Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e203630323233.roa
File:                     326131343a3763313a623030623a3a2f34382d3438203d3e203630323233.roa (raw, json)
Hash identifier:          SU259FtwEhDxLjvm9JjtXRn6IbuCXHYdQmkyO6PLPb8=
Subject key identifier:   CB:CF:FF:79:0C:1E:C5:22:0D:39:15:C9:70:38:61:9A:09:5E:43:6F
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       7A87872A1D81A4EEDF20FF8C9B319A29BC69E822
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e203630323233.roa
Signing time:             Sun 17 Mar 2024 20:31:40 +0000
ROA not before:           Sun 17 Mar 2024 20:26:40 +0000
ROA not after:            Sun 16 Mar 2025 20:31:40 +0000
asID:                     60223
IP address blocks:        2a14:7c1:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:87:87:2a:1d:81:a4:ee:df:20:ff:8c:9b:31:9a:29:bc:69:e8:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Mar 17 20:26:40 2024 GMT
            Not After : Mar 16 20:31:40 2025 GMT
        Subject: CN=CBCFFF790C1EC5220D3915C97038619A095E436F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ee:e9:cc:cc:5f:0e:72:ff:81:7f:a9:56:53:
                    c6:ec:79:87:1d:55:c8:ee:0f:a9:70:2a:d8:cf:47:
                    af:29:21:5d:de:02:31:ec:e9:3b:f9:87:8c:5d:ec:
                    42:9f:71:43:80:9e:59:1f:32:59:68:13:8e:c2:99:
                    e3:e1:85:a6:0f:c4:23:7f:25:82:13:b9:91:65:fb:
                    e5:cb:53:b6:be:60:b0:4a:63:a9:2a:0d:3a:4a:a5:
                    4c:1b:98:d8:6c:01:d7:a0:a6:e5:49:5a:d9:37:f2:
                    85:af:7c:5a:30:ac:47:fb:f2:6b:6a:78:89:50:ae:
                    6b:d0:8f:14:ad:85:39:7c:f8:10:ee:16:49:41:5d:
                    1e:66:b3:44:f9:e1:a5:74:42:e3:b2:30:3c:00:f9:
                    7b:46:54:ed:10:d5:90:f7:c6:6e:3c:48:8e:38:98:
                    4f:9a:65:df:c6:53:72:07:3d:1d:44:a2:78:90:c8:
                    ae:54:97:92:ec:9b:21:6e:8d:b2:33:6a:a2:8b:3a:
                    94:72:ea:94:2d:5c:ef:09:aa:56:8b:b7:aa:17:30:
                    7f:9c:51:6b:5a:39:c6:17:72:17:6a:e3:10:5b:af:
                    88:c4:e2:3d:4b:b3:c4:bd:17:36:f2:0f:dc:99:25:
                    d3:66:cd:17:b7:97:3d:f3:8e:e8:63:e5:e4:12:dd:
                    f8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CF:FF:79:0C:1E:C5:22:0D:39:15:C9:70:38:61:9A:09:5E:43:6F
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e203630323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c1:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:4d:5c:dd:b1:df:6c:bb:77:21:08:df:80:eb:72:53:40:80:
         de:c6:11:c4:a1:cc:78:64:ad:20:cb:5d:ab:ef:17:30:55:42:
         0c:ae:f3:5c:b5:0b:28:d1:46:a2:71:23:cc:f9:a4:12:f1:17:
         bc:c2:c8:66:1f:b7:11:ba:7a:1b:0a:ad:1c:41:e9:c4:4a:f6:
         34:56:e0:fb:e4:3d:58:e6:f4:f4:0a:66:96:25:0a:ef:ee:1a:
         ae:a7:cb:b0:22:a6:b7:35:c4:69:cd:7c:f8:51:7c:5a:df:ab:
         01:3b:05:f2:93:0c:34:95:5a:60:d6:47:bb:9d:ff:8e:64:79:
         8a:ef:86:e7:a9:cb:0e:4f:68:6f:83:39:97:6f:c6:2c:de:28:
         40:30:5c:4e:a3:f9:ee:9d:ed:c3:4c:ff:16:1a:9b:bd:b8:c5:
         2d:ca:78:f3:f6:63:ef:a4:33:9f:aa:5b:11:3e:67:c3:07:61:
         39:f6:73:eb:e5:3d:a5:3d:a1:b6:02:5c:f3:33:de:a4:d7:8c:
         5b:85:51:2c:85:17:c3:50:f1:7f:89:a8:4b:d5:4f:f3:d8:d5:
         72:a9:f0:f7:ca:8b:97:67:35:56:83:7b:ec:72:0c:66:d2:14:
         0a:5a:6c:a8:8b:fe:7d:28:47:8a:6a:cb:9b:d0:13:d1:a5:f0:
         8d:43:72:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----