Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623030623a3a2f34382d3438203d3e20323135363635.roa
File:                     326131343a3763303a623030623a3a2f34382d3438203d3e20323135363635.roa (raw, json)
Hash identifier:          4Y5LlwnLRiDfNiVVgZ+4LlvvmoUS8nnZVCj3x1hLj9Y=
Subject key identifier:   14:BE:79:74:BB:59:25:A1:8A:65:73:36:C0:1D:B0:3A:78:3C:48:01
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       71D0E563589B49DDEFA2596C3A8386A349738E1A
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623030623a3a2f34382d3438203d3e20323135363635.roa
Signing time:             Sun 17 Mar 2024 20:41:40 +0000
ROA not before:           Sun 17 Mar 2024 20:36:40 +0000
ROA not after:            Sun 16 Mar 2025 20:41:40 +0000
asID:                     215665
IP address blocks:        2a14:7c0:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d0:e5:63:58:9b:49:dd:ef:a2:59:6c:3a:83:86:a3:49:73:8e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Mar 17 20:36:40 2024 GMT
            Not After : Mar 16 20:41:40 2025 GMT
        Subject: CN=14BE7974BB5925A18A657336C01DB03A783C4801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:96:ec:c2:3f:87:14:9e:39:37:2e:e4:87:f2:
                    13:be:a4:eb:b5:d9:c4:f9:c0:79:07:4a:af:57:37:
                    04:e2:81:90:10:cb:32:fa:ef:45:c2:e2:93:5e:e0:
                    83:8d:53:13:5d:c1:79:61:b7:bb:21:bf:5a:72:ef:
                    be:38:03:ba:68:be:57:3b:c3:50:09:58:82:94:83:
                    72:81:35:32:47:05:a2:0a:1a:6a:c7:0c:55:93:22:
                    a2:82:6f:ee:dc:fb:58:a1:fb:f2:44:c0:52:e6:66:
                    73:dd:8f:e8:d8:a0:58:96:2c:f2:9e:19:8e:2a:df:
                    44:ee:8e:5f:78:d0:8f:da:18:3e:8d:af:cd:db:1f:
                    37:df:82:4f:9e:2a:87:8d:de:ba:0c:8f:51:52:84:
                    f9:0a:82:3d:7c:9c:41:77:5d:23:d4:4b:c8:c5:56:
                    41:a4:0b:e8:8e:8c:89:a1:99:84:db:a5:a6:e0:2a:
                    c5:73:cb:ef:80:be:13:0b:ad:c9:87:47:6b:21:58:
                    70:65:22:e4:1d:ca:f8:a9:32:8f:b2:06:3a:86:11:
                    09:03:f0:fa:a8:8b:ab:cf:70:d2:2f:1f:a8:b7:d8:
                    b8:82:68:52:e0:60:89:c3:b8:4c:79:e7:1b:f3:25:
                    66:0a:d4:d0:fd:7a:c6:2d:87:b1:51:5f:9e:b8:57:
                    df:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BE:79:74:BB:59:25:A1:8A:65:73:36:C0:1D:B0:3A:78:3C:48:01
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623030623a3a2f34382d3438203d3e20323135363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:7b:97:62:39:2c:d7:61:9a:2c:de:37:73:d2:80:9a:19:c5:
         40:c6:0e:b2:b7:f5:f9:fb:7d:1e:e8:ae:3c:1d:ff:ab:13:5b:
         3b:f7:d3:6e:32:32:fe:d8:00:45:d6:f3:08:88:87:c5:cb:6b:
         c0:8d:ef:fd:32:09:b5:0e:60:94:2b:eb:48:ab:2f:de:d1:1a:
         4b:f1:ec:42:4f:b8:94:2c:40:65:a6:e4:01:44:6e:a9:48:a2:
         e6:0a:7f:98:ad:8c:6a:60:57:39:8d:80:5d:3c:a9:bc:79:a7:
         30:08:de:08:00:e4:68:f9:f9:67:5c:8c:ad:6c:5e:3b:96:c2:
         2d:73:98:59:67:ae:8b:18:01:88:f6:87:c5:e4:a8:a5:25:5d:
         76:a0:76:45:ed:5e:d7:9e:da:26:e6:cb:f7:6a:12:54:53:63:
         a5:f1:2f:ac:10:8d:4f:5c:d7:43:15:09:56:3e:c2:7c:b3:a3:
         f3:19:7d:08:2e:7d:69:19:e3:e3:e2:12:98:70:3c:14:cb:f3:
         b4:3d:4c:c8:5e:31:b9:29:b6:cc:46:fc:61:ff:d1:4c:2f:06:
         69:69:c2:10:72:c6:18:52:42:11:5e:89:88:42:ab:a5:4b:40:
         fc:02:ee:a8:5f:fc:0c:f8:7f:36:3b:82:c5:1f:23:c6:ac:09:
         9a:c0:d5:4c
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUcdDlY1ibSd3vollsOoOGo0lzjhowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ0NDJlMzNhOGY2MTU4MGI2YjRkZmM0ODI4ZDk1ZTA3
ODkxZjRiYzAeFw0yNDAzMTcyMDM2NDBaFw0yNTAzMTYyMDQxNDBaMDMxMTAvBgNV
BAMTKDE0QkU3OTc0QkI1OTI1QTE4QTY1NzMzNkMwMURCMDNBNzgzQzQ4MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRluzCP4cUnjk3LuSH8hO+pOu1
2cT5wHkHSq9XNwTigZAQyzL670XC4pNe4IONUxNdwXlht7shv1py7744A7povlc7
w1AJWIKUg3KBNTJHBaIKGmrHDFWTIqKCb+7c+1ih+/JEwFLmZnPdj+jYoFiWLPKe
GY4q30Tujl940I/aGD6Nr83bHzffgk+eKoeN3roMj1FShPkKgj18nEF3XSPUS8jF
VkGkC+iOjImhmYTbpabgKsVzy++AvhMLrcmHR2shWHBlIuQdyvipMo+yBjqGEQkD
8Pqoi6vPcNIvH6i32LiCaFLgYInDuEx55xvzJWYK1ND9esYth7FRX564V9+NAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUFL55dLtZJaGKZXM2wB2wOng8SAEwHwYDVR0j
BBgwFoAUdEQuM6j2FYC2tN/Ego2V4HiR9LwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWQ5OTgwODItYTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4
NjM5LzAvNzQ0NDJFMzNBOEY2MTU4MEI2QjRERkM0ODI4RDk1RTA3ODkxRjRCQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RFUXVNNmoyRllDMnROX0VnbzJWNEhp
UjlMdy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWQ5OTgwODIt
YTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4NjM5LzAvMzI2MTMxMzQzYTM3NjMzMDNh
NjIzMDMwNjIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzUzNjM2MzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqFAfAsAswDQYJKoZIhvcNAQELBQADggEBAFJ7l2I5LNdhmizeN3PS
gJoZxUDGDrK39fn7fR7orjwd/6sTWzv3024yMv7YAEXW8wiIh8XLa8CN7/0yCbUO
YJQr60irL97RGkvx7EJPuJQsQGWm5AFEbqlIouYKf5itjGpgVzmNgF08qbx5pzAI
3ggA5Gj5+WdcjK1sXjuWwi1zmFlnrosYAYj2h8XkqKUlXXagdkXtXtee2ibmy/dq
ElRTY6XxL6wQjU9c10MVCVY+wnyzo/MZfQgufWkZ4+PiEphwPBTL87Q9TMheMbkp
tsxG/GH/0UwvBmlpwhByxhhSQhFeiYhCq6VLQPwC7qhf/Az4fzY7gsUfI8asCZrA
1Uw=
-----END CERTIFICATE-----