Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e20323135343733.roa
File:                     326131343a3763313a623030623a3a2f34382d3438203d3e20323135343733.roa (raw, json)
Hash identifier:          8pFOUWnWLXLL/lqU2OuIphffK4NTP8OrJZ8J4R3JMeg=
Subject key identifier:   D5:EF:3E:F5:76:97:8E:1A:B7:3A:60:84:5D:CB:AA:59:13:A7:7F:61
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       35A20F0166A670D550A78CE03479601879E67FBE
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e20323135343733.roa
Signing time:             Fri 15 Mar 2024 20:50:02 +0000
ROA not before:           Fri 15 Mar 2024 20:45:02 +0000
ROA not after:            Fri 14 Mar 2025 20:50:02 +0000
asID:                     215473
IP address blocks:        2a14:7c1:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a2:0f:01:66:a6:70:d5:50:a7:8c:e0:34:79:60:18:79:e6:7f:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Mar 15 20:45:02 2024 GMT
            Not After : Mar 14 20:50:02 2025 GMT
        Subject: CN=D5EF3EF576978E1AB73A60845DCBAA5913A77F61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ab:ea:10:20:06:bc:89:53:be:64:de:c8:a8:
                    5b:5d:48:24:97:03:18:cb:72:4f:af:3a:76:f6:d2:
                    f9:c6:51:b4:f7:01:b5:37:d5:9d:f7:e0:09:13:b5:
                    b2:de:60:4c:eb:4b:09:be:8c:25:11:ae:34:8c:96:
                    58:89:c4:aa:18:74:fc:8a:62:d3:d5:24:23:2b:a5:
                    9c:ec:52:1b:8b:2f:2c:58:0e:f1:8c:c8:37:3f:eb:
                    4e:48:53:b9:1a:4d:e9:ac:86:ff:e9:ec:b2:73:de:
                    ad:59:d2:73:9a:93:6d:95:b4:e2:e2:59:21:29:34:
                    e3:85:14:b7:3a:72:fd:01:d9:15:53:3a:e8:f8:2b:
                    28:05:c8:8b:a7:d7:f9:dc:e6:78:fe:72:7e:64:a6:
                    36:ea:b3:21:29:c9:22:79:c3:a3:54:69:3b:e7:5f:
                    bf:5a:ce:d2:3c:20:b6:bc:de:86:69:e3:fc:fc:19:
                    32:da:16:27:08:17:42:15:30:8b:2d:55:c5:6d:67:
                    73:e2:77:ac:6e:d8:f1:a7:a5:39:80:ed:7e:8e:12:
                    43:a1:37:d2:df:dc:36:91:9e:b5:e5:1b:f3:75:21:
                    03:41:aa:03:c5:74:b6:b4:a1:24:74:e7:66:5d:38:
                    47:b4:46:91:14:5b:bc:a3:fa:f7:57:4e:76:c7:65:
                    d0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:EF:3E:F5:76:97:8E:1A:B7:3A:60:84:5D:CB:AA:59:13:A7:7F:61
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e20323135343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c1:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:0b:c5:e3:d6:98:b1:9f:bf:99:fb:47:75:80:f9:6c:b6:e4:
         a4:c7:c6:7c:76:02:5c:e9:2e:6e:81:4b:e3:68:53:40:3c:a5:
         52:f7:df:87:6c:5e:3a:d1:4d:f7:a5:e6:f5:ec:16:11:43:1a:
         4a:53:12:d5:66:b9:ff:b8:53:a6:08:ec:be:10:ff:8c:c0:8e:
         34:fb:23:07:bd:fb:7f:72:c6:0f:81:ea:71:ae:c8:b1:d4:1e:
         12:63:c4:20:59:e9:55:3c:0b:24:48:bd:a4:d1:08:55:4e:ba:
         fb:07:42:e1:c2:2b:0e:28:67:49:5e:46:19:ea:26:f1:f8:b8:
         78:99:d8:26:3d:ff:89:88:29:08:40:36:25:38:4d:08:ca:ec:
         bb:13:99:02:bd:51:eb:8c:16:0d:a6:f3:e0:0a:7b:e7:1f:60:
         63:e6:8c:77:c7:f4:39:69:b9:dd:70:7c:3e:c5:98:c3:3a:10:
         70:77:45:11:6c:27:c2:c3:b6:49:79:45:67:d7:d4:21:23:89:
         2c:59:d1:72:ee:38:63:4a:f4:14:20:24:63:db:0c:46:f2:42:
         21:90:f7:b9:80:2d:eb:fb:02:12:fa:4a:63:b8:cc:ff:6d:3e:
         1f:ee:16:ad:71:12:70:8e:6d:4e:e6:e2:63:78:89:aa:58:5b:
         fd:82:6c:29
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUNaIPAWamcNVQp4zgNHlgGHnmf74wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ0NDJlMzNhOGY2MTU4MGI2YjRkZmM0ODI4ZDk1ZTA3
ODkxZjRiYzAeFw0yNDAzMTUyMDQ1MDJaFw0yNTAzMTQyMDUwMDJaMDMxMTAvBgNV
BAMTKEQ1RUYzRUY1NzY5NzhFMUFCNzNBNjA4NDVEQ0JBQTU5MTNBNzdGNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaq+oQIAa8iVO+ZN7IqFtdSCSX
AxjLck+vOnb20vnGUbT3AbU31Z334AkTtbLeYEzrSwm+jCURrjSMlliJxKoYdPyK
YtPVJCMrpZzsUhuLLyxYDvGMyDc/605IU7kaTemshv/p7LJz3q1Z0nOak22VtOLi
WSEpNOOFFLc6cv0B2RVTOuj4KygFyIun1/nc5nj+cn5kpjbqsyEpySJ5w6NUaTvn
X79aztI8ILa83oZp4/z8GTLaFicIF0IVMIstVcVtZ3Pid6xu2PGnpTmA7X6OEkOh
N9Lf3DaRnrXlG/N1IQNBqgPFdLa0oSR052ZdOEe0RpEUW7yj+vdXTnbHZdAVAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQU1e8+9XaXjhq3OmCEXcuqWROnf2EwHwYDVR0j
BBgwFoAUdEQuM6j2FYC2tN/Ego2V4HiR9LwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWQ5OTgwODItYTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4
NjM5LzAvNzQ0NDJFMzNBOEY2MTU4MEI2QjRERkM0ODI4RDk1RTA3ODkxRjRCQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RFUXVNNmoyRllDMnROX0VnbzJWNEhp
UjlMdy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWQ5OTgwODIt
YTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4NjM5LzAvMzI2MTMxMzQzYTM3NjMzMTNh
NjIzMDMwNjIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzUzNDM3MzMucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqFAfBsAswDQYJKoZIhvcNAQELBQADggEBAEMLxePWmLGfv5n7R3WA
+Wy25KTHxnx2AlzpLm6BS+NoU0A8pVL334dsXjrRTfel5vXsFhFDGkpTEtVmuf+4
U6YI7L4Q/4zAjjT7Iwe9+39yxg+B6nGuyLHUHhJjxCBZ6VU8CyRIvaTRCFVOuvsH
QuHCKw4oZ0leRhnqJvH4uHiZ2CY9/4mIKQhANiU4TQjK7LsTmQK9UeuMFg2m8+AK
e+cfYGPmjHfH9Dlpud1wfD7FmMM6EHB3RRFsJ8LDtkl5RWfX1CEjiSxZ0XLuOGNK
9BQgJGPbDEbyQiGQ97mALev7AhL6SmO4zP9tPh/uFq1xEnCObU7m4mN4iapYW/2C
bCk=
-----END CERTIFICATE-----