Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623030623a3a2f34382d3438203d3e20323135353830.roa
File:                     326131343a3763303a623030623a3a2f34382d3438203d3e20323135353830.roa (raw, json)
Hash identifier:          I2OrTTD9/XKzXPC2iVkqoQdWuvjka6NWohIAC6QKCvU=
Subject key identifier:   49:54:34:EA:6C:B2:52:65:9E:F4:84:99:F4:67:83:E6:9C:36:A0:53
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       013E2AAD32A0967D1F6D368D9F6FC57FC740A990
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623030623a3a2f34382d3438203d3e20323135353830.roa
Signing time:             Fri 15 Mar 2024 20:14:36 +0000
ROA not before:           Fri 15 Mar 2024 20:09:36 +0000
ROA not after:            Fri 14 Mar 2025 20:14:36 +0000
asID:                     215580
IP address blocks:        2a14:7c0:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:3e:2a:ad:32:a0:96:7d:1f:6d:36:8d:9f:6f:c5:7f:c7:40:a9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Mar 15 20:09:36 2024 GMT
            Not After : Mar 14 20:14:36 2025 GMT
        Subject: CN=495434EA6CB252659EF48499F46783E69C36A053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4a:38:65:e7:27:61:fe:47:f1:4e:01:f1:8d:
                    9a:a8:87:ce:43:ed:e6:fa:42:67:ae:65:a6:00:df:
                    ff:71:62:3a:d8:ab:82:d3:46:f3:f2:89:0f:d8:57:
                    26:ef:e0:69:91:1d:32:da:0a:26:a4:dc:03:c5:04:
                    75:4c:c3:78:fa:f3:f9:63:08:49:ce:79:a4:19:39:
                    4d:21:91:ab:b6:c1:f2:99:bc:5d:a7:c1:2d:11:43:
                    10:a8:1a:16:17:e6:7f:e0:eb:e5:da:42:c8:e6:41:
                    95:8a:55:ac:03:7d:83:4a:bf:8c:99:1f:55:3b:c0:
                    3c:c6:a6:ae:f6:e5:6b:93:b6:07:04:d6:9b:92:ce:
                    2e:49:0b:31:88:33:56:63:5b:c2:d0:f1:f8:c2:0c:
                    3f:aa:e1:19:a1:9f:41:69:11:08:0a:f9:e8:2f:9e:
                    47:d0:a1:cd:7a:c2:2a:e7:5d:fe:69:d4:84:0d:27:
                    af:e1:89:be:6c:29:8f:91:77:ed:87:a4:40:76:78:
                    4d:fd:41:3b:ab:21:f2:88:78:59:8d:24:86:d4:27:
                    bd:c7:82:57:70:e7:a4:57:a8:35:86:cf:15:6e:ec:
                    e5:2b:03:8d:4d:47:c8:99:d8:52:d4:a1:a5:b9:bd:
                    28:16:8d:43:13:2f:33:be:2a:19:e2:96:50:21:26:
                    5b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:54:34:EA:6C:B2:52:65:9E:F4:84:99:F4:67:83:E6:9C:36:A0:53
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623030623a3a2f34382d3438203d3e20323135353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:2b:32:e9:03:86:1e:07:6c:07:82:e9:13:5c:14:64:d4:56:
         26:05:fa:d3:7b:76:99:d1:6e:e7:29:2d:3c:52:44:5d:e7:cb:
         d8:19:ee:51:c4:c4:21:a2:82:f8:28:f0:15:d1:a8:fc:d3:66:
         08:28:e3:06:ed:be:29:6c:73:f0:14:13:8b:b1:3d:69:3b:ba:
         bf:34:51:e9:58:7b:ce:0c:bc:30:b1:dc:fb:3c:3f:ca:32:a8:
         e0:59:8b:d6:6b:91:dd:d2:c6:88:83:39:92:87:e2:d3:16:31:
         31:bb:15:87:a4:75:d2:a2:38:cd:70:a5:20:a3:e2:bf:c7:b2:
         19:77:0d:9c:8f:21:d5:ab:40:ab:dc:36:a5:5c:90:7e:94:ba:
         bf:b3:36:57:b4:95:00:20:76:c0:9f:fc:43:46:99:5e:63:d1:
         3c:70:cc:33:f5:21:55:c4:39:69:4d:3f:21:27:d2:db:a3:bb:
         bb:95:82:ce:43:e1:34:40:e7:b5:70:0d:22:fc:55:23:a2:0c:
         3d:83:c6:72:33:3a:6c:eb:3b:62:36:d5:59:c9:0e:6b:bb:c2:
         2d:9d:75:75:20:24:67:dc:bf:f6:46:9e:dd:5f:1d:ed:a7:b1:
         6d:ce:70:e6:70:15:b5:27:f8:41:7f:c8:48:6d:11:c2:0f:55:
         21:6d:e1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----