Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a313230303a3a2f34302d3430203d3e20323136343632.roa
File:                     326131343a343438373a313230303a3a2f34302d3430203d3e20323136343632.roa (raw, json)
Hash identifier:          283d52uXmiqidIPLjBX0s1XG5I5tLrSbPewhMv5vA/g=
Subject key identifier:   5A:F2:80:7F:2D:EF:58:DB:AC:35:A1:AC:46:6E:47:55:05:42:31:74
Certificate issuer:       /CN=B96B8D4992D9B467CE859406542D783AE5B5427B
Certificate serial:       69F01261E909D43BA44AE08B42FA0F8361AA368E
Authority key identifier: B9:6B:8D:49:92:D9:B4:67:CE:85:94:06:54:2D:78:3A:E5:B5:42:7B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B96B8D4992D9B467CE859406542D783AE5B5427B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a313230303a3a2f34302d3430203d3e20323136343632.roa
Signing time:             Thu 11 Jan 2024 08:49:18 +0000
ROA not before:           Thu 11 Jan 2024 08:44:18 +0000
ROA not after:            Thu 09 Jan 2025 08:49:18 +0000
asID:                     216462
IP address blocks:        2a14:4487:1200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f0:12:61:e9:09:d4:3b:a4:4a:e0:8b:42:fa:0f:83:61:aa:36:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96B8D4992D9B467CE859406542D783AE5B5427B
        Validity
            Not Before: Jan 11 08:44:18 2024 GMT
            Not After : Jan  9 08:49:18 2025 GMT
        Subject: CN=5AF2807F2DEF58DBAC35A1AC466E475505423174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c3:53:13:5b:65:94:21:50:50:74:88:89:55:
                    77:a0:35:53:23:30:6f:16:2a:c0:d9:5d:cf:a4:72:
                    6f:b6:36:b1:36:fe:1b:47:7f:9a:0d:89:ff:84:2a:
                    6a:36:1e:3b:1e:f6:6d:ec:6c:fc:da:52:5f:f0:94:
                    8f:22:c1:75:57:85:27:4d:f1:d2:7f:a0:65:cd:07:
                    78:5b:b4:d8:84:7e:5e:9d:4c:fe:49:91:76:83:6c:
                    28:cf:8c:cf:d7:80:67:16:22:de:b8:d5:7f:7a:f5:
                    31:1e:12:f4:72:38:87:67:c0:44:06:65:6b:11:22:
                    27:97:c9:c9:2f:44:d7:5a:12:c6:db:8a:66:d4:33:
                    1e:70:67:a9:65:ea:dd:a9:c4:1c:64:92:22:0b:53:
                    40:95:b2:6b:8e:8a:3d:44:bb:b4:f4:97:67:3c:f3:
                    05:03:21:10:9f:0f:50:b7:93:27:2a:a1:c6:69:10:
                    34:48:f8:5b:39:84:6b:4e:f2:ca:f1:51:32:2c:17:
                    1c:db:86:a6:f1:dd:8f:1b:ba:a0:a8:e0:3f:c4:ba:
                    3d:bb:e6:e3:a7:ac:d5:76:06:fd:23:5d:25:8e:f4:
                    23:0f:92:c2:0b:6e:e6:cd:4b:ff:ba:9d:73:c5:ea:
                    8d:92:60:47:33:2a:98:e6:4a:9e:43:8d:32:b7:8d:
                    aa:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F2:80:7F:2D:EF:58:DB:AC:35:A1:AC:46:6E:47:55:05:42:31:74
            X509v3 Authority Key Identifier:
                keyid:B9:6B:8D:49:92:D9:B4:67:CE:85:94:06:54:2D:78:3A:E5:B5:42:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/B96B8D4992D9B467CE859406542D783AE5B5427B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B96B8D4992D9B467CE859406542D783AE5B5427B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a313230303a3a2f34302d3430203d3e20323136343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:4487:1200::/40

    Signature Algorithm: sha256WithRSAEncryption
         35:a6:5d:21:52:f1:93:64:d6:5c:2d:fa:d9:b9:63:4e:ce:10:
         3b:cb:45:a6:05:92:c0:40:59:c6:9c:4d:ee:f9:03:75:ad:89:
         6c:45:2f:7c:14:6c:fa:86:f2:22:5c:2c:e2:fb:22:e0:44:bd:
         0d:f2:5b:e7:0d:ab:6e:9c:d9:b9:7e:61:31:d2:3d:17:fa:2d:
         c7:f3:f2:18:d5:0a:cf:69:c1:5f:c1:4d:3e:ed:74:d1:c6:93:
         7c:1a:47:8a:f7:10:29:f7:55:98:32:d5:a3:a6:05:62:fe:a2:
         53:5a:36:16:ce:0a:a6:7f:5e:24:7c:c0:7e:70:e2:82:38:99:
         40:52:d4:01:df:02:33:1e:03:87:37:97:28:72:44:d4:e4:e4:
         2f:8a:c8:fd:83:74:82:06:b2:30:67:b4:2a:60:f9:a1:6e:b1:
         f8:39:79:49:8e:9f:93:99:43:4a:a3:91:70:b2:a8:77:4a:f5:
         60:1e:35:61:c4:63:f3:9d:a6:7e:91:54:d8:c2:dd:54:b8:04:
         62:bc:3d:b6:e4:1d:b2:cd:15:af:6b:62:90:8b:2d:39:93:73:
         55:67:fa:d5:17:a0:76:7e:6f:9f:33:a5:9e:69:c3:98:23:09:
         e2:d0:5e:58:6d:9d:51:d0:cc:8a:5f:d2:9c:72:e1:2e:70:ff:
         23:f7:12:81
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgIUafASYekJ1DukSuCLQvoPg2GqNo4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjk2QjhENDk5MkQ5QjQ2N0NFODU5NDA2NTQyRDc4M0FF
NUI1NDI3QjAeFw0yNDAxMTEwODQ0MThaFw0yNTAxMDkwODQ5MThaMDMxMTAvBgNV
BAMTKDVBRjI4MDdGMkRFRjU4REJBQzM1QTFBQzQ2NkU0NzU1MDU0MjMxNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlw1MTW2WUIVBQdIiJVXegNVMj
MG8WKsDZXc+kcm+2NrE2/htHf5oNif+EKmo2Hjse9m3sbPzaUl/wlI8iwXVXhSdN
8dJ/oGXNB3hbtNiEfl6dTP5JkXaDbCjPjM/XgGcWIt641X969TEeEvRyOIdnwEQG
ZWsRIieXyckvRNdaEsbbimbUMx5wZ6ll6t2pxBxkkiILU0CVsmuOij1Eu7T0l2c8
8wUDIRCfD1C3kycqocZpEDRI+Fs5hGtO8srxUTIsFxzbhqbx3Y8buqCo4D/Euj27
5uOnrNV2Bv0jXSWO9CMPksILbubNS/+6nXPF6o2SYEczKpjmSp5DjTK3japnAgMB
AAGjggKHMIICgzAdBgNVHQ4EFgQUWvKAfy3vWNusNaGsRm5HVQVCMXQwHwYDVR0j
BBgwFoAUuWuNSZLZtGfOhZQGVC14OuW1QnswDgYDVR0PAQH/BAQDAgeAMIGXBgNV
HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5LTRmYWVhNGIx
YmMxMi8xOC9COTZCOEQ0OTkyRDlCNDY3Q0U4NTk0MDY1NDJENzgzQUU1QjU0MjdC
LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA0MDMyYzhmLTFkNTct
NGMzYi05MDQzLWEwZTdmZWJmMTY3ZC8wL0I5NkI4RDQ5OTJEOUI0NjdDRTg1OTQw
NjU0MkQ3ODNBRTVCNTQyN0IuY2VyMIG4BggrBgEFBQcBCwSBqzCBqDCBpQYIKwYB
BQUHMAuGgZhyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5LTRmYWVhNGIxYmMxMi8xOC8zMjYx
MzEzNDNhMzQzNDM4MzczYTMxMzIzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIw
MzIzMTM2MzQzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhREhxIwDQYJKoZIhvcNAQELBQADggEB
ADWmXSFS8ZNk1lwt+tm5Y07OEDvLRaYFksBAWcacTe75A3WtiWxFL3wUbPqG8iJc
LOL7IuBEvQ3yW+cNq26c2bl+YTHSPRf6Lcfz8hjVCs9pwV/BTT7tdNHGk3waR4r3
ECn3VZgy1aOmBWL+olNaNhbOCqZ/XiR8wH5w4oI4mUBS1AHfAjMeA4c3lyhyRNTk
5C+KyP2DdIIGsjBntCpg+aFusfg5eUmOn5OZQ0qjkXCyqHdK9WAeNWHEY/Odpn6R
VNjC3VS4BGK8PbbkHbLNFa9rYpCLLTmTc1Vn+tUXoHZ+b58zpZ5pw5gjCeLQXlht
nVHQzIpf0pxy4S5w/yP3EoE=
-----END CERTIFICATE-----