Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763323a623030623a3a2f34382d3438203d3e20323132313439.roa
File:                     326131343a3763323a623030623a3a2f34382d3438203d3e20323132313439.roa (raw, json)
Hash identifier:          W0VPHqj0tONciLL69GPPEpLzzXwu4yJR5pjU81qkV1E=
Subject key identifier:   DF:C2:2B:2A:E6:B1:99:FB:3C:54:1C:15:5C:A3:35:BB:FF:5F:64:19
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       3B80D19699F51B4CA12BD173A812F7AE71CE7F0D
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763323a623030623a3a2f34382d3438203d3e20323132313439.roa
Signing time:             Wed 21 Feb 2024 15:37:27 +0000
ROA not before:           Wed 21 Feb 2024 15:32:27 +0000
ROA not after:            Wed 19 Feb 2025 15:37:27 +0000
asID:                     212149
IP address blocks:        2a14:7c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:80:d1:96:99:f5:1b:4c:a1:2b:d1:73:a8:12:f7:ae:71:ce:7f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Feb 21 15:32:27 2024 GMT
            Not After : Feb 19 15:37:27 2025 GMT
        Subject: CN=DFC22B2AE6B199FB3C541C155CA335BBFF5F6419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c7:96:1d:69:17:8b:cc:30:88:df:46:8e:be:
                    87:58:00:2a:04:b6:c9:20:5e:42:77:1e:7d:2d:a5:
                    15:ac:ae:a2:43:61:e1:6a:cc:c8:78:72:21:bb:c7:
                    70:c4:8e:df:96:92:1f:a9:66:30:48:bd:60:88:3f:
                    4a:c6:d2:c7:72:40:92:ba:9d:24:44:4b:e2:92:62:
                    70:8a:21:d2:61:80:c3:80:a7:fa:5d:d6:05:63:6c:
                    8e:a3:46:19:f6:81:12:06:9f:48:b3:ac:51:9c:b5:
                    ed:18:42:17:d5:09:0d:42:fd:0b:7e:df:43:64:10:
                    f2:3d:33:40:fb:7a:48:81:fa:97:7a:42:e3:c0:05:
                    b3:8b:fc:d5:6e:68:eb:a4:08:1b:23:54:c8:62:93:
                    ad:ff:d2:29:47:17:ff:c9:f0:2f:bf:45:e4:c3:39:
                    14:c5:e9:7a:e4:42:a5:09:f9:11:7d:71:71:0d:73:
                    20:a9:2d:3a:9d:5f:86:cd:f1:53:78:01:be:86:45:
                    5d:a6:11:54:d2:c3:09:1c:c0:95:ab:5b:23:5d:1b:
                    ac:36:93:e5:e4:7e:b4:0b:3f:e8:e5:46:78:b8:00:
                    0e:04:a1:11:9a:20:b8:b0:0d:8e:f0:17:66:8a:33:
                    a2:ca:01:43:3d:bb:f2:66:2c:0c:65:17:4d:21:5b:
                    75:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C2:2B:2A:E6:B1:99:FB:3C:54:1C:15:5C:A3:35:BB:FF:5F:64:19
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763323a623030623a3a2f34382d3438203d3e20323132313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:6e:c2:d1:ba:1a:72:0d:e4:22:07:88:e1:22:cc:2f:14:30:
         7b:de:eb:a0:2c:f6:9b:62:e8:10:6c:1a:4f:b0:ed:7a:3d:f5:
         9b:f6:57:37:90:db:8d:36:c3:c3:54:9a:b6:e6:ff:d5:ea:3a:
         5f:ae:f7:76:7f:30:8a:a4:9e:2f:1b:05:7d:79:04:90:f7:71:
         ca:aa:af:17:45:fd:3d:20:be:e1:65:39:4e:46:13:0e:b6:71:
         27:ce:c5:60:1c:a3:a9:c1:eb:55:5d:43:b7:a4:e8:8f:5e:34:
         bd:0f:10:13:69:53:2b:13:b9:38:b4:2d:ec:17:e1:12:56:27:
         93:26:75:6c:35:fd:c0:5f:f7:a9:e3:27:30:6f:d3:a1:a9:87:
         b6:d6:e6:a3:3d:d5:eb:b3:47:92:6c:48:5d:50:7e:c5:00:be:
         6c:a0:f3:bb:2b:c6:0a:f6:73:0f:81:1f:ec:12:14:96:53:0f:
         88:a7:82:f1:a2:77:9a:de:3f:05:84:e4:c0:6d:f8:19:5f:55:
         f0:08:5b:bd:53:80:37:21:98:a1:e0:21:40:31:03:5a:4f:d4:
         69:02:81:30:9a:51:48:e9:a4:49:24:a2:cd:7f:5e:07:b4:81:
         96:fa:ac:42:83:ef:fc:87:9b:8a:87:85:55:c1:65:0b:c2:ac:
         95:8b:8b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----