Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/0/326131343a316563373a633030303a3a2f33362d3336203d3e203438373030.roa
File:                     326131343a316563373a633030303a3a2f33362d3336203d3e203438373030.roa (raw, json)
Hash identifier:          KibVOKvkdGEwQuOAhEzxUTr+IyZygh3onW52Zy2l3b8=
Subject key identifier:   DC:5B:41:57:0F:72:18:01:62:DA:C9:9B:E0:3B:14:40:38:D9:DD:2E
Certificate issuer:       /CN=7B8B788E11038E988A479693F5D7C2EA216BCD76
Certificate serial:       1A06606FBE998C83870BBFF13EE3FE24711990DC
Authority key identifier: 7B:8B:78:8E:11:03:8E:98:8A:47:96:93:F5:D7:C2:EA:21:6B:CD:76
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/7B8B788E11038E988A479693F5D7C2EA216BCD76.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/0/326131343a316563373a633030303a3a2f33362d3336203d3e203438373030.roa
Signing time:             Fri 17 May 2024 17:56:24 +0000
ROA not before:           Fri 17 May 2024 17:51:24 +0000
ROA not after:            Fri 16 May 2025 17:56:24 +0000
asID:                     48700
IP address blocks:        2a14:1ec7:c000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:06:60:6f:be:99:8c:83:87:0b:bf:f1:3e:e3:fe:24:71:19:90:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B8B788E11038E988A479693F5D7C2EA216BCD76
        Validity
            Not Before: May 17 17:51:24 2024 GMT
            Not After : May 16 17:56:24 2025 GMT
        Subject: CN=DC5B41570F72180162DAC99BE03B144038D9DD2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:62:cb:9e:3b:be:cf:a9:70:0f:b9:54:c2:65:
                    6a:61:18:5b:b0:f0:45:98:8b:46:4c:1d:6b:bb:2e:
                    e3:21:a5:e5:f6:5d:43:2d:0b:39:9c:e5:77:eb:59:
                    89:4f:cd:b9:1b:66:aa:62:0a:65:19:da:76:7e:84:
                    41:3e:27:57:29:9e:b2:72:86:d1:c9:fb:7a:78:a3:
                    72:7e:79:c7:e1:11:61:eb:36:3a:42:21:e4:15:f0:
                    02:37:80:7c:82:a3:cd:ff:aa:d9:89:9a:88:eb:4e:
                    97:dd:1b:64:1b:fa:30:86:66:bf:de:7d:a2:88:61:
                    87:ea:25:5c:30:f6:30:98:b5:d3:74:c2:80:2b:9f:
                    37:01:20:bc:0c:2f:e9:ea:7c:0b:51:4b:15:a7:0e:
                    46:ba:d6:ca:33:7e:a8:69:58:98:67:a9:b8:ab:ed:
                    47:0d:db:2a:15:a5:7c:01:57:76:44:8f:70:01:04:
                    09:62:01:95:b2:03:86:ba:26:db:44:84:47:c4:40:
                    c4:58:db:0c:d3:ec:d0:01:42:58:49:39:bb:94:ad:
                    34:a6:f2:9a:57:4d:a6:fe:8e:2d:d8:2c:c4:5c:50:
                    8a:aa:fc:c5:56:bb:ed:b4:48:2d:56:a1:ea:40:ad:
                    dd:d3:11:60:64:9a:60:6b:53:66:16:68:b2:ce:f2:
                    e5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5B:41:57:0F:72:18:01:62:DA:C9:9B:E0:3B:14:40:38:D9:DD:2E
            X509v3 Authority Key Identifier:
                keyid:7B:8B:78:8E:11:03:8E:98:8A:47:96:93:F5:D7:C2:EA:21:6B:CD:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/0/7B8B788E11038E988A479693F5D7C2EA216BCD76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/7B8B788E11038E988A479693F5D7C2EA216BCD76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/0/326131343a316563373a633030303a3a2f33362d3336203d3e203438373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:1ec7:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         00:39:a1:af:22:e0:93:2a:39:a8:33:34:4c:25:e4:38:09:80:
         4e:be:c8:83:43:26:cb:43:08:a1:42:d9:3f:5c:4e:d0:7e:7c:
         24:73:a0:b1:fb:1c:22:23:e0:0d:d1:2f:a2:56:93:70:08:e9:
         55:b7:ef:9a:b8:ad:b8:cf:d6:87:6b:3d:24:b8:de:0d:91:f3:
         d9:9b:5b:7c:39:4a:22:2c:55:5a:1b:a3:a5:26:74:1a:75:79:
         71:cc:c3:fc:35:51:79:c6:59:ae:8f:e5:47:6d:1b:57:9a:ef:
         da:fc:21:df:26:1a:15:10:46:2c:82:f0:85:12:27:a7:60:fb:
         1a:59:36:27:09:e8:69:a1:c6:7b:25:25:58:ea:5d:4c:ff:98:
         5a:7c:f6:3d:4e:48:be:7c:41:bd:18:d8:ac:b7:ee:ac:89:31:
         99:4e:31:48:0e:03:5b:c0:30:39:82:95:17:1a:80:59:ac:0f:
         1c:96:04:6a:7a:50:b2:c9:8e:03:34:3a:e5:0a:ff:0d:61:37:
         34:46:bf:20:89:d3:e3:1d:f2:1d:ed:14:67:5b:47:30:ae:75:
         81:16:0b:90:a1:d5:22:a4:6b:1b:10:29:cf:c2:3f:37:81:2d:
         fc:60:5e:a9:40:88:89:35:f2:6f:93:28:a3:d4:27:27:4f:2a:
         e1:5d:3b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----