Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7b57da9-ce2d-410c-8898-b096f7e90f50/0/326131333a646638343a373030333a3a2f34382d3438203d3e20323033303639.roa
File:                     326131333a646638343a373030333a3a2f34382d3438203d3e20323033303639.roa (raw, json)
Hash identifier:          2ZkYR4SWeQukwJ/c7wcWOFdvz+kiFiOXN/RVJWPZA9s=
Subject key identifier:   39:01:E6:74:36:B0:56:B9:84:19:26:60:17:E2:E0:8A:50:D1:B2:1C
Certificate issuer:       /CN=C733D4ED636DF1253237FE26C90A8F298B550237
Certificate serial:       056DCB2E959B2B149B229C5AB8498F4B1DC4D3A3
Authority key identifier: C7:33:D4:ED:63:6D:F1:25:32:37:FE:26:C9:0A:8F:29:8B:55:02:37
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/C733D4ED636DF1253237FE26C90A8F298B550237.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7b57da9-ce2d-410c-8898-b096f7e90f50/0/326131333a646638343a373030333a3a2f34382d3438203d3e20323033303639.roa
Signing time:             Sun 22 Oct 2023 01:51:55 +0000
ROA not before:           Sun 22 Oct 2023 01:46:55 +0000
ROA not after:            Sun 20 Oct 2024 01:51:55 +0000
asID:                     203069
IP address blocks:        2a13:df84:7003::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:6d:cb:2e:95:9b:2b:14:9b:22:9c:5a:b8:49:8f:4b:1d:c4:d3:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C733D4ED636DF1253237FE26C90A8F298B550237
        Validity
            Not Before: Oct 22 01:46:55 2023 GMT
            Not After : Oct 20 01:51:55 2024 GMT
        Subject: CN=3901E67436B056B98419266017E2E08A50D1B21C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a4:1c:88:64:6d:14:2b:79:7d:9e:e3:f0:45:
                    23:aa:33:ad:62:a9:e0:b9:26:d7:50:83:49:59:c5:
                    97:e6:7c:0f:97:1d:3c:bd:e5:70:58:09:97:9f:27:
                    ce:88:48:4b:0d:90:79:98:ef:a1:72:87:2e:a1:35:
                    2f:d3:39:b2:47:a8:c7:04:0f:5e:e5:cd:42:6e:64:
                    e9:f3:3d:aa:fc:ca:a9:58:47:0b:7d:1f:a6:8b:48:
                    ac:64:69:01:ff:1d:a4:63:31:37:da:82:9a:8d:c8:
                    14:b6:55:c1:5b:81:ee:b2:65:2c:58:a1:27:53:a4:
                    82:1c:d6:fa:38:29:04:4f:24:da:a1:7d:3a:1b:fc:
                    5d:98:c0:11:ac:d5:67:bb:67:3a:5e:9a:cc:33:47:
                    94:03:25:28:22:1c:99:0b:1a:82:b0:78:b9:28:ca:
                    04:a8:d1:aa:15:49:8f:d2:95:b6:12:68:0a:04:09:
                    e7:f6:76:26:66:c0:d2:30:c4:4b:37:43:da:1d:84:
                    4d:37:a9:b4:6f:5f:d3:e8:a9:00:ed:e0:b8:ab:b3:
                    9a:ce:02:e5:26:51:d0:5d:a9:ea:2f:08:db:7c:dd:
                    93:a9:b0:d0:36:d9:9a:6d:77:81:00:b6:3c:ad:2b:
                    e3:df:46:6f:0f:60:1b:25:9a:ee:9c:f7:10:a6:bd:
                    9e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:01:E6:74:36:B0:56:B9:84:19:26:60:17:E2:E0:8A:50:D1:B2:1C
            X509v3 Authority Key Identifier:
                keyid:C7:33:D4:ED:63:6D:F1:25:32:37:FE:26:C9:0A:8F:29:8B:55:02:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7b57da9-ce2d-410c-8898-b096f7e90f50/0/C733D4ED636DF1253237FE26C90A8F298B550237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/C733D4ED636DF1253237FE26C90A8F298B550237.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7b57da9-ce2d-410c-8898-b096f7e90f50/0/326131333a646638343a373030333a3a2f34382d3438203d3e20323033303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df84:7003::/48

    Signature Algorithm: sha256WithRSAEncryption
         c7:81:41:bc:9b:f7:0d:a1:9b:60:67:5e:75:6e:fd:a2:68:b3:
         4d:13:1a:de:94:70:10:7c:44:db:ea:dc:f3:19:a3:7b:30:f1:
         18:55:4e:84:9a:c9:e8:96:c7:95:17:09:36:c2:cd:dc:68:18:
         94:79:42:e8:f2:02:be:c2:c2:e3:e7:79:bc:3d:fc:93:20:ee:
         f0:d4:b6:97:73:0b:70:4c:93:3d:14:78:ce:1d:04:2e:98:3c:
         ab:c3:30:ce:89:92:fb:fe:2b:83:22:b1:9d:ac:a6:dd:a7:cc:
         a2:de:21:ed:62:c9:80:80:3f:58:bd:68:33:3b:42:0c:fb:ee:
         35:4f:d9:f3:ec:bd:a3:4b:e0:82:d7:e3:1d:3a:67:f0:ba:17:
         54:d5:7e:4d:42:46:4a:d3:f0:f3:bb:99:43:09:d2:4e:f8:5c:
         8c:ae:07:f5:bc:a0:0d:ae:4f:a4:03:f8:0d:bc:6a:56:06:3d:
         6e:2c:1a:07:12:60:90:69:31:1a:9b:99:68:7b:0b:b7:aa:b5:
         f5:16:45:00:e6:9e:77:bf:95:ed:c6:4e:42:2e:3e:22:8e:a9:
         31:56:4f:de:10:36:f9:8f:7a:ff:03:7e:ca:b7:e5:0b:a1:6b:
         fe:14:74:05:a1:25:7f:26:a0:f5:6b:b4:f2:35:2a:81:78:b4:
         73:07:dd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----