Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7b57da9-ce2d-410c-8898-b096f7e90f50/0/326131333a646638343a376666643a3a2f34382d3438203d3e20323136333630.roa
File:                     326131333a646638343a376666643a3a2f34382d3438203d3e20323136333630.roa (raw, json)
Hash identifier:          wNWFaEMs0fnHhkxqzk7QTGN9EZEJRDyoQOt3zGfp7yI=
Subject key identifier:   B0:42:A1:AC:E3:68:B0:73:1A:D9:F1:76:E8:CD:3C:88:0A:6A:F3:5B
Certificate issuer:       /CN=C733D4ED636DF1253237FE26C90A8F298B550237
Certificate serial:       2F8C487DA98D0886276DBC9774A88305F7D88A34
Authority key identifier: C7:33:D4:ED:63:6D:F1:25:32:37:FE:26:C9:0A:8F:29:8B:55:02:37
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/C733D4ED636DF1253237FE26C90A8F298B550237.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7b57da9-ce2d-410c-8898-b096f7e90f50/0/326131333a646638343a376666643a3a2f34382d3438203d3e20323136333630.roa
Signing time:             Sun 22 Oct 2023 01:53:28 +0000
ROA not before:           Sun 22 Oct 2023 01:48:28 +0000
ROA not after:            Sun 20 Oct 2024 01:53:28 +0000
asID:                     216360
IP address blocks:        2a13:df84:7ffd::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:8c:48:7d:a9:8d:08:86:27:6d:bc:97:74:a8:83:05:f7:d8:8a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C733D4ED636DF1253237FE26C90A8F298B550237
        Validity
            Not Before: Oct 22 01:48:28 2023 GMT
            Not After : Oct 20 01:53:28 2024 GMT
        Subject: CN=B042A1ACE368B0731AD9F176E8CD3C880A6AF35B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:38:33:8a:dc:6a:7a:a3:e8:7a:c8:4d:2c:9b:
                    79:02:87:43:bf:0c:4e:e1:bb:24:07:74:59:9b:94:
                    8e:0e:ce:51:70:49:eb:94:a0:15:e0:be:bd:3f:7d:
                    5e:0a:75:e3:ac:cd:2a:42:35:bd:12:70:c0:54:6c:
                    ea:48:b5:4d:7a:22:be:f4:a7:e5:ee:21:20:c8:bb:
                    7f:f1:fe:d0:f5:88:a0:33:c6:0d:5e:3a:76:df:fb:
                    93:84:1e:91:19:ca:be:de:c7:7e:bf:c4:a0:75:cc:
                    7b:68:29:6c:d2:bb:a7:11:34:c6:cc:2c:e3:a3:24:
                    64:40:cf:63:ee:72:c6:95:cc:35:40:69:3a:e2:df:
                    ea:11:70:a6:d2:46:ce:a2:72:53:a6:af:f2:15:aa:
                    89:82:2f:9d:4d:4a:58:10:aa:3a:fa:5f:80:6b:fb:
                    35:29:86:bd:3f:d0:0e:dd:ed:eb:85:7a:32:a7:9f:
                    cc:aa:8e:e7:da:03:f7:83:1c:a5:d8:91:3a:aa:8c:
                    70:73:51:f3:53:0e:1b:97:c8:3c:c1:82:cd:bf:18:
                    0e:d1:ff:9d:97:36:82:48:9c:86:70:dd:33:20:1b:
                    73:50:40:2c:1a:fa:ef:d0:e5:f3:4e:6e:92:fa:4b:
                    6c:ed:77:c4:34:50:ed:ab:c2:8d:f1:54:49:62:5f:
                    97:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:42:A1:AC:E3:68:B0:73:1A:D9:F1:76:E8:CD:3C:88:0A:6A:F3:5B
            X509v3 Authority Key Identifier:
                keyid:C7:33:D4:ED:63:6D:F1:25:32:37:FE:26:C9:0A:8F:29:8B:55:02:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7b57da9-ce2d-410c-8898-b096f7e90f50/0/C733D4ED636DF1253237FE26C90A8F298B550237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/C733D4ED636DF1253237FE26C90A8F298B550237.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7b57da9-ce2d-410c-8898-b096f7e90f50/0/326131333a646638343a376666643a3a2f34382d3438203d3e20323136333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df84:7ffd::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:4d:c0:89:cf:ee:3d:12:e9:ae:30:c4:b9:67:cd:f1:7e:74:
         02:7c:e6:89:0a:b5:a8:e4:ae:d6:27:0a:61:95:a0:27:dd:d6:
         84:47:52:54:e7:d9:55:c3:5f:f1:28:d8:16:f3:31:66:dd:c5:
         cd:23:50:00:e1:3b:42:96:c2:2a:da:98:ef:ba:07:d1:91:9b:
         37:d6:92:68:b8:b2:03:d9:52:ac:d3:ab:0d:32:b7:d6:df:61:
         d9:ec:5f:2e:b2:0e:97:e4:99:7c:81:5d:7d:ea:09:ed:08:42:
         97:a7:e7:42:7b:92:1b:6e:4e:15:50:ee:59:3c:a6:f0:4a:69:
         ba:98:63:e5:b6:a9:f5:f5:53:6e:8a:d7:f5:ee:f9:8d:ba:fb:
         db:15:32:b5:81:1c:51:c8:36:d0:95:8d:98:a7:d7:aa:4f:72:
         04:36:64:de:14:24:e6:3c:c3:2c:6c:47:89:16:26:a4:49:c8:
         3d:69:24:3e:60:53:63:d3:47:8c:b5:d7:97:a2:a2:34:fb:92:
         be:5c:df:a3:ba:a1:88:df:4a:6a:80:32:56:c5:91:54:a0:40:
         6a:c5:38:9e:87:16:34:93:19:ce:c2:58:63:3c:21:5e:3f:3e:
         a5:c0:00:34:08:84:7e:87:16:6f:25:ed:58:e0:32:c8:91:76:
         fa:10:93:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----