Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e20323132313439.roa
File:                     326131343a3763313a623030623a3a2f34382d3438203d3e20323132313439.roa (raw, json)
Hash identifier:          PbtXcsLj9+qWeih4JQ1x+t4GVAP+37mBY53rtY1Q/tQ=
Subject key identifier:   08:5E:DB:4C:FD:DB:60:F9:F6:8E:3C:F1:92:DD:17:30:60:6C:7F:CD
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       2AB03F4B075EE8D79387B1032ABA6BF3682AC199
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e20323132313439.roa
Signing time:             Wed 21 Feb 2024 15:37:20 +0000
ROA not before:           Wed 21 Feb 2024 15:32:20 +0000
ROA not after:            Wed 19 Feb 2025 15:37:20 +0000
asID:                     212149
IP address blocks:        2a14:7c1:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b0:3f:4b:07:5e:e8:d7:93:87:b1:03:2a:ba:6b:f3:68:2a:c1:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Feb 21 15:32:20 2024 GMT
            Not After : Feb 19 15:37:20 2025 GMT
        Subject: CN=085EDB4CFDDB60F9F68E3CF192DD1730606C7FCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7f:82:a9:ad:18:cf:ee:7a:03:65:c8:47:7c:
                    76:ed:d3:ac:2f:40:70:c5:b7:0a:37:5c:54:77:56:
                    23:32:53:2f:d2:56:c5:9f:8a:28:0b:7c:af:49:b9:
                    b0:13:5c:20:b6:2f:fc:9a:c9:64:2a:aa:da:82:4c:
                    5e:a2:d7:69:35:63:b7:7c:16:35:25:c8:45:b7:c7:
                    c8:58:8a:03:27:5d:84:0e:d1:b5:82:9e:67:49:02:
                    b1:ec:d2:88:75:5b:48:98:9b:f3:4d:c7:34:e6:ac:
                    78:92:90:b1:7d:0c:b4:37:cb:64:88:3f:34:55:e7:
                    90:10:bd:81:2f:ae:ca:04:70:0d:2e:05:ff:a1:ef:
                    84:f8:2b:9c:43:3a:8f:5c:7b:0d:c2:5b:e0:24:06:
                    0b:7d:7c:02:ed:eb:8f:13:5f:ce:8f:51:16:27:4d:
                    04:54:82:f5:d2:76:1d:83:04:6e:ae:90:ea:4c:69:
                    65:75:60:91:ff:4c:6a:ad:67:c0:69:3b:e7:74:94:
                    7f:56:0e:88:5b:f3:39:2c:20:b1:81:97:a0:fe:e6:
                    47:28:c5:eb:71:ea:f1:b3:3b:ab:73:3c:9d:b7:f0:
                    a9:9e:f9:a4:41:13:a2:74:6e:d9:bb:6e:a2:29:c8:
                    c9:7f:54:90:0e:93:22:f7:f2:5a:f1:63:78:b9:9f:
                    ce:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5E:DB:4C:FD:DB:60:F9:F6:8E:3C:F1:92:DD:17:30:60:6C:7F:CD
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e20323132313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c1:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:86:34:6e:f9:da:5b:06:65:65:f6:3d:16:a5:6f:e9:6c:a5:
         1c:2e:ea:71:52:44:92:e7:68:13:6a:49:57:3e:fc:1a:19:64:
         d2:55:54:db:5e:18:ad:02:e1:5a:72:bb:8d:22:6d:00:fd:19:
         d2:d7:62:c2:35:55:b3:00:4d:73:de:d6:02:33:67:1e:1a:e5:
         08:5f:bc:7f:eb:03:89:d5:54:34:31:ae:70:83:db:de:16:83:
         4f:4b:d6:be:e0:15:fa:6c:e6:5e:2d:5a:00:63:c3:b6:b4:80:
         58:7a:b7:8b:a7:ea:93:e7:1b:21:d3:63:51:2a:be:ac:6d:02:
         7a:75:c5:78:d9:70:b1:20:92:b6:3b:4b:0d:7e:57:6e:1c:cc:
         01:86:7f:90:0d:88:99:40:13:69:c3:b7:4a:e8:e5:2f:b0:c5:
         bc:fc:96:a4:78:22:17:25:c3:6b:83:92:e0:c5:dc:70:ba:70:
         98:2f:fa:14:97:0c:8d:27:34:c3:42:ad:d7:86:8b:d0:8c:6f:
         3b:25:85:86:54:6e:82:2a:c5:55:3b:e7:43:be:cb:73:02:58:
         b5:1f:9b:c0:ab:70:47:3f:24:6e:77:6f:13:bf:df:2a:46:62:
         31:e1:dd:24:89:3b:a4:fc:a6:4c:42:83:aa:5a:f4:34:78:18:
         9e:d3:38:45
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUKrA/Swde6NeTh7EDKrpr82gqwZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ0NDJlMzNhOGY2MTU4MGI2YjRkZmM0ODI4ZDk1ZTA3
ODkxZjRiYzAeFw0yNDAyMjExNTMyMjBaFw0yNTAyMTkxNTM3MjBaMDMxMTAvBgNV
BAMTKDA4NUVEQjRDRkREQjYwRjlGNjhFM0NGMTkyREQxNzMwNjA2QzdGQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSf4KprRjP7noDZchHfHbt06wv
QHDFtwo3XFR3ViMyUy/SVsWfiigLfK9JubATXCC2L/yayWQqqtqCTF6i12k1Y7d8
FjUlyEW3x8hYigMnXYQO0bWCnmdJArHs0oh1W0iYm/NNxzTmrHiSkLF9DLQ3y2SI
PzRV55AQvYEvrsoEcA0uBf+h74T4K5xDOo9cew3CW+AkBgt9fALt648TX86PURYn
TQRUgvXSdh2DBG6ukOpMaWV1YJH/TGqtZ8BpO+d0lH9WDohb8zksILGBl6D+5kco
xetx6vGzO6tzPJ238Kme+aRBE6J0btm7bqIpyMl/VJAOkyL38lrxY3i5n84PAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUCF7bTP3bYPn2jjzxkt0XMGBsf80wHwYDVR0j
BBgwFoAUdEQuM6j2FYC2tN/Ego2V4HiR9LwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWQ5OTgwODItYTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4
NjM5LzAvNzQ0NDJFMzNBOEY2MTU4MEI2QjRERkM0ODI4RDk1RTA3ODkxRjRCQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RFUXVNNmoyRllDMnROX0VnbzJWNEhp
UjlMdy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWQ5OTgwODIt
YTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4NjM5LzAvMzI2MTMxMzQzYTM3NjMzMTNh
NjIzMDMwNjIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzIzMTM0Mzkucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqFAfBsAswDQYJKoZIhvcNAQELBQADggEBAGCGNG752lsGZWX2PRal
b+lspRwu6nFSRJLnaBNqSVc+/BoZZNJVVNteGK0C4Vpyu40ibQD9GdLXYsI1VbMA
TXPe1gIzZx4a5QhfvH/rA4nVVDQxrnCD294Wg09L1r7gFfps5l4tWgBjw7a0gFh6
t4un6pPnGyHTY1EqvqxtAnp1xXjZcLEgkrY7Sw1+V24czAGGf5ANiJlAE2nDt0ro
5S+wxbz8lqR4Ihclw2uDkuDF3HC6cJgv+hSXDI0nNMNCrdeGi9CMbzslhYZUboIq
xVU750O+y3MCWLUfm8CrcEc/JG53bxO/3ypGYjHh3SSJO6T8pkxCg6pa9DR4GJ7T
OEU=
-----END CERTIFICATE-----