Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e20323030343534.roa
File:                     326131343a3763313a623030623a3a2f34382d3438203d3e20323030343534.roa (raw, json)
Hash identifier:          guHRY/0c+dW4+CUZuVM8Rwsa34ywWsNQMCiyvjwdtts=
Subject key identifier:   66:54:73:CD:CE:0F:3C:A9:4E:5B:88:1E:00:16:2D:68:30:CD:E2:85
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       18298376D953B016499C8F1D2D0DE1B3AA0F294A
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e20323030343534.roa
Signing time:             Sun 17 Mar 2024 20:43:25 +0000
ROA not before:           Sun 17 Mar 2024 20:38:25 +0000
ROA not after:            Sun 16 Mar 2025 20:43:25 +0000
asID:                     200454
IP address blocks:        2a14:7c1:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:29:83:76:d9:53:b0:16:49:9c:8f:1d:2d:0d:e1:b3:aa:0f:29:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Mar 17 20:38:25 2024 GMT
            Not After : Mar 16 20:43:25 2025 GMT
        Subject: CN=665473CDCE0F3CA94E5B881E00162D6830CDE285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d9:83:f3:84:8d:e9:0e:84:85:dc:f5:d0:fc:
                    61:b9:03:22:6d:21:de:f9:e1:3c:d9:60:5e:dd:f4:
                    0b:0c:99:04:82:54:18:ab:8b:ed:4a:44:c3:8c:f4:
                    6d:b2:1e:d0:c4:d3:46:9f:87:44:55:2c:ef:d8:da:
                    80:3e:1b:f1:04:64:f0:7a:eb:34:4a:71:c2:4e:a3:
                    42:27:51:0c:43:69:ba:f1:d1:88:32:45:1e:a7:41:
                    cc:58:a2:7e:ca:22:10:64:ec:af:88:d6:32:a0:43:
                    c0:2b:55:33:93:67:2f:20:c9:b7:9e:54:34:e3:dd:
                    5f:4b:b8:18:c6:dc:09:6a:5a:47:ec:7c:a2:93:0b:
                    95:9e:0d:8a:37:57:0e:3a:d1:f5:59:5a:77:2c:ab:
                    c5:ed:9e:bb:83:6c:06:05:f0:3c:02:7f:c2:bb:c7:
                    bd:79:17:65:ba:ee:5e:d5:6e:1b:a8:f1:c4:ab:e3:
                    9d:11:87:6f:88:c7:e5:70:86:ba:fd:62:7f:19:ff:
                    c4:57:d4:af:62:1e:14:d8:23:37:7a:7a:cd:19:c7:
                    c1:b2:35:ac:d1:19:d7:af:3d:5d:3a:6a:84:a2:b3:
                    c6:d5:83:09:c6:8b:52:6f:e1:72:e2:43:a9:79:f4:
                    fd:4a:f9:34:a4:bd:6a:39:09:0f:fd:86:ef:18:13:
                    32:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:54:73:CD:CE:0F:3C:A9:4E:5B:88:1E:00:16:2D:68:30:CD:E2:85
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e20323030343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c1:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:ed:32:56:c5:65:4c:e0:64:45:24:24:f6:98:fd:f5:8d:65:
         2d:70:52:15:74:fc:93:a2:15:17:ff:de:a1:d1:ad:62:18:b7:
         ba:03:07:4b:2a:3a:6e:9b:8a:4f:f9:dc:56:a6:9f:82:7d:3e:
         43:86:e7:a2:47:d6:e5:46:98:6d:2f:21:50:9d:5d:9d:28:8e:
         b4:f3:44:86:be:93:6f:45:b2:17:ec:c9:b3:b7:2a:d0:f2:1d:
         fe:b3:8d:f8:f1:65:c5:8f:4d:c2:5a:c8:53:43:2d:ae:69:b1:
         8a:5b:5e:cb:92:84:71:88:72:35:f4:07:97:a3:5e:eb:a2:d8:
         20:27:5f:5a:8a:49:8e:4f:00:45:80:94:a9:7c:a6:20:3c:79:
         29:21:0b:82:e6:80:af:cb:f9:63:f5:ea:54:16:45:38:9d:22:
         3f:42:b8:89:5c:5c:f9:f5:f5:bc:83:19:7d:56:8d:06:13:1c:
         04:19:24:24:1c:f2:fc:e9:26:8c:01:0d:39:49:4d:fd:76:8d:
         59:32:ad:87:45:85:28:dd:0c:96:c0:d0:eb:7c:f0:55:f9:60:
         ba:17:1c:11:41:7f:65:0d:11:ff:a8:b8:1b:b5:8f:d5:72:ec:
         c3:53:31:f1:d9:2d:9b:77:b4:cf:4c:44:4c:a4:5a:e1:9c:9f:
         a5:69:df:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----