Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a343830303a3a2f34302d3438203d3e20323135323932.roa
File:                     326131343a3763303a343830303a3a2f34302d3438203d3e20323135323932.roa (raw, json)
Hash identifier:          uvZyieoD+puAs+saAopXNlaVq78zkv1rPNUuDyzHWV0=
Subject key identifier:   64:A5:A3:EE:88:25:FC:3B:B9:9C:13:D8:0B:B6:9E:C9:78:F6:00:D5
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       733D43908F251EC0684D308871B2C41A816B93E1
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a343830303a3a2f34302d3438203d3e20323135323932.roa
Signing time:             Sun 12 May 2024 09:41:37 +0000
ROA not before:           Sun 12 May 2024 09:36:37 +0000
ROA not after:            Sun 11 May 2025 09:41:37 +0000
asID:                     215292
IP address blocks:        2a14:7c0:4800::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:3d:43:90:8f:25:1e:c0:68:4d:30:88:71:b2:c4:1a:81:6b:93:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: May 12 09:36:37 2024 GMT
            Not After : May 11 09:41:37 2025 GMT
        Subject: CN=64A5A3EE8825FC3BB99C13D80BB69EC978F600D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f1:e8:9c:44:3d:56:a2:9a:f4:13:85:e2:5a:
                    7f:42:b3:68:5f:8f:8f:95:e1:15:2d:a2:f6:03:d2:
                    a3:ff:f2:b2:09:fe:b4:8d:7a:f5:b0:e5:af:cc:f9:
                    be:d8:0b:82:b1:a2:35:1e:8c:64:ea:9e:31:90:86:
                    59:1c:83:77:83:4e:16:f0:f6:6a:60:d2:ca:5e:29:
                    d3:70:0d:bd:ca:db:1a:7d:b6:d6:81:c7:c0:28:42:
                    ce:ce:fc:10:0c:04:42:8b:fa:58:ae:4b:3f:22:a6:
                    88:41:80:ee:07:17:38:4a:00:20:03:59:df:a2:19:
                    9f:fd:b3:7a:9b:b1:05:bf:ae:11:88:f6:84:f8:90:
                    9a:03:ee:ad:1b:62:c1:d2:b4:8b:cf:c1:ca:21:bd:
                    6a:e1:f7:8e:68:27:ad:51:d4:ee:09:d9:5c:0c:07:
                    e4:c3:a1:81:52:2a:c0:f8:f0:1d:af:90:71:84:3e:
                    57:b0:f4:f3:0e:c8:b5:2b:cd:0e:26:a7:92:7e:d6:
                    d0:d5:d3:2a:9a:b9:a1:eb:82:94:3d:d4:aa:06:6b:
                    0a:10:3f:ea:00:66:a7:6a:f2:86:81:10:b2:40:4c:
                    75:46:e9:9f:b0:90:d7:85:07:3c:84:15:e0:e0:24:
                    fa:24:44:f8:40:50:42:b8:e5:73:85:87:9d:07:fc:
                    23:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A5:A3:EE:88:25:FC:3B:B9:9C:13:D8:0B:B6:9E:C9:78:F6:00:D5
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a343830303a3a2f34302d3438203d3e20323135323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:4800::/40

    Signature Algorithm: sha256WithRSAEncryption
         45:45:fa:87:40:1d:49:ea:b6:a3:16:d7:25:2c:0e:98:86:6b:
         40:a3:31:82:23:5c:44:ba:83:25:e9:45:fc:42:f4:31:7d:00:
         41:a0:f9:d3:a2:33:15:47:a7:3d:14:3b:6a:ef:95:1f:c3:b3:
         3b:d0:ca:63:42:64:46:73:d3:93:4a:a6:44:98:4e:ea:97:85:
         dd:b5:ee:21:84:ab:71:ac:c7:54:50:8b:0b:a6:79:ac:2a:ff:
         50:f2:9f:2b:5a:da:4f:6e:a5:bc:fa:f3:8d:69:6d:0b:94:05:
         1d:4f:00:3e:24:e3:a8:07:b5:c4:9b:d5:48:59:fa:a0:81:8b:
         2a:c6:8b:36:76:08:d5:22:1f:c1:bb:16:62:65:75:d7:d6:90:
         8c:22:46:f4:d9:82:5d:86:73:28:c5:19:b6:28:be:e8:6a:af:
         0b:9e:22:dc:a8:39:04:ff:a9:ab:87:b4:11:f3:46:52:ea:55:
         02:58:21:55:10:5b:24:dc:d4:50:26:bc:f9:03:82:76:e0:8a:
         b0:f1:61:26:99:2b:02:3c:53:37:12:34:68:ce:eb:91:aa:d7:
         38:6f:a3:d3:de:44:8b:47:ff:fb:19:df:51:a8:9c:d5:c7:08:
         af:61:e6:be:ff:bb:a6:3e:51:76:42:34:d2:20:d1:98:cb:6c:
         a2:0c:04:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----