Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763343a3a2f33322d3332203d3e2030.roa
File:                     326131343a3763343a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier:          AQrzu5RPE5exy23UVlBNb2nWVymivGdT23BFJVHav9s=
Subject key identifier:   8F:AD:1B:43:93:B3:9A:F9:5A:E0:26:94:0D:44:07:14:C0:7F:D5:C5
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       464A91E3FE36A16FA25547E2D9DE72F57B3E29CB
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763343a3a2f33322d3332203d3e2030.roa
Signing time:             Fri 10 May 2024 16:46:53 +0000
ROA not before:           Fri 10 May 2024 16:41:53 +0000
ROA not after:            Fri 09 May 2025 16:46:53 +0000
asID:                     0
IP address blocks:        2a14:7c4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:4a:91:e3:fe:36:a1:6f:a2:55:47:e2:d9:de:72:f5:7b:3e:29:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: May 10 16:41:53 2024 GMT
            Not After : May  9 16:46:53 2025 GMT
        Subject: CN=8FAD1B4393B39AF95AE026940D440714C07FD5C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:71:cc:d0:01:3e:2b:1f:72:be:c9:60:e1:d6:
                    c4:a8:8e:49:96:cf:6c:b0:f6:a6:89:21:91:24:d0:
                    14:c3:2e:97:17:2e:bc:c4:a4:de:6c:5a:b5:f4:5c:
                    93:e7:92:68:87:9d:bc:6c:57:92:1d:0e:8e:7f:41:
                    e4:22:60:29:cb:d2:d7:f2:e4:30:bf:15:5e:56:f6:
                    01:c6:20:b7:7c:c7:fc:0a:1a:b5:7a:be:25:93:4a:
                    1e:6d:77:07:a8:72:38:4e:0b:85:3a:de:93:d5:32:
                    98:39:2c:95:17:a1:90:04:31:7c:7e:27:21:10:d8:
                    71:c8:c6:fe:81:c8:00:4e:9d:2c:c8:99:87:8b:79:
                    6d:65:84:b8:60:7c:bb:d1:f3:8b:3c:44:6b:71:f4:
                    96:75:cb:da:f7:45:ca:4e:7f:23:3e:c7:48:e6:b9:
                    fa:08:33:5c:cc:16:88:7b:d0:ab:8a:9e:23:53:fd:
                    44:af:f9:9e:11:5e:4b:f4:36:87:ce:6b:d5:40:3e:
                    e8:f7:73:1f:be:81:13:23:a6:cf:73:f4:b6:a4:a0:
                    f9:e6:4c:38:f3:59:3d:3d:83:fe:45:b4:43:23:fa:
                    a8:4c:aa:18:8e:03:e3:af:f8:09:b0:63:6d:e0:f6:
                    82:a6:43:0a:f0:66:77:0c:fb:a7:b4:35:7a:66:95:
                    d8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:AD:1B:43:93:B3:9A:F9:5A:E0:26:94:0D:44:07:14:C0:7F:D5:C5
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763343a3a2f33322d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:3c:23:34:6c:9c:7c:b4:00:2f:92:cd:24:b6:bf:5b:0d:30:
         a4:07:58:2c:e2:cf:86:5c:24:51:fb:ca:e6:c0:3d:0d:86:6f:
         46:6f:dc:52:68:0c:e0:76:d9:45:91:e9:fa:eb:dc:3d:1c:ea:
         f6:d1:ba:ab:14:35:00:85:6c:cc:41:1c:c5:6c:63:32:8f:7b:
         4f:96:b1:99:6c:0a:ce:00:d9:3e:14:60:a9:f9:bf:70:3d:a9:
         03:f5:65:86:30:93:af:63:01:2c:19:92:c7:dc:2e:55:75:7a:
         30:4a:8e:bb:80:c6:d7:e5:36:61:8d:d8:7c:9c:d2:bd:3f:04:
         0f:d9:e9:35:85:8b:27:36:5b:80:25:85:45:2f:10:0a:82:b8:
         84:4f:e3:78:6f:4c:91:da:5f:dd:c3:21:3e:db:6f:38:8c:89:
         b2:1f:34:41:ec:30:3c:cc:e2:e4:ad:84:63:ef:0e:fe:53:51:
         3f:2d:be:68:87:5a:af:b3:c2:24:a7:ed:de:9b:c8:f6:48:92:
         f9:45:56:f9:cc:2e:0a:bf:fc:33:b0:7c:62:88:c6:99:39:22:
         13:dc:2f:24:1c:6d:a2:65:be:6c:f3:85:ff:a8:00:46:44:cb:
         b1:f4:f1:bb:ce:dc:87:72:ff:da:de:c8:bb:74:a9:4c:bb:3b:
         6b:e8:73:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----