Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a333830303a3a2f34342d3438203d3e20323135353830.roa
File:                     326131343a3763303a333830303a3a2f34342d3438203d3e20323135353830.roa (raw, json)
Hash identifier:          EX2pQ5Uaea3ZGwIiHpJrH6Ghc9azDwTqYKwyxql76yI=
Subject key identifier:   04:92:93:FA:A6:A5:18:0F:CB:51:2F:33:F7:06:08:C3:A9:A9:5F:FD
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       2110B829A174EF1C99CA758C01D998ECA1F663F1
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a333830303a3a2f34342d3438203d3e20323135353830.roa
Signing time:             Sun 05 May 2024 20:29:21 +0000
ROA not before:           Sun 05 May 2024 20:24:21 +0000
ROA not after:            Sun 04 May 2025 20:29:21 +0000
asID:                     215580
IP address blocks:        2a14:7c0:3800::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:10:b8:29:a1:74:ef:1c:99:ca:75:8c:01:d9:98:ec:a1:f6:63:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: May  5 20:24:21 2024 GMT
            Not After : May  4 20:29:21 2025 GMT
        Subject: CN=049293FAA6A5180FCB512F33F70608C3A9A95FFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a2:01:f6:38:dc:a4:3a:18:3f:bb:76:47:5f:
                    05:0a:14:ca:0b:92:30:df:95:4c:73:5d:53:c3:e3:
                    56:8e:e0:52:e4:81:46:dc:89:6e:2e:b0:ce:7c:92:
                    e9:c1:40:77:56:ad:8b:b8:24:cd:c9:ae:8b:24:9e:
                    62:6d:e8:06:34:49:72:d2:33:66:6a:b5:e3:9f:3e:
                    ba:83:1a:c7:07:56:80:cf:6f:4d:24:ed:6f:36:36:
                    7b:08:89:cb:b9:aa:fa:50:dd:26:d3:24:b9:45:6c:
                    6d:5e:ea:ff:02:53:07:98:93:f8:d7:5a:e2:7f:35:
                    c9:ec:f1:f9:d5:0d:4f:6f:45:38:46:c2:52:c2:22:
                    40:46:e1:8f:7f:68:80:04:da:24:76:2d:45:00:61:
                    03:a5:a3:0f:7b:f5:8f:57:7f:f9:b7:21:71:19:0f:
                    94:0f:7d:a1:b0:20:7a:ed:b5:e8:d1:21:4e:31:1b:
                    23:12:fa:ea:ef:7b:95:c0:c9:17:7b:b7:f1:a7:17:
                    5c:1f:bc:17:65:0f:5d:27:ff:8a:80:d7:22:c2:08:
                    f2:94:0f:ae:f1:e6:c8:f7:48:46:c2:e6:ce:16:8d:
                    f9:69:b9:96:71:74:94:a9:ae:90:4c:c1:71:0b:3a:
                    36:f3:1e:a1:f3:08:28:e6:df:43:4f:83:61:55:99:
                    43:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:92:93:FA:A6:A5:18:0F:CB:51:2F:33:F7:06:08:C3:A9:A9:5F:FD
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a333830303a3a2f34342d3438203d3e20323135353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:3800::/44

    Signature Algorithm: sha256WithRSAEncryption
         06:ad:fa:5c:16:11:22:a9:1e:7a:fa:6c:62:53:63:03:c6:2b:
         b9:d5:fe:fd:f8:70:31:b6:6e:c0:f9:7f:d0:72:24:b9:c2:7d:
         bf:62:e9:ef:70:19:54:66:97:51:29:d3:5e:94:50:73:f8:43:
         5c:a2:b2:55:a7:a2:d7:91:c5:8b:95:da:49:8e:a8:7a:67:ff:
         fe:45:8c:f1:c0:f0:82:58:35:e8:97:9e:53:d4:0b:73:29:2a:
         af:c8:bc:45:25:46:f0:8c:5f:8e:cd:f7:05:a3:06:bf:70:8c:
         f2:f8:10:20:8b:2f:2f:e9:7f:3c:e9:cb:0b:16:ba:c3:b4:09:
         2e:82:ad:fb:ce:07:e8:44:fc:eb:4d:cb:ca:b0:0a:a8:da:8d:
         63:15:cb:66:7b:41:27:94:85:65:5c:ed:74:8b:61:86:78:7d:
         06:ed:ee:a3:55:d5:c8:45:08:02:57:fe:4b:42:4d:45:6f:cd:
         a6:38:b7:61:3b:69:13:0b:d2:b7:85:2b:35:6e:2e:62:4d:e0:
         90:99:72:6a:46:8b:44:d5:2c:ac:28:0e:1d:9e:43:3f:b2:30:
         05:c4:2c:d9:40:31:a0:b4:8e:d5:df:1c:9c:cf:ee:c5:b2:c0:
         18:83:ea:c3:57:39:0e:7d:8f:33:39:19:c2:ec:c5:c4:cc:d5:
         ab:c0:bb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----