Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623030623a3a2f34382d3438203d3e20323136333639.roa
File:                     326131343a3763303a623030623a3a2f34382d3438203d3e20323136333639.roa (raw, json)
Hash identifier:          lhRW9waB6kmjp5+M/S0Vp9CeGFB1UCvHPQJefgbcejs=
Subject key identifier:   DA:E3:6D:96:CC:DB:71:F4:6A:A4:F2:13:6E:07:CE:28:5A:AD:89:FA
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       5EA70A9BF0845EE6F5422AFEE7C58961A36B7BAD
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623030623a3a2f34382d3438203d3e20323136333639.roa
Signing time:             Sun 17 Mar 2024 20:52:52 +0000
ROA not before:           Sun 17 Mar 2024 20:47:52 +0000
ROA not after:            Sun 16 Mar 2025 20:52:52 +0000
asID:                     216369
IP address blocks:        2a14:7c0:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a7:0a:9b:f0:84:5e:e6:f5:42:2a:fe:e7:c5:89:61:a3:6b:7b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Mar 17 20:47:52 2024 GMT
            Not After : Mar 16 20:52:52 2025 GMT
        Subject: CN=DAE36D96CCDB71F46AA4F2136E07CE285AAD89FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:59:82:60:b8:aa:1b:ca:de:af:73:1c:e2:de:
                    2a:da:cb:9a:7a:f0:e3:85:6e:ac:f7:00:50:5e:66:
                    f8:ff:de:ae:85:6b:23:73:74:79:ae:7c:f3:59:17:
                    14:fc:46:6f:7a:78:bf:51:e7:a2:ab:3e:ae:b8:51:
                    b7:bc:89:2d:59:48:3f:c6:41:7a:c0:4c:4e:28:cf:
                    ad:56:9a:b4:63:c7:d5:8f:29:c5:62:c2:7e:9c:8d:
                    e5:80:c1:f8:f5:c3:3a:aa:c3:a0:cf:47:53:12:8a:
                    07:b5:e1:03:cc:71:f6:c6:bf:8c:af:09:2e:35:56:
                    38:71:0d:05:f7:bb:c4:72:59:09:d4:9b:13:15:f6:
                    ce:b4:63:23:a2:26:d2:9c:6a:df:3f:3d:62:a7:43:
                    a8:31:2b:5f:cc:54:2c:dd:97:ea:4e:c4:6b:b0:fa:
                    a2:9a:0a:6c:d6:2b:91:fc:96:f2:97:f2:ca:c6:3e:
                    09:d6:cc:21:13:67:57:d1:e9:56:e3:eb:ea:50:42:
                    c1:a1:ba:76:65:16:46:d3:bc:40:20:30:0a:4f:76:
                    b2:d2:d4:20:84:51:96:f4:12:b9:94:f9:4f:28:09:
                    7c:64:58:13:e3:5d:16:3b:c0:7d:66:e8:c0:39:39:
                    dc:49:64:b2:55:3a:55:41:2a:36:8e:11:01:0a:b1:
                    f1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E3:6D:96:CC:DB:71:F4:6A:A4:F2:13:6E:07:CE:28:5A:AD:89:FA
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623030623a3a2f34382d3438203d3e20323136333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:19:03:39:e5:05:4b:dd:e6:68:57:de:bc:25:34:b3:fd:74:
         ea:0e:cb:2c:9e:1b:e3:95:d5:1d:21:66:2a:c6:2e:af:cc:8e:
         3b:0a:db:df:94:21:e9:1c:a4:b6:f8:ea:8e:45:fa:72:47:54:
         b8:b2:fc:cd:20:c7:f0:a1:8c:13:5e:9c:08:12:5c:ce:61:08:
         1b:fc:66:ef:15:f3:6a:b4:0e:23:c0:d2:0c:4a:61:68:ff:44:
         c5:70:ee:ae:f8:7d:66:0d:0c:7b:ba:f3:fc:3e:6b:73:4a:ba:
         85:1f:37:46:f8:8b:69:a8:fc:91:69:ba:b3:36:ff:41:ef:a5:
         b2:c7:2a:fe:c2:74:8d:ef:5d:bd:09:5e:bb:14:55:ef:0c:74:
         71:17:f0:a4:b3:4f:c5:c3:86:35:ac:dc:24:ca:77:4d:9a:fa:
         5d:1b:4e:93:86:1d:5a:d0:1c:18:e6:71:7b:f2:70:43:fa:70:
         a8:74:16:be:5f:11:c3:83:95:91:46:d7:b9:90:2a:0c:36:60:
         0e:fd:b3:1e:67:47:a5:88:c4:4a:8d:f4:79:f3:9e:99:26:59:
         d8:29:d8:43:4d:ad:11:7c:8d:5f:74:6e:b6:ec:45:de:46:1b:
         67:b7:78:e2:ed:0a:94:5b:02:06:1c:18:94:05:7a:dc:55:da:
         27:a6:0f:ae
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUXqcKm/CEXub1Qir+58WJYaNre60wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ0NDJlMzNhOGY2MTU4MGI2YjRkZmM0ODI4ZDk1ZTA3
ODkxZjRiYzAeFw0yNDAzMTcyMDQ3NTJaFw0yNTAzMTYyMDUyNTJaMDMxMTAvBgNV
BAMTKERBRTM2RDk2Q0NEQjcxRjQ2QUE0RjIxMzZFMDdDRTI4NUFBRDg5RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2WYJguKobyt6vcxzi3iray5p6
8OOFbqz3AFBeZvj/3q6FayNzdHmufPNZFxT8Rm96eL9R56KrPq64Ube8iS1ZSD/G
QXrATE4oz61WmrRjx9WPKcViwn6cjeWAwfj1wzqqw6DPR1MSige14QPMcfbGv4yv
CS41VjhxDQX3u8RyWQnUmxMV9s60YyOiJtKcat8/PWKnQ6gxK1/MVCzdl+pOxGuw
+qKaCmzWK5H8lvKX8srGPgnWzCETZ1fR6Vbj6+pQQsGhunZlFkbTvEAgMApPdrLS
1CCEUZb0ErmU+U8oCXxkWBPjXRY7wH1m6MA5OdxJZLJVOlVBKjaOEQEKsfGzAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQU2uNtlszbcfRqpPITbgfOKFqtifowHwYDVR0j
BBgwFoAUdEQuM6j2FYC2tN/Ego2V4HiR9LwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWQ5OTgwODItYTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4
NjM5LzAvNzQ0NDJFMzNBOEY2MTU4MEI2QjRERkM0ODI4RDk1RTA3ODkxRjRCQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RFUXVNNmoyRllDMnROX0VnbzJWNEhp
UjlMdy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWQ5OTgwODIt
YTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4NjM5LzAvMzI2MTMxMzQzYTM3NjMzMDNh
NjIzMDMwNjIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzYzMzM2Mzkucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqFAfAsAswDQYJKoZIhvcNAQELBQADggEBALEZAznlBUvd5mhX3rwl
NLP9dOoOyyyeG+OV1R0hZirGLq/MjjsK29+UIekcpLb46o5F+nJHVLiy/M0gx/Ch
jBNenAgSXM5hCBv8Zu8V82q0DiPA0gxKYWj/RMVw7q74fWYNDHu68/w+a3NKuoUf
N0b4i2mo/JFpurM2/0HvpbLHKv7CdI3vXb0JXrsUVe8MdHEX8KSzT8XDhjWs3CTK
d02a+l0bTpOGHVrQHBjmcXvycEP6cKh0Fr5fEcODlZFG17mQKgw2YA79sx5nR6WI
xEqN9HnznpkmWdgp2ENNrRF8jV90brbsRd5GG2e3eOLtCpRbAgYcGJQFetxV2iem
D64=
-----END CERTIFICATE-----