Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763343a3a2f33322d3438203d3e20313937343737.roa
File:                     326131343a3763343a3a2f33322d3438203d3e20313937343737.roa (raw, json)
Hash identifier:          Lbe/Mmt1Rw7fp+sORKdrG1ReKmrbEZQ4G+ghxYJE7NQ=
Subject key identifier:   33:B6:E7:DB:0F:BB:28:77:20:4F:14:27:C4:7C:CE:EB:21:1A:A1:D9
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       047ED6CC6B285FEBF54D00D3F72F36365C31695E
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763343a3a2f33322d3438203d3e20313937343737.roa
Signing time:             Fri 17 May 2024 16:09:57 +0000
ROA not before:           Fri 17 May 2024 16:04:57 +0000
ROA not after:            Fri 16 May 2025 16:09:57 +0000
asID:                     197477
IP address blocks:        2a14:7c4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:7e:d6:cc:6b:28:5f:eb:f5:4d:00:d3:f7:2f:36:36:5c:31:69:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: May 17 16:04:57 2024 GMT
            Not After : May 16 16:09:57 2025 GMT
        Subject: CN=33B6E7DB0FBB2877204F1427C47CCEEB211AA1D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cc:19:03:d2:c3:75:2f:18:ac:55:81:b9:43:
                    a8:1d:ec:3b:44:bf:7d:a7:de:3a:9d:ad:d3:5a:0c:
                    17:16:6a:23:4b:e2:ad:a8:be:dc:41:3e:c6:99:9a:
                    ca:64:64:80:31:48:34:c3:12:f5:49:46:76:c8:a3:
                    85:97:30:8c:54:97:00:a4:63:0e:80:59:f5:72:97:
                    d1:48:7c:32:d5:af:41:1c:f1:a1:e4:d3:ed:da:50:
                    36:05:fe:be:26:f8:db:dc:51:96:b0:63:40:98:42:
                    68:55:a5:ab:c7:be:62:70:6a:63:c0:3e:47:ca:f3:
                    dc:f5:de:31:af:b2:8e:26:87:08:b5:57:87:c4:57:
                    3a:48:15:f6:36:fe:39:38:26:5a:5f:15:84:bc:92:
                    d0:45:d0:a6:1d:68:db:cb:ca:51:ed:49:6c:fc:93:
                    7a:52:cd:8e:90:90:02:55:38:52:5a:8c:83:0e:0e:
                    71:61:70:6b:86:35:a5:d3:0f:bb:0c:31:1a:f3:60:
                    93:93:0a:62:4b:06:a2:81:16:5d:77:d7:a8:5a:6c:
                    90:d4:83:51:7b:57:6e:68:c5:c8:97:d9:36:09:80:
                    ec:ba:1e:d2:e7:5b:d3:79:df:d8:50:21:9d:52:75:
                    88:6e:e0:27:3b:50:41:81:98:dd:05:2b:7d:ec:c7:
                    2a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B6:E7:DB:0F:BB:28:77:20:4F:14:27:C4:7C:CE:EB:21:1A:A1:D9
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763343a3a2f33322d3438203d3e20313937343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:ae:db:3b:da:67:ed:48:1d:38:95:7a:b2:d5:3c:af:71:85:
         86:f3:78:f7:2c:54:29:d3:2c:07:c6:a0:a8:09:ec:fd:67:d0:
         26:5a:a7:7e:19:50:3c:75:9f:7e:14:24:af:b4:ae:2f:61:68:
         4d:14:39:1f:b7:0f:97:ba:5c:a4:f1:ae:57:71:2f:c6:3d:4f:
         57:1a:da:54:32:ba:5c:6a:4b:d0:9a:12:41:14:59:9f:d6:f5:
         88:20:fb:7b:45:3a:a0:83:99:c9:7c:cf:eb:97:7b:f8:18:0f:
         46:cd:f5:fc:e6:5f:c8:e7:5d:0a:af:8a:6b:fa:66:dc:87:39:
         cc:63:f6:f2:94:d3:e1:da:13:e5:79:f9:b1:b8:e3:12:da:2a:
         71:df:be:7a:ea:6d:88:54:63:0e:cc:60:4e:1a:08:92:7e:4e:
         84:36:a2:4a:e6:d1:16:54:f1:73:10:92:fe:c8:a6:82:de:fd:
         f7:dd:03:8c:a6:12:35:99:29:00:a4:b0:8d:e6:19:f7:40:3d:
         b9:27:88:3e:12:94:57:27:74:0f:f2:5a:c3:e8:2c:11:c0:18:
         2d:4e:eb:aa:88:34:9b:c4:fa:2d:75:5c:e0:88:31:ec:31:77:
         8f:21:0a:ae:d5:8c:ac:d5:c8:cd:66:80:9a:2f:9f:2c:2f:a0:
         72:9e:96:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----