Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623030623a3a2f34382d3438203d3e20313938353930.roa
File:                     326131343a3763303a623030623a3a2f34382d3438203d3e20313938353930.roa (raw, json)
Hash identifier:          FQLIvcLmvYGEm5rxhQHVdr4AiWFJ3AUBTtczkxr9n4A=
Subject key identifier:   CD:CC:42:A5:36:C7:83:AD:78:F6:A3:11:F2:D6:F6:0E:8A:3C:E6:98
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       1ABF09F0820AD811350D654DA0DC5E1DBF9D52A1
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623030623a3a2f34382d3438203d3e20313938353930.roa
Signing time:             Sat 16 Mar 2024 13:43:59 +0000
ROA not before:           Sat 16 Mar 2024 13:38:59 +0000
ROA not after:            Sat 15 Mar 2025 13:43:59 +0000
asID:                     198590
IP address blocks:        2a14:7c0:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:bf:09:f0:82:0a:d8:11:35:0d:65:4d:a0:dc:5e:1d:bf:9d:52:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Mar 16 13:38:59 2024 GMT
            Not After : Mar 15 13:43:59 2025 GMT
        Subject: CN=CDCC42A536C783AD78F6A311F2D6F60E8A3CE698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3a:a3:8e:b6:15:aa:b9:88:5e:ea:2a:4e:bd:
                    25:fd:6a:7a:a2:a9:91:18:b4:bd:26:b1:c3:ec:5a:
                    5a:fd:03:e7:be:13:33:09:cb:67:9a:b3:8e:e3:db:
                    f0:93:9d:2d:41:fe:36:82:6a:ff:b8:48:2b:49:80:
                    e2:95:bc:19:80:93:6e:ed:67:e9:48:ba:1e:f6:c4:
                    ad:cc:75:e0:0b:f4:e3:1e:ca:2d:57:2d:41:20:1b:
                    dc:dc:72:78:e9:00:a7:3c:fa:21:75:ac:74:da:26:
                    ee:e9:1f:d0:ca:87:d2:cd:51:26:30:6f:b8:4d:dd:
                    ce:90:9c:5e:74:f6:88:ac:52:69:e6:e5:32:7c:5c:
                    e1:46:52:1e:41:45:25:17:19:5e:b8:7d:b4:80:dc:
                    38:7d:62:06:49:5b:4d:31:fd:e0:f3:75:a4:6d:0a:
                    57:25:8b:bf:a0:58:02:73:fe:8c:7c:b3:aa:3a:52:
                    a8:7b:cb:aa:54:06:7b:82:20:69:d2:92:b3:70:b0:
                    82:cd:bc:60:95:b1:67:38:2b:59:7d:77:31:c9:35:
                    53:fe:78:b5:2c:67:30:58:53:f1:19:90:f8:c2:f2:
                    d2:b1:a9:0c:57:c0:1e:03:c1:52:ad:74:5e:e3:d1:
                    29:30:59:91:97:83:e0:a9:18:c7:e2:fb:c9:75:89:
                    82:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CC:42:A5:36:C7:83:AD:78:F6:A3:11:F2:D6:F6:0E:8A:3C:E6:98
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623030623a3a2f34382d3438203d3e20313938353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:20:05:c8:7d:c4:eb:27:23:54:81:6e:21:a5:5b:da:5d:f4:
         7f:2f:97:eb:51:8e:ff:50:da:c5:ee:f3:19:bf:ad:ca:54:65:
         67:a9:30:eb:f0:6a:ae:6b:4e:26:e8:f2:7f:ef:c6:ae:b3:77:
         44:d0:2f:e6:45:49:ae:71:f8:36:61:ce:a9:75:10:23:83:47:
         80:c7:35:4b:72:80:ed:5e:95:d9:67:e2:78:23:30:aa:c3:d4:
         73:bc:d0:93:51:62:b2:a3:5c:35:2b:fe:67:51:7f:72:1d:f8:
         f1:bf:82:5c:00:53:2a:4c:cd:6b:04:43:83:6f:83:13:7a:ea:
         3f:0a:9a:9e:8a:9e:ca:21:87:ec:46:5e:f3:d0:a8:36:e5:de:
         b0:90:37:e3:12:8a:54:24:f3:8e:36:80:bd:29:1f:70:f8:25:
         2c:68:8a:dd:b4:17:45:da:51:f4:b1:c1:a7:82:1e:7b:75:07:
         02:d9:f9:b9:f0:61:25:bf:13:50:8b:a8:c9:73:cc:f1:27:31:
         44:9e:7e:52:ae:95:7d:0a:b8:e6:2c:56:f3:a8:51:59:e2:31:
         57:c9:d8:06:32:c6:33:a3:37:3e:33:d4:b7:d4:81:13:3b:ae:
         2d:d7:05:5f:39:ff:b5:6b:96:cc:28:af:23:12:09:77:e8:87:
         0b:d2:f9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----