Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a313130303a3a2f34302d3430203d3e20323034343734.roa
File:                     326131343a343438373a313130303a3a2f34302d3430203d3e20323034343734.roa (raw, json)
Hash identifier:          XVL4irlMhPFFgX7bmu4anlh/24Y18U6fss4ZthgNh8I=
Subject key identifier:   3C:99:C5:D6:9B:E7:99:E8:94:C1:38:97:72:E9:7C:24:21:EA:E2:DA
Certificate issuer:       /CN=B96B8D4992D9B467CE859406542D783AE5B5427B
Certificate serial:       6DBB155A5C209CD31B1A8FB64984E426D143DA00
Authority key identifier: B9:6B:8D:49:92:D9:B4:67:CE:85:94:06:54:2D:78:3A:E5:B5:42:7B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B96B8D4992D9B467CE859406542D783AE5B5427B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a313130303a3a2f34302d3430203d3e20323034343734.roa
Signing time:             Thu 11 Jan 2024 08:48:42 +0000
ROA not before:           Thu 11 Jan 2024 08:43:42 +0000
ROA not after:            Thu 09 Jan 2025 08:48:42 +0000
asID:                     204474
IP address blocks:        2a14:4487:1100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:bb:15:5a:5c:20:9c:d3:1b:1a:8f:b6:49:84:e4:26:d1:43:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96B8D4992D9B467CE859406542D783AE5B5427B
        Validity
            Not Before: Jan 11 08:43:42 2024 GMT
            Not After : Jan  9 08:48:42 2025 GMT
        Subject: CN=3C99C5D69BE799E894C1389772E97C2421EAE2DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8b:f5:28:ce:7c:8d:17:62:05:5c:50:b4:40:
                    9f:5c:c5:89:92:8b:47:a5:15:5a:9f:4f:74:9a:68:
                    fc:61:95:36:47:f9:71:dc:fd:a0:19:5e:14:ef:bb:
                    bc:6d:67:75:c5:b4:61:7c:25:26:3e:58:40:ff:a1:
                    87:68:52:10:c6:4f:2a:21:71:44:f3:38:4a:0d:b3:
                    1b:c8:2f:cd:ab:fb:dd:5d:d9:23:32:e1:d1:9b:a1:
                    14:74:af:0a:e3:2d:76:62:6f:c4:1a:a3:3f:0a:91:
                    36:ed:76:56:4f:18:4b:cb:8a:9b:a7:c9:81:84:e7:
                    02:a6:91:c7:be:35:b3:1f:20:20:3b:72:c9:25:6e:
                    2d:45:81:e6:81:d8:4a:a3:46:22:35:1f:a8:4f:72:
                    37:b6:a9:da:69:76:80:20:e5:8f:dd:2d:02:94:08:
                    1d:35:08:ff:a1:df:95:bd:86:df:00:d3:9a:40:84:
                    d3:75:a3:59:c0:e2:4c:eb:2c:93:39:19:2e:88:8c:
                    eb:0e:87:a3:4c:2a:56:e7:d6:bf:18:b5:88:6b:9e:
                    97:20:dc:12:4d:ba:e5:fd:9f:90:58:d4:e0:2c:b2:
                    eb:a4:a3:9a:31:08:24:8b:70:b6:e3:0a:c4:05:7c:
                    85:12:18:64:fb:a9:59:0c:a2:4d:99:12:82:16:a8:
                    b0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:99:C5:D6:9B:E7:99:E8:94:C1:38:97:72:E9:7C:24:21:EA:E2:DA
            X509v3 Authority Key Identifier:
                keyid:B9:6B:8D:49:92:D9:B4:67:CE:85:94:06:54:2D:78:3A:E5:B5:42:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/B96B8D4992D9B467CE859406542D783AE5B5427B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B96B8D4992D9B467CE859406542D783AE5B5427B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a313130303a3a2f34302d3430203d3e20323034343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:4487:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         94:c7:e9:e0:54:e6:a3:4a:22:30:11:dc:94:e2:60:dc:d0:60:
         11:3d:8e:0b:43:5d:3f:d5:02:01:61:fd:6a:66:f7:c6:4f:50:
         07:6e:0b:d1:9a:85:0b:64:58:f4:a4:ec:65:16:52:51:dc:b1:
         df:09:4c:ea:01:bf:19:c6:56:3e:9d:38:a6:b3:24:7f:bf:73:
         c0:b9:29:98:ed:e8:4b:3b:d6:e9:a7:b3:e8:67:41:af:a3:a9:
         8d:f2:36:d5:3e:74:0e:01:91:ac:54:30:27:1e:46:86:65:2d:
         6a:62:0a:00:f4:e3:ce:d3:6d:cf:3a:1f:9c:54:2e:10:3a:1d:
         a6:6c:51:80:20:56:1f:7b:78:56:c6:58:76:9c:4d:5c:53:7b:
         68:2b:aa:3a:73:9b:49:2c:e6:c8:d1:3c:a3:bb:02:7f:3a:e3:
         d6:0d:24:40:2a:89:ff:58:1b:13:69:8a:1c:ca:0e:5c:4a:43:
         18:59:59:f2:57:64:70:d6:9d:6f:7b:3c:a2:ee:4a:01:c4:91:
         24:bf:9c:f6:17:b8:0a:4a:49:fa:f0:cc:32:85:70:07:5a:ed:
         47:58:24:9e:fc:6d:11:96:09:b4:83:6f:08:f9:3c:cb:83:ab:
         b2:ca:c2:6e:42:a2:84:b5:c8:09:6f:37:12:42:17:7e:c5:78:
         9f:4e:48:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----