Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763323a313030343a3a2f34382d3438203d3e20323135383635.roa
File:                     326131343a3763323a313030343a3a2f34382d3438203d3e20323135383635.roa (raw, json)
Hash identifier:          Uypys8hndKpk5XYJ4glvilXvNdWNPcRH2EN46xUnhC0=
Subject key identifier:   7B:D2:C5:F9:A6:EB:1A:21:6F:CA:FD:56:F8:8E:72:83:1B:51:30:B4
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       751A60428C273F59389FCD2B631AB9C8D86378D5
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763323a313030343a3a2f34382d3438203d3e20323135383635.roa
Signing time:             Mon 15 Apr 2024 16:40:07 +0000
ROA not before:           Mon 15 Apr 2024 16:35:07 +0000
ROA not after:            Mon 14 Apr 2025 16:40:07 +0000
asID:                     215865
IP address blocks:        2a14:7c2:1004::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:1a:60:42:8c:27:3f:59:38:9f:cd:2b:63:1a:b9:c8:d8:63:78:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Apr 15 16:35:07 2024 GMT
            Not After : Apr 14 16:40:07 2025 GMT
        Subject: CN=7BD2C5F9A6EB1A216FCAFD56F88E72831B5130B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7f:c0:ca:eb:73:0e:d7:39:27:62:16:be:9b:
                    7e:dd:c5:93:f4:7e:90:4d:19:a8:af:21:b7:20:31:
                    7b:cf:c5:eb:fe:b8:73:27:15:83:ae:74:6b:fe:04:
                    31:3a:55:4d:19:02:bf:57:15:e6:15:9c:7f:ca:c5:
                    df:d7:2e:8f:c2:26:f2:d3:d8:f9:e1:41:5a:23:92:
                    53:23:37:60:8d:53:71:f6:12:f3:35:86:34:e5:bc:
                    e5:25:3f:f2:29:c2:bc:e5:fe:f0:d8:21:c1:86:1a:
                    7f:38:4f:68:59:f3:27:2d:db:67:06:44:b9:dd:0b:
                    64:5e:c5:23:00:79:8d:6d:73:6f:85:50:5c:bf:3d:
                    d0:56:6d:1b:16:58:c7:ca:a1:5e:d3:e2:2c:73:e3:
                    06:eb:50:72:c2:fe:6f:ce:fc:f7:67:57:fc:79:f8:
                    31:c2:c7:07:bc:ce:72:7e:e7:7c:59:94:24:cd:ee:
                    d1:d3:af:d8:78:1b:93:fe:ec:1c:02:73:a1:a6:b0:
                    fb:8b:e7:27:50:3f:c5:d0:d7:64:3c:6b:17:3b:88:
                    a8:7a:17:24:4a:a5:52:ae:57:4b:17:3c:da:83:d6:
                    70:2a:6d:8c:09:b8:e5:07:87:e5:59:36:39:12:02:
                    55:1b:b1:0d:89:6a:35:ef:3b:9c:a1:31:d6:6f:92:
                    38:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D2:C5:F9:A6:EB:1A:21:6F:CA:FD:56:F8:8E:72:83:1B:51:30:B4
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763323a313030343a3a2f34382d3438203d3e20323135383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c2:1004::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:f6:b3:b5:9a:7a:3e:3a:6e:bb:18:04:63:03:a9:1d:65:4a:
         00:00:e5:95:d0:a5:9d:d5:f3:52:d7:ef:25:ca:06:01:25:97:
         a8:6a:ce:22:5d:8f:a2:9d:3f:32:23:76:4c:08:68:71:31:12:
         3b:80:94:e1:d4:85:47:ea:56:39:12:80:ba:ed:7e:7c:60:8d:
         90:f9:2e:5d:82:14:6a:aa:7e:12:80:dd:16:6e:6e:ed:e6:59:
         b4:c4:18:ad:1d:f7:05:26:40:bd:e1:b0:86:94:97:95:d5:b1:
         10:3c:0f:1d:5d:06:16:aa:a1:6a:3c:e3:1e:ad:a6:82:0b:66:
         d5:18:4b:f4:ed:a3:d0:0b:1c:8a:86:c5:8a:ed:a5:41:0d:0b:
         bd:8f:45:08:6e:14:72:d0:af:dc:53:6d:32:aa:5c:bd:48:f5:
         52:e8:ff:a4:f5:a6:9b:6b:1b:77:c1:03:8f:18:a9:b3:36:e5:
         78:bf:3a:5d:8d:d5:48:9a:1c:7e:9b:7c:ac:0a:f9:f1:87:36:
         14:37:c1:c5:bc:8b:04:65:06:b1:12:00:81:7d:15:f1:e2:d7:
         f3:69:97:be:fc:30:44:2d:ed:34:15:af:8a:d0:77:ce:72:ae:
         48:1a:3d:09:56:95:0f:fc:42:3e:77:38:a9:90:bb:23:02:b4:
         6a:a2:43:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----