Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623230303a3a2f33392d3339203d3e20323135343336.roa
File:                     326131343a3763303a623230303a3a2f33392d3339203d3e20323135343336.roa (raw, json)
Hash identifier:          /IBpyxLjrGL4+QBrDaYhvdLSUd7YdmbAagPHkYjczHs=
Subject key identifier:   77:76:23:CE:E7:31:2D:0D:41:D2:94:DB:DF:B9:61:62:B0:99:1B:D6
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       644D836F32B1DF984E8AAD1E36D31D77DF6ED712
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623230303a3a2f33392d3339203d3e20323135343336.roa
Signing time:             Sun 19 May 2024 15:32:13 +0000
ROA not before:           Sun 19 May 2024 15:27:13 +0000
ROA not after:            Sun 18 May 2025 15:32:13 +0000
asID:                     215436
IP address blocks:        2a14:7c0:b200::/39 maxlen: 39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:4d:83:6f:32:b1:df:98:4e:8a:ad:1e:36:d3:1d:77:df:6e:d7:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: May 19 15:27:13 2024 GMT
            Not After : May 18 15:32:13 2025 GMT
        Subject: CN=777623CEE7312D0D41D294DBDFB96162B0991BD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e9:6b:11:86:05:a7:db:52:dc:e9:70:2e:9c:
                    3f:55:4a:b6:c0:5a:d5:7d:3b:df:73:fa:57:89:7f:
                    a4:a1:63:4c:f3:8f:5b:fb:34:2f:34:3d:14:5f:dc:
                    a3:01:d6:d0:26:de:2a:94:26:56:05:78:50:b9:fa:
                    90:e6:d4:a8:6d:c4:b8:42:3c:df:76:19:ec:2f:32:
                    2f:38:01:9e:85:b1:5d:d5:52:0d:d9:db:8c:58:df:
                    73:b4:2c:07:f4:e2:c2:c2:27:b9:b9:c0:c6:95:7e:
                    f6:4c:1b:f4:35:69:ab:76:10:e8:33:61:d9:c8:1a:
                    8e:57:a5:5e:ee:7c:10:9a:fa:6a:ee:17:96:90:e0:
                    72:80:9f:fc:c5:77:f9:fb:31:4b:8b:85:1a:87:b9:
                    41:3a:2d:15:a4:d3:e0:dc:bf:59:40:7e:72:39:49:
                    b2:31:9b:ea:c4:46:98:f5:95:4a:4e:75:b6:7e:10:
                    e6:a9:15:92:52:c1:b2:70:9e:a3:bc:ca:1d:4b:ce:
                    07:2d:dc:98:76:9a:00:38:aa:bb:0b:43:de:d5:77:
                    63:b4:da:5a:ce:87:ea:e8:29:a5:7d:85:eb:98:31:
                    1c:37:6a:1e:2d:38:de:08:1f:d0:42:18:e8:d5:bf:
                    70:85:ed:9b:76:9d:7f:cb:b3:4f:50:34:da:41:01:
                    3e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:76:23:CE:E7:31:2D:0D:41:D2:94:DB:DF:B9:61:62:B0:99:1B:D6
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623230303a3a2f33392d3339203d3e20323135343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:b200::/39

    Signature Algorithm: sha256WithRSAEncryption
         63:95:b9:1d:70:c1:3d:ba:7a:b0:89:f4:36:52:27:06:ee:2b:
         14:ae:a9:aa:0c:38:a0:16:4d:00:03:d7:cb:ec:65:d7:41:af:
         c6:3c:b8:e9:e8:3a:b0:31:aa:a5:e8:66:af:db:34:7a:75:e4:
         0e:18:79:77:f2:46:89:53:ce:45:17:44:14:29:ed:f2:a3:61:
         94:fc:bc:c0:7a:ae:75:0c:fb:b2:fb:57:9e:95:c3:b2:af:ba:
         c6:e7:e7:4a:24:16:d6:98:a2:e0:91:29:96:f0:70:ff:ad:3b:
         18:a2:34:5e:ed:ae:06:1c:ac:7d:80:43:22:a3:cf:29:fd:f1:
         d3:96:7f:d5:6c:17:b3:43:a1:fb:39:61:d4:3f:0a:90:e1:63:
         ba:99:31:15:af:f2:d2:d1:95:10:4f:e8:fb:a9:c8:57:98:a3:
         24:dd:9c:68:22:86:5e:84:8e:88:08:8f:15:9a:60:fb:87:a6:
         26:1e:9f:b8:ff:31:5f:11:f6:79:ee:a8:8f:ad:f3:f5:fe:fc:
         6f:e1:6d:d9:d8:e7:0a:1b:66:4a:2d:41:a5:d6:a4:43:ff:d0:
         64:28:ac:69:58:c2:f9:a8:fa:4e:8e:59:be:a9:18:14:9d:c9:
         e8:cf:62:ba:d7:67:9b:46:84:1b:f5:74:82:05:8e:7a:6d:0b:
         91:ae:4b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----