Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a313230303a3a2f34302d3430203d3e20323039323633.roa
File:                     326131343a343438373a313230303a3a2f34302d3430203d3e20323039323633.roa (raw, json)
Hash identifier:          BtnTD0AqEmQSgCMIvFObetVsRPiQnVtXkw3AGJkMKlc=
Subject key identifier:   7B:9A:7D:28:B8:FA:96:56:A7:A4:90:D9:D4:72:B6:A4:14:A7:5F:6A
Certificate issuer:       /CN=B96B8D4992D9B467CE859406542D783AE5B5427B
Certificate serial:       0FF1E91F44C6F01ADC361AB41220BE30B3CFDE8F
Authority key identifier: B9:6B:8D:49:92:D9:B4:67:CE:85:94:06:54:2D:78:3A:E5:B5:42:7B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B96B8D4992D9B467CE859406542D783AE5B5427B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a313230303a3a2f34302d3430203d3e20323039323633.roa
Signing time:             Thu 11 Jan 2024 08:49:01 +0000
ROA not before:           Thu 11 Jan 2024 08:44:01 +0000
ROA not after:            Thu 09 Jan 2025 08:49:01 +0000
asID:                     209263
IP address blocks:        2a14:4487:1200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f1:e9:1f:44:c6:f0:1a:dc:36:1a:b4:12:20:be:30:b3:cf:de:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96B8D4992D9B467CE859406542D783AE5B5427B
        Validity
            Not Before: Jan 11 08:44:01 2024 GMT
            Not After : Jan  9 08:49:01 2025 GMT
        Subject: CN=7B9A7D28B8FA9656A7A490D9D472B6A414A75F6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f9:25:50:30:39:08:36:06:80:6b:7b:fb:31:
                    84:ab:be:aa:11:fa:48:e7:63:13:eb:4a:9e:e8:02:
                    f2:c9:70:e2:5d:13:c6:37:1b:74:a8:a4:17:d8:9a:
                    4b:c5:ef:0a:44:e4:43:08:e4:9d:58:71:2e:8b:7c:
                    25:f0:ec:6b:bc:bc:2c:08:89:cb:8b:58:a2:2d:77:
                    c0:5c:62:d0:c7:3e:d7:62:05:94:ba:f3:5c:3a:32:
                    b1:ec:bc:4f:79:b7:a3:0c:f1:a8:99:84:50:d0:d8:
                    7e:f3:c0:c5:51:bd:ed:75:14:e8:b1:4a:3d:99:7d:
                    d5:44:b9:e4:38:4f:08:7a:55:fa:d0:f5:b4:98:14:
                    ce:bb:d7:1a:76:89:c2:de:b3:9c:8a:6c:e9:99:7b:
                    9a:13:7e:11:0f:67:c4:ac:35:07:e6:56:76:01:cf:
                    fa:9f:0b:1a:a3:64:ce:b8:09:5f:80:27:1e:45:a4:
                    18:0a:20:b8:c2:50:81:43:71:fe:70:bc:53:25:db:
                    dc:6c:6d:e1:12:f6:c5:36:01:68:75:99:76:05:34:
                    1b:af:54:89:fb:91:1a:9a:98:07:2a:74:83:91:8b:
                    9b:7e:2d:02:92:88:ec:c7:60:b1:2e:df:f8:cb:d2:
                    15:de:08:af:9d:63:9e:52:86:bb:12:4e:91:fc:2b:
                    84:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:9A:7D:28:B8:FA:96:56:A7:A4:90:D9:D4:72:B6:A4:14:A7:5F:6A
            X509v3 Authority Key Identifier:
                keyid:B9:6B:8D:49:92:D9:B4:67:CE:85:94:06:54:2D:78:3A:E5:B5:42:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/B96B8D4992D9B467CE859406542D783AE5B5427B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B96B8D4992D9B467CE859406542D783AE5B5427B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a313230303a3a2f34302d3430203d3e20323039323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:4487:1200::/40

    Signature Algorithm: sha256WithRSAEncryption
         cc:51:55:b0:92:60:d5:47:0d:7a:87:c1:a8:06:8e:81:8f:54:
         c5:62:16:cd:75:51:d3:12:8d:70:15:29:a7:59:d4:09:a6:6e:
         33:4e:68:16:e3:c2:b5:1a:5a:91:04:08:97:a1:1e:dc:f3:45:
         89:e4:66:96:74:c6:f5:4c:5b:98:35:be:5f:a8:e9:2a:63:b0:
         85:9f:9f:7e:27:64:10:38:80:30:69:fc:ce:90:29:85:5b:b2:
         88:18:a0:ec:3d:ee:e8:de:87:5d:eb:3f:f2:98:e3:c1:4f:ae:
         1d:5b:09:6e:2a:c6:d1:ea:8f:ed:81:81:0c:87:93:94:1b:8d:
         5a:c1:39:ee:16:a2:cf:13:b4:91:fb:53:e1:98:98:f2:37:24:
         8b:19:08:96:ae:75:f0:ca:e6:53:74:84:96:a0:36:7d:55:b5:
         96:e8:af:8b:6d:5c:ca:c5:a8:17:6e:6f:52:59:98:c6:1a:13:
         d5:5c:d0:78:e9:3c:d5:3f:b5:9c:a6:a9:a1:41:a8:c6:10:36:
         f0:22:86:61:9f:9c:a7:d8:a8:6e:4b:05:b1:25:c1:f3:25:20:
         2c:99:0a:1f:e7:6a:4d:e9:49:50:ad:57:1b:b4:0d:0f:13:2c:
         30:9c:95:37:5b:2f:e7:72:15:25:7c:d1:e9:7e:74:c2:2e:13:
         b3:b4:81:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----