Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a3a2f32392d3438203d3e20323135343336.roa
File:                     326131343a3763303a3a2f32392d3438203d3e20323135343336.roa (raw, json)
Hash identifier:          9fDKMiSFLBdrsEiMtPM5RMrpyf6TdaUCYfgnVcPTTNw=
Subject key identifier:   9E:52:7F:DA:0F:6B:99:59:B1:63:04:6B:A8:E9:92:0A:C7:3E:A1:78
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       3F369A5FC7D649CAF262B7FB7220C60C62A00449
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a3a2f32392d3438203d3e20323135343336.roa
Signing time:             Thu 22 Feb 2024 14:36:16 +0000
ROA not before:           Thu 22 Feb 2024 14:31:16 +0000
ROA not after:            Thu 20 Feb 2025 14:36:16 +0000
asID:                     215436
IP address blocks:        2a14:7c0::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:36:9a:5f:c7:d6:49:ca:f2:62:b7:fb:72:20:c6:0c:62:a0:04:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Feb 22 14:31:16 2024 GMT
            Not After : Feb 20 14:36:16 2025 GMT
        Subject: CN=9E527FDA0F6B9959B163046BA8E9920AC73EA178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:63:9c:0b:97:cf:19:52:12:a5:de:7a:d6:2b:
                    2d:f6:d4:9e:48:51:96:91:a8:be:78:69:e3:2d:84:
                    9f:70:3d:42:3f:c0:cd:24:76:9d:12:a9:18:1f:63:
                    6d:eb:fc:24:24:25:66:89:7f:4f:41:8c:df:11:f4:
                    71:78:79:53:49:ab:4d:89:84:86:ec:41:bc:a0:84:
                    26:03:7e:5f:dd:f9:8d:7a:0e:2b:78:81:d8:50:06:
                    e0:aa:e9:75:35:50:27:a0:be:5e:9c:e9:96:df:81:
                    5f:6c:1b:7f:af:68:3e:fc:a7:e5:65:95:e6:98:33:
                    08:43:98:12:ca:bc:50:e1:34:21:14:e4:18:ac:76:
                    fe:fc:ba:7e:11:cd:5c:d8:c5:2f:9c:99:d8:bd:fc:
                    25:4e:14:4d:66:a7:cc:5c:12:ec:aa:82:90:ea:50:
                    32:e3:ad:25:b6:6b:8e:9e:15:7a:bc:38:b4:9e:c1:
                    cf:64:bc:cb:43:ca:ad:4b:dd:ff:71:c4:a5:98:2a:
                    90:1c:47:54:55:33:33:b5:f3:73:79:06:c6:7b:f0:
                    63:b0:34:d4:8c:c1:96:0f:42:85:e7:17:60:cd:da:
                    9f:3b:39:82:94:c4:77:9e:dd:2e:5b:b8:22:03:87:
                    9d:30:fe:20:95:9f:a4:3f:5f:b8:83:1a:a8:7d:a2:
                    1f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:52:7F:DA:0F:6B:99:59:B1:63:04:6B:A8:E9:92:0A:C7:3E:A1:78
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a3a2f32392d3438203d3e20323135343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         94:38:67:a3:2c:bb:a7:88:47:f4:b3:52:38:ac:f0:52:27:e2:
         bf:6b:b7:63:44:74:49:ca:07:34:fd:22:3d:31:a3:dc:57:9c:
         51:a6:68:34:10:73:97:d2:a0:66:70:29:d1:95:9a:16:65:c7:
         8c:1a:d2:47:41:4c:d0:b9:f4:73:f3:f1:b3:28:08:b7:2b:5f:
         67:9c:84:be:c5:c0:0b:13:8c:da:6d:17:4b:3a:1c:da:d9:2f:
         35:d8:ce:d3:1b:b7:7d:f4:44:fc:26:f5:c6:b6:ac:76:d1:78:
         af:5f:33:2b:fd:6a:0f:55:a6:39:18:2b:85:dc:5b:92:74:73:
         af:27:33:1e:cb:5d:0b:32:21:fc:5e:bf:fc:31:8d:5c:48:5d:
         fb:3a:3c:b0:49:ac:36:0b:9e:b7:f6:f2:6d:75:9c:5e:ce:8a:
         85:76:0e:e5:10:64:dc:bf:b1:5c:e6:b3:26:29:34:3e:96:4e:
         42:d1:32:a6:29:1d:2b:d9:68:f4:6b:e9:dc:5f:fd:57:0a:68:
         8b:94:85:a0:49:cd:85:5b:68:7f:d6:f0:0d:83:57:78:2f:94:
         fb:58:bf:1a:ba:9c:d7:77:61:56:4d:ae:52:55:bb:94:21:e2:
         57:41:0d:06:03:1d:8d:58:3e:9b:e2:7b:ac:fb:7f:91:0e:39:
         ff:09:87:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----