Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438343a3a2f33322d3332203d3e203438353831.roa
File:                     326131343a343438343a3a2f33322d3332203d3e203438353831.roa (raw, json)
Hash identifier:          OikXISLlGiFmmq300+7EJLll9xoAGy1HkMZuDxFmTHk=
Subject key identifier:   6C:6B:44:66:E0:AF:56:28:5E:CB:7E:09:11:BC:E3:8F:BB:09:18:3B
Certificate issuer:       /CN=B96B8D4992D9B467CE859406542D783AE5B5427B
Certificate serial:       4D795EB79170C4AF94AEF9BD984D9C1F3B2AE803
Authority key identifier: B9:6B:8D:49:92:D9:B4:67:CE:85:94:06:54:2D:78:3A:E5:B5:42:7B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B96B8D4992D9B467CE859406542D783AE5B5427B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438343a3a2f33322d3332203d3e203438353831.roa
Signing time:             Thu 11 Jan 2024 09:24:17 +0000
ROA not before:           Thu 11 Jan 2024 09:19:17 +0000
ROA not after:            Thu 09 Jan 2025 09:24:17 +0000
asID:                     48581
IP address blocks:        2a14:4484::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:79:5e:b7:91:70:c4:af:94:ae:f9:bd:98:4d:9c:1f:3b:2a:e8:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96B8D4992D9B467CE859406542D783AE5B5427B
        Validity
            Not Before: Jan 11 09:19:17 2024 GMT
            Not After : Jan  9 09:24:17 2025 GMT
        Subject: CN=6C6B4466E0AF56285ECB7E0911BCE38FBB09183B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:50:db:70:c2:bd:6a:42:f4:88:f2:32:8a:4e:
                    ac:f4:e6:95:69:80:6d:2c:b9:a9:6e:74:c7:42:28:
                    05:d5:ab:83:91:e0:8c:38:e8:d6:d3:c8:3a:58:3f:
                    32:9b:16:69:49:5b:91:00:e6:39:aa:36:8c:1f:d9:
                    fe:0a:c5:4d:22:fd:a9:a7:51:2a:87:98:ec:7b:92:
                    c9:fa:26:85:b5:56:40:02:12:5e:33:d0:a0:18:f8:
                    67:ac:bb:22:84:ff:88:c8:37:99:76:e8:d8:6a:05:
                    ed:f4:a6:48:f2:56:d7:34:b6:91:a8:1e:33:3c:f3:
                    53:04:ea:69:db:ce:25:69:d1:90:12:85:3d:61:20:
                    35:8f:34:63:5c:17:29:07:7b:4b:52:20:9a:2f:ca:
                    01:3b:ef:d1:c7:28:e4:2a:aa:97:72:c7:57:f3:ed:
                    4c:5b:15:b8:2e:f3:47:29:df:d7:54:ec:96:3b:fc:
                    b7:98:42:19:a2:47:2f:04:b3:ba:41:71:58:8e:99:
                    85:56:e5:b2:7e:8d:37:7e:9a:11:78:62:2c:b1:ac:
                    86:fa:6a:eb:b2:86:a8:85:6f:62:39:db:80:f0:2b:
                    86:eb:f0:1c:03:5e:49:dd:66:78:f4:04:7e:16:24:
                    54:63:a5:6c:76:e4:d3:4f:5c:a6:2a:c3:e1:ea:14:
                    59:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6B:44:66:E0:AF:56:28:5E:CB:7E:09:11:BC:E3:8F:BB:09:18:3B
            X509v3 Authority Key Identifier:
                keyid:B9:6B:8D:49:92:D9:B4:67:CE:85:94:06:54:2D:78:3A:E5:B5:42:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/B96B8D4992D9B467CE859406542D783AE5B5427B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B96B8D4992D9B467CE859406542D783AE5B5427B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438343a3a2f33322d3332203d3e203438353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:4484::/32

    Signature Algorithm: sha256WithRSAEncryption
         cf:50:e1:12:64:52:8b:eb:44:a3:7f:76:f8:c8:f1:38:0b:e3:
         f3:19:f5:bc:a1:34:2b:ea:bc:f4:0f:c8:7a:68:6c:dc:16:c4:
         8a:52:db:cd:df:2b:00:eb:5d:99:8f:05:f9:06:2e:e7:fe:7c:
         02:2e:2a:bc:36:3c:f1:a2:09:5a:0a:4f:13:0d:c9:b6:30:99:
         96:cc:9a:c0:a8:48:0d:ca:f7:6a:e8:58:70:4e:9a:98:91:d9:
         b9:e4:4e:4f:b3:c8:87:7c:b2:ad:6c:bd:81:23:2c:dd:d3:59:
         0a:39:b5:77:95:27:27:43:37:a2:d1:88:9b:e6:ab:38:8e:f1:
         0d:9a:dc:b6:fd:c5:ee:a6:e5:81:e1:29:15:eb:7a:14:ea:2f:
         dd:22:ff:1d:b1:d3:e8:9d:b6:c2:2a:b7:5e:21:36:6f:ba:a9:
         86:74:20:bd:b6:e8:81:6f:3f:f6:75:13:a6:10:c1:69:6f:99:
         ea:6a:67:c2:5e:e6:32:71:7e:21:1c:f1:e3:c1:3d:53:19:a5:
         81:24:ac:14:da:45:a9:7e:55:d4:e0:3d:20:a0:38:21:e2:e9:
         49:f5:15:16:09:60:c6:ca:6b:e4:81:c5:ca:0b:b0:15:7a:97:
         e0:35:fd:f4:81:1a:0c:c7:ab:c4:84:b5:52:77:43:df:76:87:
         b8:fd:75:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----