Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e20323135353830.roa
File:                     326131343a3763313a623030623a3a2f34382d3438203d3e20323135353830.roa (raw, json)
Hash identifier:          V2EAtTvWManS6rKAZocbXOnp71Cl0jG0LXmfVlSswXA=
Subject key identifier:   57:70:B8:43:30:68:2E:93:33:05:CA:94:B3:52:DF:07:6E:EE:D8:59
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       4FA94C84AB71BE9C1603D92369C491BE7E392E50
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e20323135353830.roa
Signing time:             Fri 15 Mar 2024 20:14:50 +0000
ROA not before:           Fri 15 Mar 2024 20:09:50 +0000
ROA not after:            Fri 14 Mar 2025 20:14:50 +0000
asID:                     215580
IP address blocks:        2a14:7c1:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:a9:4c:84:ab:71:be:9c:16:03:d9:23:69:c4:91:be:7e:39:2e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Mar 15 20:09:50 2024 GMT
            Not After : Mar 14 20:14:50 2025 GMT
        Subject: CN=5770B84330682E933305CA94B352DF076EEED859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:99:f0:7e:0c:34:9e:2e:93:cc:d0:cd:f7:cd:
                    e4:c3:a6:22:31:cf:3a:65:4c:18:be:38:43:cd:9f:
                    a2:33:ae:2f:5f:8d:e6:78:58:60:75:3e:a1:e6:bb:
                    98:c9:4f:e8:85:7b:3d:ed:f9:ef:f1:e1:31:fa:a5:
                    3e:56:4f:cd:7f:71:91:04:4b:1d:6e:8c:37:f2:c4:
                    b2:6b:85:d8:1a:57:a4:25:d8:dc:1b:06:db:3b:43:
                    eb:62:61:db:3b:1a:00:6e:af:3f:dc:d0:99:6b:e3:
                    d5:17:d3:c8:28:d4:01:0b:65:32:c5:85:8f:89:45:
                    14:d0:1e:f4:76:6a:bc:20:4c:04:87:41:4b:af:2b:
                    56:3a:a7:d6:b5:f3:31:47:84:c8:7d:5c:5d:17:11:
                    3a:9e:28:69:84:44:c5:f2:14:03:09:6c:b7:64:19:
                    14:aa:d4:12:f0:fb:76:4a:ce:20:bc:d1:dd:26:3f:
                    41:ab:6f:f0:c0:6c:2a:5f:7c:12:0c:57:58:ec:4b:
                    cc:f7:f7:a8:e5:d3:2f:18:01:99:eb:d9:51:e8:bf:
                    b1:f2:35:45:43:23:80:3f:77:f7:3b:32:b3:14:67:
                    48:7a:cd:91:89:1e:01:52:c9:ee:a0:e9:79:1f:31:
                    39:f3:46:f8:c8:b3:81:7e:4b:86:56:44:16:83:ce:
                    0d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:70:B8:43:30:68:2E:93:33:05:CA:94:B3:52:DF:07:6E:EE:D8:59
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e20323135353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c1:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:f1:a8:43:8c:6d:c2:6f:05:05:72:38:e5:86:30:c9:5d:e7:
         52:61:f9:56:fb:97:8e:80:b7:19:c1:dd:6c:87:d3:b7:79:64:
         73:2f:d0:e8:ca:09:c7:7e:14:cb:b7:07:c5:4e:86:eb:68:c5:
         c7:fa:81:e4:8b:5c:7a:e6:ab:32:cf:1e:c7:80:01:85:8d:7a:
         f0:c8:ca:22:6d:06:95:18:cc:48:53:7b:ac:7f:be:17:a5:42:
         da:2a:9c:94:85:78:7f:cf:6f:7f:8a:fd:8a:56:92:4e:7a:b2:
         b1:65:96:44:1c:b7:b3:1a:88:b6:ee:cf:7c:ea:58:36:be:50:
         68:ce:7d:b3:98:6b:c4:d2:e8:cb:53:6b:ee:7a:96:cb:f6:f0:
         f6:a3:40:ad:6b:02:d2:0b:77:4d:ef:dc:91:c7:b4:44:ee:f7:
         e2:db:75:d3:06:3a:76:11:95:e4:61:27:b3:4e:36:c1:bd:7b:
         95:4d:f6:7d:9c:54:ab:0f:91:66:11:55:e2:78:9c:fe:09:42:
         64:19:5b:ad:98:fe:a1:c7:e7:f6:ca:22:21:0a:71:cd:be:4d:
         bf:ec:97:7f:2f:b9:9d:b6:f6:e2:b9:15:ae:a3:f5:30:0e:74:
         bc:c0:f1:fd:f6:b4:42:fd:84:a2:bf:da:27:45:bc:18:f3:94:
         fa:b6:43:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----