Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623030623a3a2f34382d3438203d3e20323030343534.roa
File:                     326131343a3763303a623030623a3a2f34382d3438203d3e20323030343534.roa (raw, json)
Hash identifier:          oU9/OcKU7wl2gP7/lazom7oae4jEydrzYGS1L3LHOHk=
Subject key identifier:   85:90:D0:B6:6C:AF:5A:3C:5B:B5:FC:87:36:4C:C0:A1:76:72:3C:CD
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       2D2BE6308A48D01C9A6F7FE359A3B49A3BE7C33F
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623030623a3a2f34382d3438203d3e20323030343534.roa
Signing time:             Sun 17 Mar 2024 20:43:13 +0000
ROA not before:           Sun 17 Mar 2024 20:38:13 +0000
ROA not after:            Sun 16 Mar 2025 20:43:13 +0000
asID:                     200454
IP address blocks:        2a14:7c0:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:2b:e6:30:8a:48:d0:1c:9a:6f:7f:e3:59:a3:b4:9a:3b:e7:c3:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Mar 17 20:38:13 2024 GMT
            Not After : Mar 16 20:43:13 2025 GMT
        Subject: CN=8590D0B66CAF5A3C5BB5FC87364CC0A176723CCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:35:f2:1c:f9:24:ee:09:65:25:00:43:92:cb:
                    0a:86:45:0c:45:78:ec:3a:fe:f5:45:c4:66:14:83:
                    93:a0:95:1d:09:c1:a1:cd:cd:08:35:0b:81:be:0b:
                    26:82:18:62:de:3e:15:e7:62:fc:3c:94:6c:47:da:
                    92:54:89:f6:71:cf:aa:6e:3f:44:90:2e:df:e1:c6:
                    9a:f1:ba:b2:54:1d:33:16:e2:16:22:b0:c8:99:af:
                    ac:f5:d6:09:d2:b8:b2:76:e7:f1:ad:bf:a7:39:5b:
                    4e:f2:bb:02:9a:23:0e:38:65:3d:2f:d7:ba:7e:44:
                    a4:f9:43:11:30:61:a2:a8:e9:e8:e4:2a:58:27:6c:
                    aa:31:11:d8:b6:f0:7d:7d:e0:c6:13:3b:fe:ef:9a:
                    a0:8b:9e:95:03:2f:b2:97:ec:7b:83:7c:89:0b:17:
                    a0:9c:85:00:be:b3:1c:be:fe:00:7b:fb:1b:15:fc:
                    e8:1f:c8:9c:02:43:2f:6a:c0:c0:c3:c4:b5:bc:ee:
                    6c:41:55:20:28:c6:f2:69:e2:a7:84:62:f7:ad:c6:
                    93:f4:1c:30:3f:5e:39:0a:77:ad:17:80:d2:82:76:
                    d3:5b:57:4f:9b:f9:6d:ab:d8:78:d1:2e:6b:84:9e:
                    cc:23:80:97:d2:e3:63:d6:ca:50:a5:d4:fd:99:9a:
                    e5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:90:D0:B6:6C:AF:5A:3C:5B:B5:FC:87:36:4C:C0:A1:76:72:3C:CD
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623030623a3a2f34382d3438203d3e20323030343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:09:b6:d9:4b:c4:b0:4d:77:44:c5:52:d3:52:2a:98:a3:39:
         b3:b6:bf:a9:16:42:51:c7:e9:81:71:d2:81:7e:40:c1:38:4e:
         07:4c:35:ce:62:01:23:56:6b:1b:c0:6c:64:b4:8c:a5:84:db:
         37:57:f8:f4:c1:d6:be:ed:9c:87:07:40:06:d4:16:2e:75:74:
         30:74:cb:14:c1:ba:37:51:b0:d7:7a:6b:01:68:a4:f0:aa:5e:
         f7:28:9f:fc:32:e0:56:a6:e2:c7:c3:2b:e9:fa:ae:87:74:ae:
         49:11:bd:4d:2a:72:67:4e:f1:15:65:7c:9a:41:b3:6b:74:1e:
         30:07:3c:c9:a8:98:7f:6c:1a:c9:77:9a:19:52:b9:8c:2f:58:
         ed:40:17:8f:01:34:dc:6d:8c:55:40:82:55:02:7a:d1:fd:ff:
         2a:58:2d:b2:73:ed:53:40:9e:31:0f:c0:37:23:ff:6d:f1:06:
         4a:df:5a:f0:95:0f:ad:5c:7e:89:c9:cf:9d:19:9c:67:54:32:
         f1:dd:2e:fe:94:dc:8d:11:23:cc:64:dd:c5:a2:d6:55:fc:83:
         8d:92:f6:76:91:a0:f2:d6:eb:e6:1e:ea:8d:2a:a6:46:f0:08:
         a1:19:8c:ed:80:da:33:14:6c:0f:76:47:d9:de:4c:4c:c5:d2:
         40:7b:9c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----