Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e20313938353930.roa
File:                     326131343a3763313a623030623a3a2f34382d3438203d3e20313938353930.roa (raw, json)
Hash identifier:          j4kU9lDu24BsbRpnxsXtoN4AH1Af6hQ11jFsl0cWfnk=
Subject key identifier:   8D:A2:46:B9:C7:28:9F:B1:00:EA:14:99:F0:D8:30:94:BB:61:42:1F
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       106E6969565988F679D76A56D76A829D5522FFA2
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e20313938353930.roa
Signing time:             Sat 16 Mar 2024 13:41:12 +0000
ROA not before:           Sat 16 Mar 2024 13:36:12 +0000
ROA not after:            Sat 15 Mar 2025 13:41:12 +0000
asID:                     198590
IP address blocks:        2a14:7c1:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:6e:69:69:56:59:88:f6:79:d7:6a:56:d7:6a:82:9d:55:22:ff:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Mar 16 13:36:12 2024 GMT
            Not After : Mar 15 13:41:12 2025 GMT
        Subject: CN=8DA246B9C7289FB100EA1499F0D83094BB61421F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cb:80:89:41:9d:85:95:72:e3:79:ad:9c:ea:
                    64:1b:fa:b6:94:6f:09:b3:07:ad:2b:8f:e8:f8:f4:
                    c8:54:63:20:dd:f5:32:da:71:30:c6:c4:13:df:dd:
                    ad:d1:1c:c0:ef:e5:62:d1:c7:01:c7:94:fc:b8:96:
                    7b:f8:61:18:6f:ee:43:59:8a:c9:9a:e6:ef:27:90:
                    c3:22:a2:e1:33:62:6b:ed:1f:e4:b4:45:55:f0:0b:
                    a3:d0:de:2f:e7:cb:77:dd:27:25:0c:2b:1e:e7:a0:
                    dd:85:69:e4:91:95:3f:0e:0f:6b:3f:de:4d:4e:18:
                    cd:f3:1f:d3:6c:e9:05:d4:81:01:7e:30:f2:6b:d5:
                    71:44:07:69:7f:74:be:cd:d3:ff:7e:c4:a7:da:07:
                    73:4e:07:4a:91:0a:d1:f8:a6:96:ce:ff:7e:c7:9c:
                    cc:d6:17:7e:a2:7e:1d:df:fe:40:9c:51:8f:9a:21:
                    2a:47:97:c1:5c:a5:18:0b:4a:f2:ce:b2:4c:10:87:
                    59:73:57:91:2f:f8:55:da:19:eb:d2:1d:96:64:1d:
                    b8:b4:00:5d:8e:0d:b8:1a:e2:91:e0:f6:9f:6d:72:
                    f4:7c:eb:22:5d:bc:25:29:12:f8:53:e7:df:4b:85:
                    a0:ca:1c:ff:17:bd:f1:81:50:ad:40:ed:3c:0e:58:
                    e8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A2:46:B9:C7:28:9F:B1:00:EA:14:99:F0:D8:30:94:BB:61:42:1F
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e20313938353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c1:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:ba:9a:18:dc:ea:3b:44:b5:94:e5:b1:dc:cb:79:f2:b5:76:
         16:de:5c:cb:a7:02:58:5f:7c:42:21:8d:79:82:b2:b7:4d:0d:
         14:dd:16:e0:c1:96:e0:99:fa:0e:f8:0a:6a:06:7e:84:d8:84:
         1c:cb:15:7c:70:dc:be:e5:c7:fa:a6:c9:63:a6:1d:fd:9a:ad:
         9e:4d:a3:3c:9b:17:61:5e:89:d1:a3:97:00:60:36:1e:74:4c:
         bc:56:89:9b:90:c4:38:27:a5:aa:56:07:58:c1:98:70:b1:44:
         6a:d4:57:1f:79:21:0c:d3:fd:5a:c7:4a:93:3a:45:45:eb:2a:
         d3:e3:7a:d3:ca:63:dd:33:92:15:dc:a3:cc:98:41:4f:7d:88:
         26:5d:a6:77:93:1e:e7:6f:7e:0f:ed:94:87:b8:4d:3e:e2:99:
         88:ae:87:11:5d:6f:93:a3:27:01:57:f9:21:db:c7:f2:af:6f:
         5c:d5:04:cb:59:33:c8:dd:88:08:ee:bc:cd:83:f9:04:75:78:
         cf:d6:39:ce:62:d7:2d:7d:57:4e:90:ff:2e:cf:6f:b7:3d:87:
         95:34:70:9c:d6:7f:fb:a5:b0:29:75:e4:8a:31:99:67:5b:a4:
         9e:03:8c:fb:18:ac:24:f7:fa:1c:2f:de:c2:3f:da:e8:8a:ec:
         e9:e0:b3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----