13:0b:b8:2a:9d:e7:33:af:
         24:f6:df:40:e4:33:4a:60:b1:50:db:40:fc:c5:5f:02:2a:82:
         bf:ce:3e:8d:27:35:c4:dd:5a:7c:bd:36:f2:ee:1c:92:fa:54:
         d7:57:2f:bc:42:2d:fd:97:f1:b4:42:95:40:60:24:a9:53:b4:
         a6:80:77:62:14:ae:be:1e:bc:93:c7:7d:f4:6a:7b:67:87:90:
         e5:60:72:0a:d7:d8:42:91:93:4f:e3:81:6b:d8:8c:73:16:40:
         80:dd:21:eb:b2:21:48:ce:a0:62:1d:9d:a5:94:ea:73:9d:f9:
         ff:00:29:b3:ac:0e:5a:80:68:f2:ed:b2:17:b8:52:0a:65:30:
         b3:c6:3a:42:7b:25:fe:7e:eb:c4:73:ed:41:46:49:dd:0f:bc:
         f0:99:0b:96:73:7c:1d:8d:b9:61:d6:72:56:74:36:f2:2b:36:
         8f:a9:5b:e6:71:c1:1a:9e:05:a1:49:69:45:d5:39:a7:d4:06:
         ba:c0:0d:e9:fa:e6:9c:ed:36:42:b3:9c:04:6f:2a:37:32:eb:
         5f:9a:df:19:1c:85:f0:04:18:20:73:b0:40:8f:71:26:8b:e6:
         ac:c8:49:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----