Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438333a3a2f33322d3438203d3e203438323638.roa
File:                     326131343a343438333a3a2f33322d3438203d3e203438323638.roa (raw, json)
Hash identifier:          9Tc2t1n0xk/sCBdPeG7dDFLwdK3aXChZWQsXaEhrZK0=
Subject key identifier:   9E:07:EC:53:4E:30:BA:42:65:29:1D:3D:29:BF:C3:D4:AC:36:6E:12
Certificate issuer:       /CN=B96B8D4992D9B467CE859406542D783AE5B5427B
Certificate serial:       6DA5842ECFEC306B7E8D88BFA6BB80A327FFDF14
Authority key identifier: B9:6B:8D:49:92:D9:B4:67:CE:85:94:06:54:2D:78:3A:E5:B5:42:7B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B96B8D4992D9B467CE859406542D783AE5B5427B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438333a3a2f33322d3438203d3e203438323638.roa
Signing time:             Sun 14 Jan 2024 23:17:12 +0000
ROA not before:           Sun 14 Jan 2024 23:12:12 +0000
ROA not after:            Sun 12 Jan 2025 23:17:12 +0000
asID:                     48268
IP address blocks:        2a14:4483::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a5:84:2e:cf:ec:30:6b:7e:8d:88:bf:a6:bb:80:a3:27:ff:df:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96B8D4992D9B467CE859406542D783AE5B5427B
        Validity
            Not Before: Jan 14 23:12:12 2024 GMT
            Not After : Jan 12 23:17:12 2025 GMT
        Subject: CN=9E07EC534E30BA4265291D3D29BFC3D4AC366E12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9f:66:77:ed:42:ef:de:45:6a:4c:d9:2b:71:
                    ef:68:cf:f1:a5:67:fa:e4:5e:be:74:cb:99:50:e1:
                    20:06:23:e1:d7:f9:67:ae:ca:78:47:07:6e:c9:59:
                    01:bf:ed:90:1e:8a:29:a1:e3:42:5a:1f:0a:c0:a6:
                    7f:53:97:92:f4:67:0a:63:24:c5:b9:af:80:f0:69:
                    db:49:75:45:c7:c4:13:5a:5f:27:af:39:62:3b:27:
                    2d:b4:29:30:72:36:a7:d6:c6:e7:a8:75:51:70:c1:
                    4f:0a:08:b3:a1:ca:f7:0e:31:6e:2c:07:ab:1c:c2:
                    04:6f:15:7f:a3:f8:b5:3a:67:ab:e2:a2:35:8f:d5:
                    db:79:f3:76:c2:68:3e:8e:51:e5:ea:49:6f:35:bb:
                    f8:86:46:08:1f:79:1c:24:53:0b:98:7c:fe:18:1c:
                    79:de:97:ff:d0:92:56:91:2a:03:63:38:f3:ff:a7:
                    56:94:bc:b9:11:2d:60:72:72:a2:50:ae:66:fb:f2:
                    96:45:5b:59:56:0e:6c:93:66:6e:09:d3:6d:9a:d7:
                    a4:24:e0:60:48:0c:01:19:7f:26:1a:75:57:cc:27:
                    3b:b1:2f:13:47:eb:e2:1d:a6:70:86:74:79:fb:69:
                    a1:0a:a1:df:71:a6:e8:0b:56:62:c7:80:76:8e:ed:
                    3f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:07:EC:53:4E:30:BA:42:65:29:1D:3D:29:BF:C3:D4:AC:36:6E:12
            X509v3 Authority Key Identifier:
                keyid:B9:6B:8D:49:92:D9:B4:67:CE:85:94:06:54:2D:78:3A:E5:B5:42:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/B96B8D4992D9B467CE859406542D783AE5B5427B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B96B8D4992D9B467CE859406542D783AE5B5427B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438333a3a2f33322d3438203d3e203438323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:4483::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:7a:1d:cb:88:09:57:96:7b:5e:e9:e5:d8:6c:08:a6:4e:51:
         19:3a:03:45:a6:88:8c:a7:e0:70:8e:d0:d6:72:fc:a0:fa:9a:
         66:25:ac:36:55:a9:56:49:04:69:ad:6a:3b:e8:20:1c:c8:07:
         e5:ca:ba:be:7c:74:d1:f1:55:15:4d:9b:9e:6a:65:46:02:4f:
         48:b7:72:4e:55:59:aa:3c:b7:21:7d:92:a8:1b:f2:cd:e4:78:
         36:cf:12:33:88:87:b6:0c:1f:ef:e3:b9:4b:17:de:b0:62:be:
         e5:7e:d0:b4:e0:3e:69:d8:27:71:d8:1a:51:f3:78:99:e4:ac:
         92:06:f2:25:21:0c:0a:08:9d:a3:83:24:9d:85:7e:2f:d8:25:
         71:51:6a:aa:d0:13:ad:ba:0f:bd:bd:e6:28:1d:86:70:d4:9d:
         20:ee:c4:5d:31:07:ec:75:bc:bf:64:0e:df:2b:18:3d:97:90:
         02:0f:24:61:9b:fa:5f:ef:34:6c:c1:f6:e9:13:37:f7:ae:e3:
         fd:9e:9d:f5:6d:da:0a:d1:a3:93:3c:54:ec:80:cb:a5:be:35:
         fd:03:f1:2a:e2:ac:ae:0c:13:d1:8f:1e:5c:68:5e:c9:53:d1:
         48:ec:23:08:be:03:38:ca:e2:86:07:f4:be:1e:ef:23:b3:e5:
         39:00:16:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----