Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763343a3a2f33322d3332203d3e20313937343737.roa
File:                     326131343a3763343a3a2f33322d3332203d3e20313937343737.roa (raw, json)
Hash identifier:          +GL14cfu9WtxyOQ/HBgLhve4tBvsZDJ8rbRDZGBrIzU=
Subject key identifier:   B0:74:47:E5:11:3A:AF:5F:7D:3E:EA:C9:24:81:EA:52:9E:6C:37:51
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       74E4910B78C891BCF95F3E064DE0F80A5DFC7B03
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763343a3a2f33322d3332203d3e20313937343737.roa
Signing time:             Tue 21 May 2024 11:35:46 +0000
ROA not before:           Tue 21 May 2024 11:30:46 +0000
ROA not after:            Tue 20 May 2025 11:35:46 +0000
asID:                     197477
IP address blocks:        2a14:7c4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e4:91:0b:78:c8:91:bc:f9:5f:3e:06:4d:e0:f8:0a:5d:fc:7b:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: May 21 11:30:46 2024 GMT
            Not After : May 20 11:35:46 2025 GMT
        Subject: CN=B07447E5113AAF5F7D3EEAC92481EA529E6C3751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3a:23:42:fb:47:13:c3:ef:d8:a3:39:cb:66:
                    97:85:af:b0:f3:cc:22:ed:47:aa:64:8c:43:24:13:
                    bc:23:cf:35:27:c9:a4:c1:24:d0:1c:c5:b7:1c:94:
                    39:41:fa:84:96:64:60:91:25:fd:56:8a:95:b3:a9:
                    84:df:fa:62:fd:71:23:85:ec:78:dd:41:8b:66:28:
                    0f:e2:b8:9b:0b:35:df:54:3f:66:61:af:d2:43:c8:
                    b3:0c:d5:95:73:f1:3a:ea:e7:82:e8:d9:cf:06:a1:
                    c6:00:32:90:81:22:96:03:7d:fa:48:78:5f:29:3e:
                    d3:c3:d8:a0:d0:24:ac:4b:3a:b7:82:92:33:37:5a:
                    0c:9d:e2:e1:e3:5d:67:00:33:4b:bb:30:ca:27:35:
                    b6:91:26:6f:e3:d8:2b:14:0e:1d:75:89:3f:32:09:
                    89:23:66:be:67:d4:63:75:98:d5:28:6a:bb:d6:3a:
                    42:23:6c:cb:23:84:b7:5e:3d:c5:a7:06:7a:06:ce:
                    86:02:5f:d7:0b:ba:ae:a8:83:46:11:5e:e6:d0:6c:
                    07:09:08:f8:62:ed:6f:73:45:9c:84:67:70:3c:e5:
                    4b:0e:25:fb:49:6f:2e:9c:24:2e:32:4c:04:21:a0:
                    21:e6:93:90:e0:ac:83:17:4c:ba:5d:0f:00:09:78:
                    88:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:74:47:E5:11:3A:AF:5F:7D:3E:EA:C9:24:81:EA:52:9E:6C:37:51
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763343a3a2f33322d3332203d3e20313937343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:ed:b7:0b:62:d4:b3:eb:db:f7:30:70:3b:40:92:7c:80:18:
         5d:5f:69:7d:12:28:78:59:d2:91:46:3b:0a:19:c9:e9:07:92:
         19:cd:74:7e:30:ba:17:05:af:fd:22:c4:e3:f1:4f:6d:59:e5:
         1b:27:2b:79:91:f1:05:e1:1b:be:d6:7b:92:7e:50:0a:f9:9b:
         b0:75:98:75:d0:93:7a:6b:63:55:b4:34:7a:66:ce:5c:52:b9:
         ef:1c:40:58:23:22:8b:60:eb:94:90:6f:3e:a1:01:16:b7:79:
         9e:bc:d0:f7:01:1a:d5:c4:0e:05:07:50:ca:8d:99:94:6d:7b:
         fa:c5:e4:a9:da:b9:62:78:2f:8d:a8:21:b0:4f:59:f8:16:73:
         06:60:84:38:d1:56:57:10:a3:b6:c7:46:f3:86:8b:ae:29:79:
         af:80:d1:8c:39:8f:29:ba:83:57:bc:f3:26:41:1f:11:1e:e7:
         6d:f4:13:12:40:46:49:2a:9d:3c:93:31:2a:9b:95:a7:e5:87:
         7b:3b:4e:27:f9:c4:40:66:f0:ab:3b:e7:88:b0:26:26:70:f8:
         3d:36:57:e3:da:07:b8:76:a8:8d:de:f6:04:e9:6a:54:4f:4a:
         93:60:2a:7e:7a:48:d6:fb:f2:1e:8e:63:2f:43:fb:b0:49:af:
         32:70:5c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----