Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e20323136333639.roa
File:                     326131343a3763313a623030623a3a2f34382d3438203d3e20323136333639.roa (raw, json)
Hash identifier:          ov0WS7AkB5b8eL5KYCA5tkjsY2Ybg9ywoTvtrQo7k4g=
Subject key identifier:   20:26:B0:A0:F3:E0:C1:51:40:1B:6B:0A:A6:64:47:96:F9:CA:9C:C1
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       1A5FAC4D01C2F53FA1D0DF59B7598024839C5A9C
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e20323136333639.roa
Signing time:             Sun 17 Mar 2024 20:52:58 +0000
ROA not before:           Sun 17 Mar 2024 20:47:58 +0000
ROA not after:            Sun 16 Mar 2025 20:52:58 +0000
asID:                     216369
IP address blocks:        2a14:7c1:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:5f:ac:4d:01:c2:f5:3f:a1:d0:df:59:b7:59:80:24:83:9c:5a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Mar 17 20:47:58 2024 GMT
            Not After : Mar 16 20:52:58 2025 GMT
        Subject: CN=2026B0A0F3E0C151401B6B0AA6644796F9CA9CC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:82:97:fd:4f:27:d8:fe:20:80:b2:1d:92:a6:
                    34:75:6b:73:e4:bc:73:87:0b:83:fc:65:eb:57:df:
                    7d:29:b8:93:e4:ce:bb:4d:2d:10:1b:38:ae:1a:08:
                    c0:30:2b:25:46:8a:d7:e7:22:65:89:f5:50:59:55:
                    66:3d:55:61:b3:71:e1:45:9b:1e:dc:4a:81:7d:fc:
                    c5:69:b6:8f:f0:4e:67:ee:43:06:66:a0:eb:6e:cd:
                    91:3b:e6:7a:d7:1a:3f:04:35:5d:90:0b:c9:6d:78:
                    ca:74:99:d2:46:19:bb:8d:b5:d2:76:48:63:3a:9c:
                    92:08:bc:b3:01:47:02:78:fc:5b:2d:1e:d1:1f:d6:
                    0a:5d:4d:d3:48:e5:d8:db:bd:7d:37:77:fc:47:f9:
                    b4:6d:c4:72:58:0e:cc:71:fb:c2:e9:a0:36:79:60:
                    4d:a2:52:ce:d6:8d:de:d8:51:cc:e0:04:46:3f:20:
                    cb:ce:d9:21:8f:80:30:36:40:bd:f9:51:14:5b:c3:
                    ab:dc:a9:ce:c8:a0:4d:8a:08:6f:4f:40:22:cb:83:
                    86:fe:f1:b8:3d:47:3c:c7:5c:cb:5c:be:49:c8:84:
                    9e:39:e9:e6:ff:28:43:99:86:86:33:e9:8b:f5:12:
                    90:4d:2c:09:4f:b4:11:03:bd:36:a5:c7:dc:c1:bc:
                    3c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:26:B0:A0:F3:E0:C1:51:40:1B:6B:0A:A6:64:47:96:F9:CA:9C:C1
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e20323136333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c1:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:04:19:96:1c:42:da:a9:fa:1a:9c:17:b5:ea:db:42:c2:a5:
         e3:a3:24:2f:33:9b:2e:d2:1f:13:cc:1e:22:ef:fb:b1:c7:84:
         43:cf:95:21:77:31:e6:cf:15:07:1a:6e:17:75:44:4e:f2:a7:
         52:d7:38:95:b5:31:5d:57:10:e0:22:7e:81:2c:4e:1d:8a:95:
         08:36:95:34:69:b2:24:dd:41:f6:b3:07:ad:c3:f3:b8:fd:28:
         18:f9:4d:58:50:e0:40:c4:95:9e:b6:da:0f:5c:41:b0:00:16:
         93:99:04:f5:7b:5c:4a:38:fa:82:22:64:f2:ba:2a:fc:8a:9a:
         09:ff:0d:e2:01:67:db:2d:1a:e8:33:50:77:18:be:9d:4a:b3:
         b4:aa:06:43:fb:64:85:a7:a9:06:54:d1:52:5f:9c:48:97:98:
         b4:08:50:e2:33:88:f5:be:47:62:48:ea:97:87:2c:6a:b9:b4:
         ab:5a:63:70:02:47:fd:97:56:1a:d5:2c:4f:84:29:9e:5b:84:
         f5:b9:48:8f:9c:f3:4b:59:75:5b:08:6b:41:38:db:bc:fc:9c:
         96:b2:78:24:ca:9c:e2:c1:32:30:2d:e7:96:53:70:a4:1f:c6:
         3f:3b:ab:e4:ab:80:5b:1a:b1:90:44:53:5c:98:cc:6e:e1:cb:
         3b:eb:34:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----