Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a3a2f33322d3332203d3e203630323233.roa
File:                     326131343a3763373a3a2f33322d3332203d3e203630323233.roa (raw, json)
Hash identifier:          F2OKVGbM4NE1RkZoIZomppQSO/oAa9WFPOiuXiUkX5A=
Subject key identifier:   2E:70:E1:64:AD:FE:38:B6:46:2B:4F:3D:1E:DD:42:44:AF:3A:DD:08
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       029C904FD870EDDC62E81CC9A3296A8534AB9816
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a3a2f33322d3332203d3e203630323233.roa
Signing time:             Tue 21 May 2024 16:32:03 +0000
ROA not before:           Tue 21 May 2024 16:27:03 +0000
ROA not after:            Tue 20 May 2025 16:32:03 +0000
asID:                     60223
IP address blocks:        2a14:7c7::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:9c:90:4f:d8:70:ed:dc:62:e8:1c:c9:a3:29:6a:85:34:ab:98:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: May 21 16:27:03 2024 GMT
            Not After : May 20 16:32:03 2025 GMT
        Subject: CN=2E70E164ADFE38B6462B4F3D1EDD4244AF3ADD08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a8:c1:37:87:68:85:b7:58:31:63:7c:5a:67:
                    69:2b:96:04:b0:db:0a:58:23:10:35:5b:b2:f1:9a:
                    4d:31:0f:68:a7:38:fb:54:83:08:25:3f:06:05:78:
                    d7:ed:fc:02:f9:42:c9:e3:b9:f7:f2:dc:9a:ca:6f:
                    10:e1:59:91:1e:be:a3:a4:4a:a2:0c:a7:a3:23:86:
                    af:a1:70:b9:07:f3:bd:2b:bd:87:2c:4b:8c:2b:b7:
                    9e:71:47:5d:08:56:47:aa:57:e2:97:2a:51:f4:e3:
                    b5:e2:7a:37:0c:2c:05:61:92:f6:b9:dc:77:b1:f0:
                    58:dd:bf:b6:3b:f7:20:b4:a9:8d:53:d0:47:9a:ff:
                    98:e9:0a:eb:99:be:56:33:90:0d:da:67:3a:1e:d6:
                    be:9b:ee:34:25:e7:ce:d0:83:77:a9:be:46:b0:cf:
                    29:95:2d:d2:08:b8:59:76:c3:03:d0:24:f1:17:55:
                    7e:c4:d3:a6:5f:11:e9:d4:52:f1:c9:09:63:d5:76:
                    b3:f0:9c:2e:60:74:23:2a:a9:35:0e:3f:cd:8e:1e:
                    2d:5d:9d:af:ef:8f:c5:39:05:90:45:5d:81:ba:7d:
                    4f:65:42:3c:2d:6e:1d:10:68:ec:9f:d2:90:f5:22:
                    13:6e:e2:15:e4:a7:c3:e1:a3:ef:8d:76:4d:7e:eb:
                    24:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:70:E1:64:AD:FE:38:B6:46:2B:4F:3D:1E:DD:42:44:AF:3A:DD:08
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a3a2f33322d3332203d3e203630323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c7::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:c3:d6:42:13:54:09:9b:1b:28:7a:93:7b:88:56:30:5c:35:
         bf:12:4f:0e:05:0f:98:a1:2f:9e:07:79:de:35:67:62:30:8c:
         05:d8:b2:de:ac:35:41:e9:f6:53:a6:d2:68:c0:2b:4e:55:6e:
         95:18:3a:37:10:c6:66:6b:c9:bd:91:f1:f6:e0:88:e1:f2:e2:
         2a:f6:d0:3b:91:96:5d:82:c9:7b:26:aa:fa:09:9a:86:14:8c:
         7b:e6:bb:aa:9b:76:23:62:fc:5a:fd:04:9a:5f:96:98:e0:01:
         2e:e8:22:37:04:67:18:86:00:fd:bb:fb:6c:c8:d0:b6:e9:be:
         0e:cc:07:5b:2b:2f:6d:40:05:a2:e7:8a:1d:7b:60:33:36:a6:
         4e:a7:c6:10:9e:42:19:90:73:95:32:91:5f:15:50:9f:cf:33:
         dc:82:13:0d:84:3a:f0:a3:e7:41:5d:7d:7b:f4:40:cb:15:91:
         1a:20:ad:df:16:50:21:91:83:cb:1a:86:c8:2f:85:93:b4:68:
         f1:61:c5:e8:d1:b8:54:05:74:9d:8b:bd:da:44:a7:45:f1:ee:
         7c:dc:75:45:7e:e2:69:0b:69:a2:75:0b:b4:c3:88:39:c9:4f:
         1c:cc:d1:6a:9d:dd:15:88:26:c5:ee:67:5c:22:3d:e7:a1:c2:
         8a:4f:aa:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----