Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a323830303a3a2f33382d3438203d3e203531333936.roa
File:                     326131343a3763303a323830303a3a2f33382d3438203d3e203531333936.roa (raw, json)
Hash identifier:          bvyC3PuoAJho06EAtABYdKXIYcKdlkofn7rq7GOdlKA=
Subject key identifier:   EE:E1:8E:C3:49:2C:C4:F7:CE:CE:5F:68:86:38:F9:35:92:BA:DC:77
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       7CD296AEA391ED34A51B11FAEEDF3BD3223904C6
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a323830303a3a2f33382d3438203d3e203531333936.roa
Signing time:             Fri 05 Apr 2024 13:53:56 +0000
ROA not before:           Fri 05 Apr 2024 13:48:56 +0000
ROA not after:            Fri 04 Apr 2025 13:53:56 +0000
asID:                     51396
IP address blocks:        2a14:7c0:2800::/38 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d2:96:ae:a3:91:ed:34:a5:1b:11:fa:ee:df:3b:d3:22:39:04:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Apr  5 13:48:56 2024 GMT
            Not After : Apr  4 13:53:56 2025 GMT
        Subject: CN=EEE18EC3492CC4F7CECE5F688638F93592BADC77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c7:3e:10:39:4d:a9:d7:21:59:1d:34:1d:56:
                    11:af:61:d7:37:90:48:20:ed:12:54:b0:99:e0:0f:
                    fb:2f:a8:9f:fe:ba:36:f3:f1:55:de:49:ab:69:78:
                    ef:bd:aa:68:99:f4:cd:1e:1b:ee:c8:b9:83:26:ca:
                    d5:29:a8:69:4a:f5:89:cd:38:d1:d4:28:e9:e8:ef:
                    a3:5b:90:9c:26:09:f9:bc:b8:82:d2:b9:3d:ff:56:
                    91:e9:ec:93:f2:43:89:ed:3c:3f:df:46:bd:3a:c6:
                    51:66:44:14:1e:a5:83:d5:b7:e2:00:f2:cf:f0:f8:
                    12:46:29:a6:42:4e:f6:43:d2:05:88:16:05:71:c9:
                    49:8b:e5:08:1a:0f:11:bc:f1:76:b5:06:60:4d:98:
                    60:a8:4d:9f:e9:e1:61:e0:22:ce:cc:8d:8d:cb:c4:
                    00:5f:99:84:73:36:0f:ef:56:1e:1a:97:b2:1a:c9:
                    ef:b4:a6:44:28:1b:fd:f9:60:fc:68:52:30:3f:39:
                    58:ee:2b:68:a4:d1:1b:a1:11:20:8e:fd:62:4a:18:
                    00:8c:65:be:75:ec:92:b4:24:39:38:21:ac:67:2e:
                    ca:8c:99:f9:17:85:44:d4:a0:cc:bf:5c:e4:9e:7e:
                    f0:9e:2c:6f:03:ff:bc:22:50:cb:56:c4:5e:a5:93:
                    5e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E1:8E:C3:49:2C:C4:F7:CE:CE:5F:68:86:38:F9:35:92:BA:DC:77
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a323830303a3a2f33382d3438203d3e203531333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:2800::/38

    Signature Algorithm: sha256WithRSAEncryption
         1d:86:a6:9c:8e:f5:81:fa:21:e0:94:73:b8:90:b7:c9:a8:36:
         52:c8:55:6d:5a:2f:c2:12:21:45:d7:3a:85:32:2c:8f:84:8c:
         36:bc:05:b3:da:d4:28:61:f6:be:4b:32:cd:26:63:40:f4:2c:
         7f:a0:f0:f3:2d:82:2f:21:7a:b9:12:e2:32:1c:8d:9e:72:59:
         69:a3:1e:67:14:70:60:fa:6c:9c:48:d2:43:d8:d3:62:e4:4c:
         00:85:61:6a:8e:10:5a:d4:17:bd:e8:e4:01:92:a3:09:fc:42:
         a4:87:94:8c:f7:8c:86:c0:53:68:86:81:74:f2:56:48:98:b3:
         d2:56:d5:fb:bc:e8:80:74:a8:25:8d:c9:b0:c7:6a:1f:0f:5d:
         c2:74:8a:27:23:49:12:6a:3b:fa:72:a8:34:9c:26:c4:59:8d:
         0b:0f:bb:e8:8c:07:c8:12:69:f0:be:7d:6b:e4:14:8d:c2:2d:
         12:97:6a:d3:ae:27:d2:58:67:1b:17:97:0e:0b:65:fa:c6:00:
         c7:14:47:51:24:68:24:4f:54:62:2e:93:c6:b3:89:13:60:c7:
         ba:ad:86:3f:56:02:d0:6b:1a:45:7a:aa:8a:43:f7:6e:4e:7f:
         89:c5:44:c6:cd:17:2e:22:3c:b1:a6:4a:2c:26:0b:2a:64:07:
         f6:02:fc:a0
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIUfNKWrqOR7TSlGxH67t870yI5BMYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ0NDJlMzNhOGY2MTU4MGI2YjRkZmM0ODI4ZDk1ZTA3
ODkxZjRiYzAeFw0yNDA0MDUxMzQ4NTZaFw0yNTA0MDQxMzUzNTZaMDMxMTAvBgNV
BAMTKEVFRTE4RUMzNDkyQ0M0RjdDRUNFNUY2ODg2MzhGOTM1OTJCQURDNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMxz4QOU2p1yFZHTQdVhGvYdc3
kEgg7RJUsJngD/svqJ/+ujbz8VXeSatpeO+9qmiZ9M0eG+7IuYMmytUpqGlK9YnN
ONHUKOno76NbkJwmCfm8uILSuT3/VpHp7JPyQ4ntPD/fRr06xlFmRBQepYPVt+IA
8s/w+BJGKaZCTvZD0gWIFgVxyUmL5QgaDxG88Xa1BmBNmGCoTZ/p4WHgIs7MjY3L
xABfmYRzNg/vVh4al7Iaye+0pkQoG/35YPxoUjA/OVjuK2ik0RuhESCO/WJKGACM
Zb517JK0JDk4IaxnLsqMmfkXhUTUoMy/XOSefvCeLG8D/7wiUMtWxF6lk16rAgMB
AAGjggJFMIICQTAdBgNVHQ4EFgQU7uGOw0ksxPfOzl9ohjj5NZK63HcwHwYDVR0j
BBgwFoAUdEQuM6j2FYC2tN/Ego2V4HiR9LwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWQ5OTgwODItYTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4
NjM5LzAvNzQ0NDJFMzNBOEY2MTU4MEI2QjRERkM0ODI4RDk1RTA3ODkxRjRCQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RFUXVNNmoyRllDMnROX0VnbzJWNEhp
UjlMdy5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWQ5OTgwODIt
YTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4NjM5LzAvMzI2MTMxMzQzYTM3NjMzMDNh
MzIzODMwMzAzYTNhMmYzMzM4MmQzNDM4MjAzZDNlMjAzNTMxMzMzOTM2LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIA
AjAIAwYCKhQHwCgwDQYJKoZIhvcNAQELBQADggEBAB2GppyO9YH6IeCUc7iQt8mo
NlLIVW1aL8ISIUXXOoUyLI+EjDa8BbPa1Chh9r5LMs0mY0D0LH+g8PMtgi8herkS
4jIcjZ5yWWmjHmcUcGD6bJxI0kPY02LkTACFYWqOEFrUF73o5AGSown8QqSHlIz3
jIbAU2iGgXTyVkiYs9JW1fu86IB0qCWNybDHah8PXcJ0iicjSRJqO/pyqDScJsRZ
jQsPu+iMB8gSafC+fWvkFI3CLRKXatOuJ9JYZxsXlw4LZfrGAMcUR1EkaCRPVGIu
k8aziRNgx7qthj9WAtBrGkV6qopD925Of4nFRMbNFy4iPLGmSiwmCypkB/YC/KA=
-----END CERTIFICATE-----