Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763323a623030623a3a2f34382d3438203d3e20323135333637.roa
File:                     326131343a3763323a623030623a3a2f34382d3438203d3e20323135333637.roa (raw, json)
Hash identifier:          shpVkA7jwlhHiihI5AnondVsjCRVJ9ZIoVIwSqIv5LU=
Subject key identifier:   C3:69:8D:B6:D4:27:25:92:4C:7D:01:4B:51:E6:4E:68:C4:14:91:6F
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       37F43CEE2A42E0F63489FFA744271EBD96EE0CD1
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763323a623030623a3a2f34382d3438203d3e20323135333637.roa
Signing time:             Fri 15 Mar 2024 20:08:59 +0000
ROA not before:           Fri 15 Mar 2024 20:03:59 +0000
ROA not after:            Fri 14 Mar 2025 20:08:59 +0000
asID:                     215367
IP address blocks:        2a14:7c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f4:3c:ee:2a:42:e0:f6:34:89:ff:a7:44:27:1e:bd:96:ee:0c:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Mar 15 20:03:59 2024 GMT
            Not After : Mar 14 20:08:59 2025 GMT
        Subject: CN=C3698DB6D42725924C7D014B51E64E68C414916F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1a:92:76:f7:be:33:22:90:b7:ac:04:7a:4b:
                    44:88:d1:29:0a:ef:66:5f:cb:dd:f5:64:f2:74:d0:
                    2e:14:c9:bb:54:08:fd:51:84:63:5f:58:2f:53:ba:
                    9d:75:20:1f:f9:ba:70:f3:a8:25:4d:63:3a:60:69:
                    40:6a:d3:2e:35:ef:b8:b8:8d:99:e0:f4:85:33:d4:
                    67:cf:6f:f4:83:8b:cf:ff:93:85:71:3a:12:0c:f6:
                    b6:70:86:a2:f8:42:ab:31:34:d3:f7:bd:e1:4f:e4:
                    c2:ed:04:c6:a5:b2:1d:13:8f:6a:d3:46:47:32:4b:
                    52:71:3f:39:4d:18:bc:9d:4e:1d:9f:3b:ea:5f:6f:
                    6a:92:8f:0f:25:87:8f:50:b9:04:5e:74:b4:33:6d:
                    39:13:84:b9:6e:44:12:2a:8d:77:af:9b:ef:cf:43:
                    11:48:85:18:9c:52:e1:c2:8e:8d:5a:d3:1f:84:a7:
                    fa:5b:98:67:8b:48:31:6d:7f:57:79:dc:38:4d:90:
                    63:3c:fb:98:67:a8:1f:00:e7:6b:5e:b1:25:1b:d1:
                    de:fb:fe:23:6f:89:48:87:b1:d3:0b:97:2f:ce:4c:
                    17:ec:80:c3:b8:73:4a:09:3e:ce:d7:cf:17:ad:d8:
                    d4:0e:21:83:22:5f:22:10:03:b6:28:ae:62:2e:e0:
                    77:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:69:8D:B6:D4:27:25:92:4C:7D:01:4B:51:E6:4E:68:C4:14:91:6F
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763323a623030623a3a2f34382d3438203d3e20323135333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:bd:e7:ad:13:58:2d:5f:88:9b:eb:7b:b2:ab:f5:d8:0b:32:
         30:85:6a:89:cf:a6:2c:48:61:f8:65:89:84:67:2e:09:c0:b8:
         5f:0e:2a:44:db:2b:e4:17:3e:cc:16:90:6d:84:06:33:3c:75:
         ff:c2:22:14:dc:f1:f5:d5:0b:10:4c:c2:ac:bd:dc:54:0a:7f:
         b4:a7:92:c6:4d:96:a2:2b:09:9c:07:37:1a:dd:8e:c0:ed:20:
         a6:a0:4b:7d:b8:fd:93:73:0a:10:54:31:59:3d:49:15:18:c4:
         14:30:ca:3c:c6:b2:76:2d:89:e4:38:2d:76:29:c6:c5:cb:46:
         71:f5:54:28:8a:bb:12:22:2a:1c:08:e5:12:09:cb:82:c9:d4:
         ae:86:83:4f:d9:83:89:4e:91:18:70:5f:72:83:19:5d:38:40:
         7b:23:57:a1:ce:ce:4a:91:a3:f8:f0:29:99:73:86:07:cd:d9:
         fc:7c:1e:88:3b:1c:36:cc:31:03:0a:3e:ba:03:35:ac:47:dd:
         40:44:b6:2f:ea:fb:e7:fd:91:1b:9f:2c:7c:72:73:2b:2a:12:
         7d:99:ca:8d:1f:f8:3b:c9:ff:e4:a6:ec:d3:0e:57:6d:cb:54:
         17:8d:76:c0:6e:4c:8f:bf:46:8e:ec:0c:76:bd:2a:e0:8c:17:
         ce:4f:af:e8
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUN/Q87ipC4PY0if+nRCcevZbuDNEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ0NDJlMzNhOGY2MTU4MGI2YjRkZmM0ODI4ZDk1ZTA3
ODkxZjRiYzAeFw0yNDAzMTUyMDAzNTlaFw0yNTAzMTQyMDA4NTlaMDMxMTAvBgNV
BAMTKEMzNjk4REI2RDQyNzI1OTI0QzdEMDE0QjUxRTY0RTY4QzQxNDkxNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRGpJ2974zIpC3rAR6S0SI0SkK
72Zfy931ZPJ00C4UybtUCP1RhGNfWC9Tup11IB/5unDzqCVNYzpgaUBq0y4177i4
jZng9IUz1GfPb/SDi8//k4VxOhIM9rZwhqL4QqsxNNP3veFP5MLtBMalsh0Tj2rT
RkcyS1JxPzlNGLydTh2fO+pfb2qSjw8lh49QuQRedLQzbTkThLluRBIqjXevm+/P
QxFIhRicUuHCjo1a0x+Ep/pbmGeLSDFtf1d53DhNkGM8+5hnqB8A52tesSUb0d77
/iNviUiHsdMLly/OTBfsgMO4c0oJPs7Xzxet2NQOIYMiXyIQA7YormIu4HetAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUw2mNttQnJZJMfQFLUeZOaMQUkW8wHwYDVR0j
BBgwFoAUdEQuM6j2FYC2tN/Ego2V4HiR9LwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWQ5OTgwODItYTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4
NjM5LzAvNzQ0NDJFMzNBOEY2MTU4MEI2QjRERkM0ODI4RDk1RTA3ODkxRjRCQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RFUXVNNmoyRllDMnROX0VnbzJWNEhp
UjlMdy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWQ5OTgwODIt
YTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4NjM5LzAvMzI2MTMxMzQzYTM3NjMzMjNh
NjIzMDMwNjIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzUzMzM2Mzcucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqFAfCsAswDQYJKoZIhvcNAQELBQADggEBAA69560TWC1fiJvre7Kr
9dgLMjCFaonPpixIYfhliYRnLgnAuF8OKkTbK+QXPswWkG2EBjM8df/CIhTc8fXV
CxBMwqy93FQKf7SnksZNlqIrCZwHNxrdjsDtIKagS324/ZNzChBUMVk9SRUYxBQw
yjzGsnYtieQ4LXYpxsXLRnH1VCiKuxIiKhwI5RIJy4LJ1K6Gg0/Zg4lOkRhwX3KD
GV04QHsjV6HOzkqRo/jwKZlzhgfN2fx8Hog7HDbMMQMKProDNaxH3UBEti/q++f9
kRufLHxycysqEn2Zyo0f+DvJ/+Sm7NMOV23LVBeNdsBuTI+/Ro7sDHa9KuCMF85P
r+g=
-----END CERTIFICATE-----