Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a3230303a3a2f34302d3430203d3e203438353939.roa
File:                     326131343a343438373a3230303a3a2f34302d3430203d3e203438353939.roa (raw, json)
Hash identifier:          lDwH2nJqZ+Y6cSDarHjHVKONzfz65+VDfQg2RPw8/4Q=
Subject key identifier:   35:CE:2B:7C:3D:D7:87:03:8A:6E:77:5B:32:A2:13:96:7A:AD:48:73
Certificate issuer:       /CN=B96B8D4992D9B467CE859406542D783AE5B5427B
Certificate serial:       511550A5E32C9E98E2C36E6C7F46F9D63B305D
Authority key identifier: B9:6B:8D:49:92:D9:B4:67:CE:85:94:06:54:2D:78:3A:E5:B5:42:7B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B96B8D4992D9B467CE859406542D783AE5B5427B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a3230303a3a2f34302d3430203d3e203438353939.roa
Signing time:             Thu 11 Jan 2024 08:46:15 +0000
ROA not before:           Thu 11 Jan 2024 08:41:15 +0000
ROA not after:            Thu 09 Jan 2025 08:46:15 +0000
asID:                     48599
IP address blocks:        2a14:4487:200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:15:50:a5:e3:2c:9e:98:e2:c3:6e:6c:7f:46:f9:d6:3b:30:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96B8D4992D9B467CE859406542D783AE5B5427B
        Validity
            Not Before: Jan 11 08:41:15 2024 GMT
            Not After : Jan  9 08:46:15 2025 GMT
        Subject: CN=35CE2B7C3DD787038A6E775B32A213967AAD4873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:53:30:f4:b1:43:fe:f3:a9:59:5d:83:94:53:
                    9f:6d:61:bb:bd:d6:3e:40:bf:14:65:19:ad:70:7d:
                    38:73:f4:19:cd:7f:b7:2f:55:b4:aa:bf:1a:44:ae:
                    8b:1a:76:d8:3c:53:a6:d8:d4:bb:0b:9a:f6:6d:fb:
                    a9:98:98:a7:fb:76:48:4f:5c:dc:26:e0:7a:3a:05:
                    13:5a:99:e6:89:cc:83:7a:7d:a0:e0:48:42:a3:03:
                    6a:01:cc:81:7a:4b:97:3e:00:41:e1:cd:7a:39:5e:
                    fc:93:72:1f:6e:10:9e:7f:0b:ef:7c:30:ac:dc:7f:
                    4b:ec:2c:84:2c:ee:f9:42:32:e1:5b:08:9b:a6:ad:
                    32:b8:10:01:a1:73:a5:1c:57:00:52:e4:32:43:aa:
                    13:6a:cb:09:f1:ac:f3:a9:01:59:5d:b5:a1:53:92:
                    e0:99:85:ef:f7:1c:dc:e0:47:7f:67:3d:d4:15:23:
                    59:69:b0:bf:97:37:9e:60:5a:7b:00:88:1e:63:e8:
                    f4:46:64:f6:5a:cc:b4:57:41:8c:e5:0a:fc:a9:f8:
                    59:8d:1f:cb:4d:73:76:bf:cd:e6:2c:33:13:fe:30:
                    dc:0b:96:e4:dc:66:54:58:7f:1f:f9:0c:c7:90:8a:
                    1d:7d:0d:e2:38:47:5c:21:74:8f:59:7a:5c:64:69:
                    60:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CE:2B:7C:3D:D7:87:03:8A:6E:77:5B:32:A2:13:96:7A:AD:48:73
            X509v3 Authority Key Identifier:
                keyid:B9:6B:8D:49:92:D9:B4:67:CE:85:94:06:54:2D:78:3A:E5:B5:42:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/B96B8D4992D9B467CE859406542D783AE5B5427B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B96B8D4992D9B467CE859406542D783AE5B5427B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a3230303a3a2f34302d3430203d3e203438353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:4487:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         14:82:0f:48:33:9f:f9:cd:f5:d2:b2:46:f7:ef:73:de:13:fd:
         a0:87:57:2a:a0:58:88:75:1f:e6:74:b2:73:80:e7:86:6a:dc:
         18:b3:e0:5f:02:1a:dc:f6:3f:26:1e:2b:16:e4:b2:74:ea:aa:
         3e:96:ad:af:a6:65:53:f4:3a:fa:3c:c8:95:cb:97:f7:43:e8:
         07:4b:27:5c:df:05:83:00:30:80:b2:31:e0:7d:c9:bf:e6:8b:
         70:fe:81:f4:cc:94:b7:92:c6:b1:48:9d:bd:3d:8b:77:67:8c:
         ca:cc:ec:45:1a:cf:9e:c8:b1:da:17:ec:74:aa:2b:70:c2:1f:
         1e:b2:cb:92:0c:fc:dc:f3:2f:81:99:e7:ae:32:50:4d:0e:73:
         6c:75:a9:5f:49:c5:1c:c4:7b:e7:c8:94:4b:e5:32:b7:3c:e3:
         71:bb:c1:2e:85:3d:44:ca:ba:81:1c:41:f8:ff:39:cf:c2:6e:
         ff:fd:c4:eb:43:54:03:34:cf:b7:b8:e3:ea:58:2a:5f:b8:dc:
         db:52:31:f8:21:74:b1:14:85:a3:41:b0:81:a1:d8:01:17:c8:
         a1:a5:13:50:67:3a:8b:8e:d8:41:39:2d:6a:73:85:fc:8e:25:
         df:4c:3e:af:5e:fa:39:9e:39:3d:76:a7:0e:69:a0:c9:0b:f1:
         7c:17:ef:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----