Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a313830303a3a2f33382d3338203d3e20323135323932.roa
File:                     326131343a3763303a313830303a3a2f33382d3338203d3e20323135323932.roa (raw, json)
Hash identifier:          NSsoSdHMPJwPrhYNJ4xuN5i811riQyLnXy0NDZrn8vw=
Subject key identifier:   97:4B:C7:7A:7A:61:3F:83:66:07:8A:36:FF:9A:5F:0B:9A:4C:9D:61
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       02BDDC5749C255EBFD10A757C604D7C5A1404008
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a313830303a3a2f33382d3338203d3e20323135323932.roa
Signing time:             Wed 20 Mar 2024 13:37:07 +0000
ROA not before:           Wed 20 Mar 2024 13:32:07 +0000
ROA not after:            Wed 19 Mar 2025 13:37:07 +0000
asID:                     215292
IP address blocks:        2a14:7c0:1800::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:bd:dc:57:49:c2:55:eb:fd:10:a7:57:c6:04:d7:c5:a1:40:40:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Mar 20 13:32:07 2024 GMT
            Not After : Mar 19 13:37:07 2025 GMT
        Subject: CN=974BC77A7A613F8366078A36FF9A5F0B9A4C9D61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:a3:9f:30:39:39:d0:f0:72:57:ee:2e:69:d4:
                    11:7f:37:6a:e6:6c:bc:b1:9a:27:15:21:9f:3b:b4:
                    4a:9d:96:36:87:9d:0a:8f:ef:fc:10:7b:29:75:d9:
                    6b:48:81:e3:2b:aa:25:94:01:8a:43:80:9d:4b:7d:
                    36:d9:cb:59:a9:00:8b:8f:91:5e:f4:42:8d:41:ff:
                    dd:77:f0:ba:6d:a7:36:23:c8:8f:36:0a:89:47:03:
                    60:1e:7b:13:2a:57:09:89:78:3c:1c:29:d7:9d:2a:
                    ab:7f:5c:68:00:c1:87:be:1b:e9:f0:f8:a2:6b:57:
                    e5:50:f4:67:19:a3:5e:5e:09:aa:5e:46:70:44:d8:
                    97:a8:e9:ed:82:35:5a:e1:f1:8b:dc:62:22:57:7d:
                    82:f0:97:1a:24:d9:54:a3:96:e7:41:51:94:23:b9:
                    12:9a:0e:b2:1e:fe:29:72:3b:32:9a:db:ab:5d:26:
                    64:37:34:50:0a:ef:b2:1d:d1:55:ce:8c:97:56:1d:
                    57:3a:2b:7a:d1:42:6e:80:71:68:77:e2:02:8b:ce:
                    ff:a2:51:82:de:c5:60:d0:54:da:36:7d:32:e8:16:
                    db:f8:c2:54:69:d9:f4:d3:bf:e2:65:22:f7:b2:cd:
                    fd:6c:a7:8c:b0:57:6f:d5:c6:56:99:87:f5:b2:4e:
                    28:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:4B:C7:7A:7A:61:3F:83:66:07:8A:36:FF:9A:5F:0B:9A:4C:9D:61
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a313830303a3a2f33382d3338203d3e20323135323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:1800::/38

    Signature Algorithm: sha256WithRSAEncryption
         24:c7:75:15:c0:75:6f:e0:38:82:0e:cc:94:3f:33:19:f3:85:
         05:a0:d9:86:15:c1:6a:dd:f8:6d:86:b2:ff:d4:c0:bc:f1:a5:
         38:f4:1a:01:d5:0d:e7:94:66:71:07:be:f3:85:3d:98:a5:08:
         38:27:62:ce:79:41:44:98:18:8d:28:8e:c8:83:07:a6:48:cb:
         6f:7f:18:5c:fb:7d:f6:53:b1:b9:1f:63:78:77:3b:ef:3e:20:
         03:02:73:0b:ae:84:80:95:4d:01:e3:2e:37:78:92:7c:dc:fc:
         80:8f:76:21:22:ee:96:6a:71:1a:b6:06:7a:93:3a:1d:db:69:
         86:86:2f:e3:5d:1d:0d:89:15:a1:63:a9:5a:da:35:c8:eb:93:
         e6:df:09:6e:3f:9b:8d:d8:5c:74:19:20:a5:bb:55:4c:88:ff:
         7c:0f:ad:a5:a6:93:de:15:db:20:75:4b:90:3d:05:bd:8c:da:
         41:d4:dc:e9:41:90:f9:a4:ab:ba:5c:dd:61:31:25:da:68:71:
         39:83:bc:a9:7e:4b:e4:10:cb:14:c1:ae:f2:5a:df:4f:80:bf:
         81:cb:bc:62:f8:4d:fd:cf:c7:30:42:13:be:69:63:f8:95:43:
         d9:26:bc:83:e7:d7:d4:a4:d0:0c:2b:a0:49:11:0d:ee:e6:12:
         96:d1:d4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----