Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a3830303a3a2f33382d3338203d3e20323135353331.roa
File:                     326131343a3763303a3830303a3a2f33382d3338203d3e20323135353331.roa (raw, json)
Hash identifier:          kd0jX29+lBw/jF1dgNUQLGiTG7rKzR6Xbx1x9okoNyw=
Subject key identifier:   40:BA:B0:09:29:D6:51:30:09:EE:0C:E4:56:6D:4C:12:F0:03:1D:92
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       0E4A7B9C9F9317A4D40EB8008E1815148EE35D7E
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a3830303a3a2f33382d3338203d3e20323135353331.roa
Signing time:             Sun 25 Feb 2024 11:03:47 +0000
ROA not before:           Sun 25 Feb 2024 10:58:47 +0000
ROA not after:            Sun 23 Feb 2025 11:03:47 +0000
asID:                     215531
IP address blocks:        2a14:7c0:800::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:4a:7b:9c:9f:93:17:a4:d4:0e:b8:00:8e:18:15:14:8e:e3:5d:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Feb 25 10:58:47 2024 GMT
            Not After : Feb 23 11:03:47 2025 GMT
        Subject: CN=40BAB00929D6513009EE0CE4566D4C12F0031D92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d3:70:c4:3d:e7:09:28:45:f7:a7:da:cf:f2:
                    24:0d:cc:f2:db:bd:af:04:a5:91:b5:22:25:08:aa:
                    24:3b:da:14:40:e7:55:74:2a:d3:52:71:60:1e:66:
                    fe:2f:1f:77:dc:6e:6b:38:7d:7f:7b:15:d7:e3:55:
                    6f:27:e0:55:cc:12:c7:f8:ff:7d:b5:6a:d0:15:5c:
                    ea:52:cb:ec:d2:5b:20:2e:f3:52:69:f5:f5:36:4b:
                    08:4a:9e:c2:bc:41:20:21:86:cd:78:73:ea:c5:fa:
                    50:32:04:34:c2:9c:74:75:82:f0:42:23:bf:50:ef:
                    85:98:38:38:d5:fa:a7:e7:dd:8b:ef:02:8c:ca:39:
                    28:06:3c:21:40:8a:01:a9:79:12:15:12:bb:4c:ea:
                    be:11:16:98:73:10:ec:e9:6e:68:80:27:4f:40:5f:
                    60:58:b6:05:ac:3e:5b:fd:5d:75:a8:47:be:65:92:
                    67:e0:2d:5b:5e:db:eb:a4:38:34:cc:2c:b0:c1:ba:
                    39:15:c7:55:71:07:ae:fe:08:50:53:93:dc:e3:3a:
                    13:c8:38:fe:3a:f0:f4:bd:8c:34:31:d6:ff:77:a1:
                    60:32:29:a8:14:43:09:ff:60:97:27:4d:2a:4f:40:
                    9c:a3:27:1b:b7:01:c7:7e:5b:9a:07:59:ff:cd:a5:
                    5a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:BA:B0:09:29:D6:51:30:09:EE:0C:E4:56:6D:4C:12:F0:03:1D:92
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a3830303a3a2f33382d3338203d3e20323135353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:800::/38

    Signature Algorithm: sha256WithRSAEncryption
         7a:8d:48:a8:28:b5:95:f4:83:ed:21:f4:82:cc:32:e0:ee:3e:
         66:fe:fe:1d:30:e3:6d:12:92:37:42:4c:32:7d:c7:b4:9d:77:
         72:b7:7a:74:a6:3a:e4:80:a7:3a:81:35:37:57:24:1f:51:74:
         b5:a6:b9:6b:33:40:c7:ad:d7:a5:8d:2f:c5:dc:0a:cd:27:cc:
         17:0a:0c:6d:b0:ad:27:03:78:89:51:9f:22:fb:eb:f2:c2:f2:
         01:01:5b:dc:b1:3b:c3:6c:f4:8f:ab:d8:4b:a2:99:d7:73:ed:
         1d:90:55:66:79:a2:f1:da:4e:78:97:84:76:fc:51:c0:26:a3:
         97:ad:d8:9f:3f:98:83:f8:5a:4f:34:06:13:54:a1:88:e9:8d:
         6b:28:a4:ca:83:13:93:a8:ef:21:8b:e7:b1:82:42:22:0d:d3:
         d6:a4:38:8d:a5:b3:9c:1d:67:ef:b9:00:54:41:33:1b:87:70:
         78:a4:0d:d6:43:be:08:bc:90:88:60:6d:5d:e6:40:52:85:2f:
         57:db:ce:aa:31:57:4e:75:af:ad:b0:b6:c8:39:34:10:b3:e5:
         2e:51:9f:bf:a3:7c:a5:b0:0c:ad:6b:a3:9d:2a:a7:ae:02:0a:
         1e:ed:25:8e:8c:5e:f0:06:f4:08:3e:e7:99:40:fd:b5:f8:38:
         c6:e6:98:d1
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIUDkp7nJ+TF6TUDrgAjhgVFI7jXX4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ0NDJlMzNhOGY2MTU4MGI2YjRkZmM0ODI4ZDk1ZTA3
ODkxZjRiYzAeFw0yNDAyMjUxMDU4NDdaFw0yNTAyMjMxMTAzNDdaMDMxMTAvBgNV
BAMTKDQwQkFCMDA5MjlENjUxMzAwOUVFMENFNDU2NkQ0QzEyRjAwMzFEOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs03DEPecJKEX3p9rP8iQNzPLb
va8EpZG1IiUIqiQ72hRA51V0KtNScWAeZv4vH3fcbms4fX97FdfjVW8n4FXMEsf4
/321atAVXOpSy+zSWyAu81Jp9fU2SwhKnsK8QSAhhs14c+rF+lAyBDTCnHR1gvBC
I79Q74WYODjV+qfn3YvvAozKOSgGPCFAigGpeRIVErtM6r4RFphzEOzpbmiAJ09A
X2BYtgWsPlv9XXWoR75lkmfgLVte2+ukODTMLLDBujkVx1VxB67+CFBTk9zjOhPI
OP468PS9jDQx1v93oWAyKagUQwn/YJcnTSpPQJyjJxu3Acd+W5oHWf/NpVoRAgMB
AAGjggJFMIICQTAdBgNVHQ4EFgQUQLqwCSnWUTAJ7gzkVm1MEvADHZIwHwYDVR0j
BBgwFoAUdEQuM6j2FYC2tN/Ego2V4HiR9LwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWQ5OTgwODItYTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4
NjM5LzAvNzQ0NDJFMzNBOEY2MTU4MEI2QjRERkM0ODI4RDk1RTA3ODkxRjRCQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RFUXVNNmoyRllDMnROX0VnbzJWNEhp
UjlMdy5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWQ5OTgwODIt
YTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4NjM5LzAvMzI2MTMxMzQzYTM3NjMzMDNh
MzgzMDMwM2EzYTJmMzMzODJkMzMzODIwM2QzZTIwMzIzMTM1MzUzMzMxLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIA
AjAIAwYCKhQHwAgwDQYJKoZIhvcNAQELBQADggEBAHqNSKgotZX0g+0h9ILMMuDu
Pmb+/h0w420SkjdCTDJ9x7Sdd3K3enSmOuSApzqBNTdXJB9RdLWmuWszQMet16WN
L8XcCs0nzBcKDG2wrScDeIlRnyL76/LC8gEBW9yxO8Ns9I+r2Euimddz7R2QVWZ5
ovHaTniXhHb8UcAmo5et2J8/mIP4Wk80BhNUoYjpjWsopMqDE5Oo7yGL57GCQiIN
09akOI2ls5wdZ++5AFRBMxuHcHikDdZDvgi8kIhgbV3mQFKFL1fbzqoxV051r62w
tsg5NBCz5S5Rn7+jfKWwDK1ro50qp64CCh7tJY6MXvAG9Ag+55lA/bX4OMbmmNE=
-----END CERTIFICATE-----