Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a3130303a3a2f34302d3438203d3e20323135343630.roa
File:                     326131343a3763303a3130303a3a2f34302d3438203d3e20323135343630.roa (raw, json)
Hash identifier:          768W2G6Yy0P1p+VvT2BkR4wCEfi3HaA4XXvHy8iv6JY=
Subject key identifier:   8F:B2:A2:FD:26:05:B9:37:67:31:17:A3:32:D8:3B:D6:60:DE:26:CC
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       0F3D13C5A05FEF73CF5CC8BAC6F91958B1B1856C
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a3130303a3a2f34302d3438203d3e20323135343630.roa
Signing time:             Sat 24 Feb 2024 20:46:41 +0000
ROA not before:           Sat 24 Feb 2024 20:41:41 +0000
ROA not after:            Sat 22 Feb 2025 20:46:41 +0000
asID:                     215460
IP address blocks:        2a14:7c0:100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:3d:13:c5:a0:5f:ef:73:cf:5c:c8:ba:c6:f9:19:58:b1:b1:85:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Feb 24 20:41:41 2024 GMT
            Not After : Feb 22 20:46:41 2025 GMT
        Subject: CN=8FB2A2FD2605B937673117A332D83BD660DE26CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:28:8f:d3:70:e3:d1:09:6b:88:8d:bb:92:65:
                    b7:35:f3:55:bf:f2:f7:81:57:78:5d:0b:2f:b2:fd:
                    9b:80:5e:d0:42:63:d4:67:fa:be:9f:9c:8e:10:44:
                    83:62:6a:4c:01:66:e3:e3:ff:8d:c0:ed:fe:ca:04:
                    d2:a2:e0:f2:da:ed:c4:03:98:40:85:5e:a2:6c:26:
                    c6:48:ba:40:a8:1c:f8:bb:48:86:f0:2c:5a:4f:a0:
                    a4:df:98:cd:7a:6e:93:37:75:d7:53:a2:c6:82:50:
                    77:fc:60:09:a9:de:e9:9f:8a:d7:9c:b0:dd:c5:89:
                    b4:50:8b:af:b5:34:67:c4:c7:c0:f6:86:75:7e:b1:
                    ee:6a:8f:ab:57:1f:95:2a:00:f1:74:45:a8:99:88:
                    14:8f:41:bf:2d:42:5d:9b:b9:4a:2d:85:4d:3a:50:
                    b3:58:6c:ed:08:6c:52:36:30:ab:4a:6e:f6:ea:8a:
                    bd:42:ed:6a:12:96:c0:f7:f5:02:94:2a:fe:55:15:
                    13:8b:47:e6:52:61:f4:38:00:1b:b8:50:bb:94:f6:
                    4a:3e:55:29:43:a9:da:f7:bf:96:61:38:64:8f:9b:
                    0e:d0:a1:0e:27:5a:c7:e3:4c:38:d5:89:e9:75:68:
                    cd:49:00:1d:84:b2:bc:bd:ac:16:27:8e:41:e1:04:
                    a5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B2:A2:FD:26:05:B9:37:67:31:17:A3:32:D8:3B:D6:60:DE:26:CC
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a3130303a3a2f34302d3438203d3e20323135343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         06:26:41:4f:d7:5c:8f:9f:15:42:ea:6f:ee:b0:f8:a3:28:57:
         30:ac:e4:19:be:30:85:d8:8f:9c:61:11:7c:ee:1f:f4:e0:94:
         12:28:5e:36:b4:96:24:48:96:21:de:ef:3a:66:e1:58:12:94:
         81:93:bc:e1:ed:ed:f5:f2:4f:93:9b:8a:01:04:d6:a1:02:20:
         1e:03:67:8a:cf:53:18:fd:f1:0b:78:92:8e:21:e8:b7:15:2f:
         55:a8:21:1f:9e:b3:72:3c:2f:8f:ff:bb:b1:c9:19:1d:ab:5c:
         e8:ff:68:5c:c3:82:38:04:66:e4:d2:28:ed:e8:b5:c6:d4:67:
         77:d4:c5:50:f5:41:ff:00:26:a8:bb:31:4b:e8:87:26:cf:1a:
         64:e2:c6:14:90:64:08:d4:5c:c4:87:3e:62:af:50:48:f3:36:
         e8:33:54:66:e6:b6:b7:5d:4f:a2:ab:a3:b0:b3:e1:81:3d:f0:
         5e:8e:c8:80:91:f9:cf:74:32:2e:57:68:ca:7d:5b:19:a0:b6:
         1a:85:df:66:17:27:ab:7b:da:53:91:cb:a8:c8:22:5a:2b:11:
         25:95:b8:6e:c2:7e:79:a5:57:c9:ed:01:bb:8c:a9:8e:07:09:
         d6:03:f3:bc:1b:b1:9a:c9:ab:2d:17:84:8d:eb:a1:f1:6b:17:
         96:be:5a:b5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----