Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a333430303a3a2f33382d3438203d3e20323135313237.roa
File:                     326131343a3763303a333430303a3a2f33382d3438203d3e20323135313237.roa (raw, json)
Hash identifier:          /g0pvcDyy30YRjUPGcgTIJPi8OOrsAvVkFRtC4aoORI=
Subject key identifier:   5E:04:1E:C7:04:86:75:BF:47:9A:D5:DB:D5:85:49:E4:89:ED:2E:D0
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       2E7E0A4CD4A988C7C87BA9E4E49B779089F6F6A0
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a333430303a3a2f33382d3438203d3e20323135313237.roa
Signing time:             Thu 25 Apr 2024 16:12:11 +0000
ROA not before:           Thu 25 Apr 2024 16:07:11 +0000
ROA not after:            Thu 24 Apr 2025 16:12:11 +0000
asID:                     215127
IP address blocks:        2a14:7c0:3400::/38 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:7e:0a:4c:d4:a9:88:c7:c8:7b:a9:e4:e4:9b:77:90:89:f6:f6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Apr 25 16:07:11 2024 GMT
            Not After : Apr 24 16:12:11 2025 GMT
        Subject: CN=5E041EC7048675BF479AD5DBD58549E489ED2ED0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a3:db:cb:b6:6d:0c:16:28:9d:3a:5c:39:bd:
                    8c:82:a4:bc:81:98:ab:14:96:c2:86:44:bd:33:82:
                    fe:99:cb:25:b6:8a:1c:a2:87:4d:c0:d3:6c:7e:0c:
                    e3:56:1d:e7:75:7f:34:64:6c:e6:2b:b5:c3:cd:59:
                    e7:31:e2:0b:19:ab:96:03:ad:e6:76:b0:c1:9e:43:
                    c4:b5:9b:75:f9:9a:9d:37:97:79:d4:eb:a0:1f:93:
                    b4:9a:d3:56:f9:f3:a2:04:95:cc:65:41:5c:8d:f8:
                    10:98:d3:5e:9c:03:0c:ac:fa:60:d2:50:6d:ec:ef:
                    6a:e3:60:33:f1:29:56:64:91:7b:0e:32:fe:35:e3:
                    53:ed:2f:f9:cd:89:5e:e2:a4:b0:55:57:88:cd:cc:
                    8b:05:a3:31:76:ea:29:98:e1:17:72:34:fb:a8:8c:
                    70:3e:c4:b0:cd:66:d5:e5:0a:ae:5d:ba:9d:40:7d:
                    7c:92:0a:fa:38:11:6e:6d:d5:22:f4:2d:dc:f4:4a:
                    b0:21:6b:bc:74:cf:fa:05:cd:4a:78:88:7d:c9:22:
                    07:1a:65:25:fc:96:1b:97:db:0e:50:ba:3d:19:64:
                    8e:12:ad:2d:6e:1c:4b:8d:14:69:6d:d1:8d:52:23:
                    ea:ce:df:15:a7:75:a9:a4:2c:09:6e:3d:e6:de:c7:
                    4c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:04:1E:C7:04:86:75:BF:47:9A:D5:DB:D5:85:49:E4:89:ED:2E:D0
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a333430303a3a2f33382d3438203d3e20323135313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:3400::/38

    Signature Algorithm: sha256WithRSAEncryption
         a0:fd:c8:11:77:6b:0d:f3:bd:f6:48:60:bd:1f:6d:9a:69:ad:
         3c:df:75:81:0b:7e:62:72:a1:28:6b:45:64:a1:ff:0a:ef:d5:
         2c:e3:85:2a:fd:3b:2e:67:f7:e7:d3:e1:0f:3c:41:75:e5:74:
         f8:a3:da:b2:26:20:5e:42:81:3a:2c:d4:c0:48:9d:4b:aa:c5:
         ce:b4:c9:1b:f1:17:1a:21:5b:85:fd:1c:42:17:aa:73:b7:e3:
         37:e4:b4:76:25:44:f4:4d:ec:2d:f3:23:04:ac:12:3c:e5:e9:
         00:40:c9:67:61:c2:62:be:22:52:4b:d7:dc:5b:73:b4:b1:0a:
         f8:29:44:2d:67:8b:de:35:fa:88:57:6b:a3:48:b7:77:3a:b0:
         a0:12:e9:9f:6a:50:d3:f2:17:9d:7a:7e:e0:65:8e:c7:81:ee:
         9a:4c:50:b6:8b:1a:38:d7:02:ac:41:d1:b7:28:20:db:81:77:
         15:ea:18:b7:3c:76:ec:f7:e0:97:d7:97:7a:23:31:ee:93:56:
         ff:78:eb:38:f0:22:67:c2:8c:38:2d:73:84:ac:63:d2:6e:14:
         44:66:4e:27:bd:93:c1:5e:43:68:90:bf:b8:03:59:d5:82:26:
         8a:65:54:93:db:d9:1f:31:a2:0d:71:9c:96:5d:79:fd:ae:4e:
         41:95:f5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----