Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a3a2f33322d3332203d3e20323135353331.roa
File:                     326131343a3763313a3a2f33322d3332203d3e20323135353331.roa (raw, json)
Hash identifier:          Uz8LcZ0B1+x1lNP4EL/7JiBJpgHQtGW8y0F1mf0icrM=
Subject key identifier:   65:F4:16:31:DF:11:3B:D6:DD:23:67:68:5D:A6:83:57:5E:21:0A:73
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       3536C64DDAF3D5F1112BA2E4EE97243C40175B7A
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a3a2f33322d3332203d3e20323135353331.roa
Signing time:             Sat 18 May 2024 14:09:32 +0000
ROA not before:           Sat 18 May 2024 14:04:32 +0000
ROA not after:            Sat 17 May 2025 14:09:32 +0000
asID:                     215531
IP address blocks:        2a14:7c1::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:36:c6:4d:da:f3:d5:f1:11:2b:a2:e4:ee:97:24:3c:40:17:5b:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: May 18 14:04:32 2024 GMT
            Not After : May 17 14:09:32 2025 GMT
        Subject: CN=65F41631DF113BD6DD2367685DA683575E210A73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fe:ab:65:00:a2:64:c0:99:47:6a:e5:70:46:
                    51:89:44:d4:52:2c:4e:4e:b5:4b:e5:67:5a:5f:09:
                    be:2c:76:c1:34:e7:4c:ce:3b:f5:2c:d4:5a:03:c5:
                    45:e7:fa:5b:10:15:ab:44:04:2f:f3:4b:eb:83:ce:
                    99:07:b6:13:91:60:26:94:ed:02:a7:a8:4a:3c:6b:
                    93:c1:bd:19:1d:99:08:df:21:df:c8:f8:c9:4b:07:
                    00:7e:03:7d:e9:58:39:0a:7a:f3:68:2e:13:73:de:
                    47:67:25:36:97:04:82:ec:77:11:1f:2c:41:c8:d0:
                    b8:3f:bf:1c:fa:72:70:41:09:6c:f5:75:0a:47:01:
                    94:7a:07:a7:c7:9c:20:73:c0:82:b3:77:54:19:f8:
                    43:8c:f7:87:d8:4b:12:52:ad:5a:0d:87:4b:bd:da:
                    34:a5:a5:b8:cb:18:66:ca:17:be:7b:54:c3:a8:dd:
                    c0:87:09:f0:2f:6e:58:b9:fd:d1:7c:ac:76:4b:6c:
                    ac:0b:6c:00:0a:f5:bb:79:12:fa:d1:0f:15:6a:d4:
                    bf:91:4c:15:13:96:c2:27:69:88:7c:b5:3d:d8:b5:
                    5c:72:59:8c:96:98:bd:ab:0c:d8:3d:a4:90:ed:ba:
                    5a:b9:1c:bd:91:d3:4a:cf:b2:79:fb:8d:e5:64:93:
                    9b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F4:16:31:DF:11:3B:D6:DD:23:67:68:5D:A6:83:57:5E:21:0A:73
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a3a2f33322d3332203d3e20323135353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c1::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:95:b8:06:6b:cb:b9:4a:8e:40:c2:57:ea:6f:ce:47:c8:26:
         27:4d:cd:f5:4a:17:9d:96:57:4e:ab:d4:7a:82:94:2c:4c:dd:
         e0:7d:c9:33:e0:26:fd:ff:c5:b8:41:7d:1d:b3:85:cd:ef:88:
         7b:70:a5:d2:86:00:2d:d7:89:16:9c:5e:24:a9:c4:00:68:60:
         95:de:e2:f8:b5:70:71:87:af:8c:a0:cc:43:5e:7d:23:b3:0b:
         c4:38:75:77:90:c9:fd:99:1a:65:59:92:06:97:43:e7:22:1a:
         e2:2a:b2:64:03:61:20:68:c2:5e:9a:91:07:11:18:14:31:e4:
         f4:5e:40:0b:07:e9:83:03:ce:fd:8d:74:7e:dc:8d:6b:3c:27:
         23:46:6a:cc:c0:be:93:30:51:e0:e9:87:43:94:7e:70:dd:ef:
         4f:9b:4b:d9:f1:b4:d7:d3:52:74:85:7d:d4:ac:8a:e8:5b:d7:
         e7:0a:3f:c3:02:e9:67:51:fd:97:2a:3d:e2:a2:9c:fa:60:74:
         84:a1:58:bc:cb:23:0f:7a:65:be:7f:eb:7b:10:03:78:23:6e:
         80:d7:11:af:d6:19:97:5e:8f:b5:ad:9e:59:8a:48:85:7f:56:
         5d:32:e5:56:1f:25:3a:c3:1a:43:28:db:32:a1:96:7c:56:dc:
         de:b1:44:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----