Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a316530303a3a2f34302d3438203d3e20323132323934.roa
File:                     326131343a3763303a316530303a3a2f34302d3438203d3e20323132323934.roa (raw, json)
Hash identifier:          diRgu4Z5fhyHt6t+6KN21uzXVE+0Kjys5/08r9TE+0Q=
Subject key identifier:   C1:2E:DA:54:16:CE:B2:34:DD:E7:D5:E8:A8:BA:34:E7:12:6C:93:FF
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       36ABBCC27AE372F8426802316F72A98945B92B30
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a316530303a3a2f34302d3438203d3e20323132323934.roa
Signing time:             Thu 11 Apr 2024 13:29:15 +0000
ROA not before:           Thu 11 Apr 2024 13:24:15 +0000
ROA not after:            Thu 10 Apr 2025 13:29:15 +0000
asID:                     212294
IP address blocks:        2a14:7c0:1e00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ab:bc:c2:7a:e3:72:f8:42:68:02:31:6f:72:a9:89:45:b9:2b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Apr 11 13:24:15 2024 GMT
            Not After : Apr 10 13:29:15 2025 GMT
        Subject: CN=C12EDA5416CEB234DDE7D5E8A8BA34E7126C93FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:da:7f:9d:96:10:98:11:06:34:90:97:c6:7d:
                    c8:09:09:03:cd:3a:49:8e:db:92:22:15:11:70:27:
                    bd:67:fd:e8:df:8a:85:3d:1c:30:d8:f4:74:39:46:
                    d7:f4:ff:02:1e:3b:1c:b1:3a:bd:06:e2:cc:6a:51:
                    1f:c3:48:fd:64:dd:7d:c8:78:b4:1a:01:cc:20:1d:
                    b8:97:54:49:84:b8:35:6a:50:30:a0:79:df:83:4b:
                    97:80:c4:eb:ae:1c:41:83:f0:4d:9c:92:a9:29:0d:
                    4c:5b:a8:cc:aa:f7:a8:8e:0c:d0:81:cb:0a:dd:c7:
                    3c:79:4f:29:b5:93:2e:0f:42:df:71:7f:70:3c:13:
                    6f:38:27:29:26:3c:a2:9f:35:97:96:1c:2d:15:06:
                    49:32:8b:9b:b7:6d:28:89:25:94:be:b7:ba:c1:61:
                    3f:12:4d:ad:bd:19:37:a4:09:87:bf:cb:95:8d:47:
                    d4:35:cd:15:bd:f4:ba:d4:05:54:39:b9:ad:3f:02:
                    33:9e:ae:c6:0b:4d:df:a7:ea:9c:2c:8f:8b:01:44:
                    38:5d:bc:db:b3:53:9e:83:43:e7:09:f1:6a:45:c1:
                    a4:3a:62:40:02:5b:b4:9e:a7:6e:aa:d7:02:21:f3:
                    6d:a4:e5:2f:10:0e:16:5f:38:48:df:33:60:15:41:
                    9e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2E:DA:54:16:CE:B2:34:DD:E7:D5:E8:A8:BA:34:E7:12:6C:93:FF
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a316530303a3a2f34302d3438203d3e20323132323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:1e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         75:67:1c:ac:82:b0:84:d6:51:4a:9e:26:08:79:9a:9f:65:07:
         0b:4c:7e:a0:47:23:ca:0a:ea:3d:7a:d1:1b:38:15:8b:36:96:
         72:8b:1d:7c:1e:ce:c1:e2:19:7e:4d:93:1d:9d:ec:4c:a1:a8:
         9a:bc:be:6c:9e:5d:68:26:87:19:88:5a:fc:f6:1b:1b:53:dc:
         b2:9d:62:08:9d:42:f1:bd:d0:2c:52:ac:e8:d3:1e:4c:6f:42:
         8d:bd:5d:95:0c:f8:1b:82:17:14:93:1a:63:1f:f6:d9:32:37:
         4c:ce:e4:6c:5c:86:df:4f:57:10:b6:9c:f3:d4:c1:6c:8d:33:
         ee:72:dc:f0:ca:77:ad:3c:f4:e3:2f:e5:d4:77:76:dc:7a:de:
         05:e1:b1:8d:7e:f2:71:f2:a4:d0:c7:ba:2a:a2:df:41:11:63:
         8a:07:e2:77:9b:b8:26:64:20:1b:50:7f:ce:df:71:60:7a:e9:
         88:1b:b0:bd:d4:9c:cb:62:e6:a2:e2:5b:92:a7:f2:88:78:f1:
         3f:7e:07:fc:6c:e1:3d:61:bb:90:8e:da:fc:9f:8b:56:b3:b2:
         94:e3:96:85:62:46:f0:aa:09:8e:7f:d2:a9:98:6d:19:ef:c8:
         03:b0:41:cb:e6:eb:c5:79:54:93:db:19:1c:eb:fe:18:3c:51:
         2d:e0:2e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----