Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763333a623030623a3a2f34382d3438203d3e20323132313439.roa
File:                     326131343a3763333a623030623a3a2f34382d3438203d3e20323132313439.roa (raw, json)
Hash identifier:          QuuCeO+tS6InK7ylRz5HTI+olh4RcX+xHaT8T2+rNpk=
Subject key identifier:   A7:E0:7C:BD:D1:C7:07:70:4C:D2:0F:B1:00:10:1D:9D:AE:15:6A:83
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       2358B57B3AADE718A96859669A1FE33CB99E6188
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763333a623030623a3a2f34382d3438203d3e20323132313439.roa
Signing time:             Wed 21 Feb 2024 15:37:36 +0000
ROA not before:           Wed 21 Feb 2024 15:32:36 +0000
ROA not after:            Wed 19 Feb 2025 15:37:36 +0000
asID:                     212149
IP address blocks:        2a14:7c3:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:58:b5:7b:3a:ad:e7:18:a9:68:59:66:9a:1f:e3:3c:b9:9e:61:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Feb 21 15:32:36 2024 GMT
            Not After : Feb 19 15:37:36 2025 GMT
        Subject: CN=A7E07CBDD1C707704CD20FB100101D9DAE156A83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e2:4e:c6:d7:fc:6e:69:ad:c5:e4:55:15:cc:
                    f0:b1:2c:67:d5:5f:f0:6a:24:cb:6e:f8:0c:cd:db:
                    87:47:59:ea:c9:26:45:20:9d:c6:ff:22:49:f6:f0:
                    c8:e1:71:67:42:0d:93:cb:0d:cb:81:68:e3:1c:23:
                    bc:f4:d1:da:58:00:39:f3:5a:ed:c4:0f:be:34:bb:
                    2e:6c:b8:a4:06:59:fd:c9:77:77:0d:fc:58:d6:65:
                    49:4b:56:32:99:1c:54:56:e4:27:be:61:61:b0:57:
                    da:d5:6f:75:b8:9d:7c:b5:0f:b4:5b:bb:6e:8f:8f:
                    7e:fd:ca:32:3a:42:b0:ac:51:de:b9:0b:99:35:e1:
                    54:34:67:1f:0e:56:21:79:6f:64:07:b6:f0:fa:e8:
                    a6:25:b3:40:68:86:08:63:bf:13:80:4e:fe:13:0c:
                    bb:92:95:26:90:4f:91:24:82:ad:66:f0:d8:27:87:
                    3b:0a:e5:6f:55:bf:b2:fd:38:03:74:4d:ad:0d:3e:
                    2b:53:70:68:af:9f:f9:e9:71:90:b1:7a:cd:f6:64:
                    0e:33:42:37:e0:f2:f6:7c:f5:9b:0d:cd:d8:2b:2f:
                    78:e0:38:e5:3e:a3:11:6c:ec:df:2b:d6:75:49:74:
                    c0:29:83:7f:65:6f:51:0d:88:3b:36:ea:b7:fb:68:
                    ef:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E0:7C:BD:D1:C7:07:70:4C:D2:0F:B1:00:10:1D:9D:AE:15:6A:83
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763333a623030623a3a2f34382d3438203d3e20323132313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c3:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:f1:cb:d3:72:86:03:35:76:10:74:08:5b:16:fe:e4:92:dd:
         10:5a:35:f8:cb:42:bf:f6:09:a2:14:db:50:cf:93:4b:0d:8a:
         07:ae:65:47:8a:26:7f:83:24:7b:af:fe:03:b5:9c:63:2b:c0:
         68:a3:d1:f9:16:a6:fc:0f:d5:2b:2f:f4:db:b0:c4:52:3c:40:
         a3:09:4e:c3:6e:a2:d5:9b:9f:d7:b3:ba:57:f9:1e:3e:52:2c:
         ee:2b:df:c6:06:31:f5:a6:83:57:e6:c9:47:cf:02:17:55:1a:
         64:3b:57:20:b6:30:31:7d:48:fb:8a:1f:ad:52:81:14:dc:5c:
         a7:f0:7c:4e:c2:25:a2:4b:32:b3:78:1e:1a:8a:aa:29:c0:ef:
         b0:89:96:60:1e:06:1a:49:a5:a4:5d:ce:ea:47:1f:ec:62:e4:
         ce:1c:a2:fc:2c:56:b6:fa:cf:46:87:72:d1:2f:59:0d:16:bd:
         ee:c7:b6:7a:6d:6b:5e:d1:f7:a4:6c:0f:97:ad:f2:e8:3a:be:
         a7:78:9a:c6:01:b2:df:01:87:ad:67:e7:55:93:31:04:a0:c2:
         43:11:ac:01:04:ca:ee:b4:92:dd:00:2c:2c:5e:b4:ce:eb:84:
         45:6a:f5:66:fc:88:5b:dd:55:cf:c7:78:6e:7f:33:30:ac:85:
         1b:e9:c3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----