Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7b57da9-ce2d-410c-8898-b096f7e90f50/0/326131333a646638343a323030323a3a2f34382d3438203d3e20323136333630.roa
File:                     326131333a646638343a323030323a3a2f34382d3438203d3e20323136333630.roa (raw, json)
Hash identifier:          oWYiLbx/tpY1I1nabm0U4DmWq6aE7fGAOUakyiW0Rg0=
Subject key identifier:   92:51:12:B4:BC:2F:3F:94:82:C8:65:82:66:57:E1:42:C5:B2:26:14
Certificate issuer:       /CN=C733D4ED636DF1253237FE26C90A8F298B550237
Certificate serial:       4E4E45C0FDE3A1C25F5DF32CBBBFB1DBF5487277
Authority key identifier: C7:33:D4:ED:63:6D:F1:25:32:37:FE:26:C9:0A:8F:29:8B:55:02:37
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/C733D4ED636DF1253237FE26C90A8F298B550237.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7b57da9-ce2d-410c-8898-b096f7e90f50/0/326131333a646638343a323030323a3a2f34382d3438203d3e20323136333630.roa
Signing time:             Mon 18 Sep 2023 20:42:35 +0000
ROA not before:           Mon 18 Sep 2023 20:37:35 +0000
ROA not after:            Mon 16 Sep 2024 20:42:35 +0000
asID:                     216360
IP address blocks:        2a13:df84:2002::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:4e:45:c0:fd:e3:a1:c2:5f:5d:f3:2c:bb:bf:b1:db:f5:48:72:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C733D4ED636DF1253237FE26C90A8F298B550237
        Validity
            Not Before: Sep 18 20:37:35 2023 GMT
            Not After : Sep 16 20:42:35 2024 GMT
        Subject: CN=925112B4BC2F3F9482C865826657E142C5B22614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e0:03:9d:fd:e0:1e:f1:60:a9:1c:c9:95:35:
                    2e:37:46:7d:48:96:87:d6:4d:86:fa:0d:26:89:bd:
                    f3:6f:c5:6c:ab:a3:8f:b2:73:d4:e5:5d:92:8a:a0:
                    fa:df:80:fd:2e:84:74:0d:54:2b:6a:32:df:5f:f5:
                    d1:4a:dc:6f:00:5f:1e:73:dd:13:c2:6d:c5:56:03:
                    5a:01:3f:7e:af:7a:f4:ee:69:02:40:d5:f9:49:b9:
                    70:86:86:28:b0:e7:ec:2e:35:10:db:bd:97:dc:97:
                    fa:27:97:46:9c:7e:d4:80:71:2d:af:ec:a4:cc:e4:
                    7d:6b:11:1c:e2:18:2d:7a:35:81:cb:f1:d9:c7:89:
                    39:99:de:87:8d:49:c4:64:65:3f:d3:b9:40:69:64:
                    a1:14:c0:88:19:95:1a:9a:4d:54:1d:eb:e7:7f:87:
                    13:15:48:53:86:0e:37:fa:8a:4c:ff:c7:5f:f2:00:
                    9e:d6:f1:97:bb:0c:2a:5c:de:90:d9:0f:50:82:fc:
                    c7:a7:89:ad:c0:d1:78:bd:8e:5a:e3:8e:d4:f1:e6:
                    53:11:88:bd:60:be:26:09:19:d6:5d:64:f2:a3:0c:
                    44:e8:a2:76:73:ff:15:7d:14:e0:ca:a9:2b:b9:ec:
                    da:63:60:f2:83:cc:df:34:9f:bd:bd:bc:88:4c:95:
                    47:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:51:12:B4:BC:2F:3F:94:82:C8:65:82:66:57:E1:42:C5:B2:26:14
            X509v3 Authority Key Identifier:
                keyid:C7:33:D4:ED:63:6D:F1:25:32:37:FE:26:C9:0A:8F:29:8B:55:02:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7b57da9-ce2d-410c-8898-b096f7e90f50/0/C733D4ED636DF1253237FE26C90A8F298B550237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/C733D4ED636DF1253237FE26C90A8F298B550237.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7b57da9-ce2d-410c-8898-b096f7e90f50/0/326131333a646638343a323030323a3a2f34382d3438203d3e20323136333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df84:2002::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:f1:35:bd:82:a7:cb:6f:4c:6e:af:fa:35:5f:26:e3:53:53:
         2c:d8:60:0c:31:8a:ff:a4:47:eb:2a:fc:1e:3a:e2:7e:bc:f4:
         44:0e:d0:72:19:ac:5a:aa:a4:43:d8:50:08:38:6c:20:0a:0d:
         ac:8c:9a:8e:c6:d5:9a:bd:24:14:11:db:0b:97:89:2d:25:a1:
         f0:de:a9:b8:05:de:22:88:3c:2b:7c:e5:a9:c2:55:ae:33:9d:
         83:15:af:60:3c:fe:c1:ea:69:cc:a3:60:41:12:ed:09:ef:6a:
         72:ad:3e:ef:5c:51:ed:36:38:35:20:79:7a:cf:13:f4:05:c2:
         c5:21:a5:9f:57:0e:19:52:4f:2c:92:48:8d:b2:7a:b6:21:43:
         79:e9:bd:d1:a8:2a:8f:b0:af:ed:2d:06:5b:c1:4b:b9:3b:16:
         64:c4:f0:b5:a2:53:21:71:af:61:2a:f2:fe:8c:e0:05:c4:dc:
         36:6e:ca:30:f1:ed:9a:1e:a5:5b:d3:09:1b:13:6c:d9:26:bb:
         29:b4:f2:32:dd:29:bc:ed:19:68:7f:6b:71:4d:8b:0f:4d:a6:
         2f:5d:f1:80:e5:17:e6:59:51:66:93:da:93:ae:c7:4a:ef:f7:
         0c:24:9f:2c:de:53:f8:c5:ae:90:d7:7b:1d:e1:0b:8d:f7:77:
         36:bb:db:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----