Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a3230303a3a2f34302d3438203d3e20323135333930.roa
File:                     326131343a3763303a3230303a3a2f34302d3438203d3e20323135333930.roa (raw, json)
Hash identifier:          AuOel/3P/h9P3aSxxw5Py3pnnaLmCXZAmj99xT5Ymds=
Subject key identifier:   27:EA:62:66:B5:85:2F:99:D8:5D:E0:85:5F:3E:5E:D7:E0:69:64:D3
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       0B8814ED13DAD4AFD7BBEC17FE328C2C258EDA53
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a3230303a3a2f34302d3438203d3e20323135333930.roa
Signing time:             Fri 01 Mar 2024 17:24:24 +0000
ROA not before:           Fri 01 Mar 2024 17:19:24 +0000
ROA not after:            Fri 28 Feb 2025 17:24:24 +0000
asID:                     215390
IP address blocks:        2a14:7c0:200::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:88:14:ed:13:da:d4:af:d7:bb:ec:17:fe:32:8c:2c:25:8e:da:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Mar  1 17:19:24 2024 GMT
            Not After : Feb 28 17:24:24 2025 GMT
        Subject: CN=27EA6266B5852F99D85DE0855F3E5ED7E06964D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:02:cf:c0:e9:70:e4:64:9c:82:74:4b:7a:a0:
                    19:f2:33:9c:bf:18:c2:d0:b2:88:3b:cc:0f:5c:2d:
                    bc:4f:5a:72:2e:91:d2:84:f7:97:4e:09:b7:35:a7:
                    ff:5a:e9:2d:d7:53:b3:20:0e:f9:f2:fa:3c:11:85:
                    27:5f:9d:3b:ee:9b:2b:12:a6:31:74:4c:b5:67:e3:
                    87:d5:07:0c:06:4d:03:af:7a:ba:91:f4:b3:ce:37:
                    fa:3d:d3:e3:ea:09:28:88:3b:ef:f4:79:08:23:0b:
                    11:fe:e8:d1:b0:d1:5c:a0:49:c7:51:32:17:f0:71:
                    04:e2:1a:53:8d:ca:25:24:47:09:a0:27:9c:f2:21:
                    e9:b6:f7:13:ac:74:f8:3d:12:4b:37:bf:e1:3a:bd:
                    96:5f:52:57:ed:22:47:46:c2:2b:c8:7c:d7:14:0a:
                    82:74:cc:92:e2:97:42:9a:68:8b:a8:8e:bb:2b:3a:
                    84:5b:e6:05:28:e6:ec:f5:a7:b2:67:bc:4e:f5:c8:
                    47:dd:b9:b2:b4:a5:83:2d:56:e4:5b:f9:00:6d:c5:
                    8b:36:f6:42:c3:15:6f:15:38:98:f8:24:48:06:0d:
                    c9:91:84:66:2e:ca:6e:d1:cf:88:f0:9e:68:fe:e4:
                    19:74:c8:ad:54:1f:e2:47:c2:e4:2d:09:a8:6d:51:
                    f7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EA:62:66:B5:85:2F:99:D8:5D:E0:85:5F:3E:5E:D7:E0:69:64:D3
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a3230303a3a2f34302d3438203d3e20323135333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         81:21:9a:1f:57:a9:50:b2:54:85:c9:67:bc:e2:0f:e7:89:ea:
         f9:7a:c6:35:f9:a4:4a:8c:1f:d3:cc:38:6d:f2:7b:5c:a1:2d:
         6d:a5:1e:1f:c6:37:c6:0c:d6:97:8c:9f:b8:19:8b:c5:d1:ff:
         de:87:a4:04:93:d8:c0:ff:ac:ed:d4:ff:f3:d9:6c:ce:26:db:
         c1:66:23:18:7b:89:18:58:80:2e:e4:24:5c:45:2e:22:40:62:
         8b:9c:29:19:8d:4a:7c:eb:0c:25:2d:6a:13:d5:2e:bd:c8:e3:
         03:a1:2b:07:ec:cc:cc:45:19:32:a2:fa:5a:60:8c:c7:c7:fd:
         e8:e0:75:2d:20:3c:34:8c:33:ae:3e:bb:67:ca:ea:bc:43:6e:
         e1:bf:e2:6b:76:92:42:81:ef:56:64:3b:74:8d:15:63:b6:f0:
         ce:dd:ef:6f:ee:eb:53:c8:9d:76:c9:a3:f6:5f:8e:e6:11:db:
         36:d5:77:e0:70:c6:90:55:c8:de:c0:90:f3:71:cf:bd:cd:24:
         18:2e:7e:d6:da:91:80:64:2a:d2:1d:60:86:36:fd:81:69:db:
         41:85:5b:16:7f:3c:67:5e:f1:b3:01:b4:c7:59:7f:8d:f8:76:
         9a:85:47:e2:1f:b3:e9:d0:6a:34:40:c8:7f:c5:0b:62:1d:8c:
         b6:3c:1f:11
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----