Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763343a623030623a3a2f34382d3438203d3e20323135333637.roa
File:                     326131343a3763343a623030623a3a2f34382d3438203d3e20323135333637.roa (raw, json)
Hash identifier:          Qk9/a5z/DyK8hqkIeLkip66p1HOE0/j7NDp3qyh9dkU=
Subject key identifier:   C6:61:BD:5A:F7:5B:7F:47:1D:87:40:73:09:9B:5F:D3:42:B6:5B:D2
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       47C34A35F31BEC538BD353B4509EA8E980E5C56D
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763343a623030623a3a2f34382d3438203d3e20323135333637.roa
Signing time:             Fri 15 Mar 2024 20:10:35 +0000
ROA not before:           Fri 15 Mar 2024 20:05:35 +0000
ROA not after:            Fri 14 Mar 2025 20:10:35 +0000
asID:                     215367
IP address blocks:        2a14:7c4:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:c3:4a:35:f3:1b:ec:53:8b:d3:53:b4:50:9e:a8:e9:80:e5:c5:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Mar 15 20:05:35 2024 GMT
            Not After : Mar 14 20:10:35 2025 GMT
        Subject: CN=C661BD5AF75B7F471D874073099B5FD342B65BD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1b:88:18:ce:99:b6:23:4e:f3:17:11:a4:6e:
                    b9:5f:30:b4:de:b5:8c:79:e0:29:7c:50:0a:34:c7:
                    20:eb:40:7d:a9:a5:ee:89:1f:65:20:31:aa:6c:a4:
                    63:6a:32:31:e4:63:16:df:a1:d7:11:14:31:71:36:
                    00:74:34:a6:fc:79:12:7d:bd:b9:94:f8:1b:bd:32:
                    cc:f9:c0:8c:32:47:71:38:57:a4:fc:c1:71:63:17:
                    ec:b3:45:7b:ae:eb:2d:f5:a5:1a:16:3f:0b:c5:22:
                    f1:8a:77:73:d5:62:d9:a3:e0:cc:ed:b8:2c:7d:9f:
                    e8:54:88:1e:17:28:54:06:66:c1:ad:4e:f4:a8:4b:
                    7e:1d:57:51:44:d5:9e:d0:17:02:46:a1:a1:ae:10:
                    80:e1:62:98:8a:34:6a:8a:6c:19:76:be:9a:53:4f:
                    4d:fd:c7:0f:4c:10:81:39:b4:c1:c4:3b:12:52:2b:
                    40:00:51:27:6b:90:3d:15:4b:b4:aa:4b:dc:4a:32:
                    68:24:bd:8d:57:c2:0c:25:8e:05:2c:a1:4d:ba:06:
                    83:cf:b4:aa:2b:eb:ea:e8:d6:cd:6d:ae:80:ea:95:
                    87:f2:57:99:88:05:00:54:0d:1f:d2:30:dd:60:bd:
                    dd:f5:48:88:7b:5d:9b:f4:92:a3:19:72:80:a8:e8:
                    a3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:61:BD:5A:F7:5B:7F:47:1D:87:40:73:09:9B:5F:D3:42:B6:5B:D2
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763343a623030623a3a2f34382d3438203d3e20323135333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c4:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:5d:8c:c9:a7:65:67:91:80:cf:48:11:a6:1d:8f:ed:2d:c2:
         f7:f7:f8:bc:59:01:b3:c7:70:07:cf:90:77:8e:3e:df:4b:c8:
         0c:df:82:53:1e:30:6d:99:8e:c8:6e:2e:14:76:d5:60:ab:4d:
         69:ea:00:f2:eb:a0:2c:3f:c9:31:a6:e2:21:03:2a:84:bb:de:
         54:5c:68:ae:24:21:9d:47:cb:05:e8:2f:a2:12:24:e3:63:37:
         ee:12:39:eb:cf:45:46:26:3b:47:3e:5a:45:0e:12:00:c7:8c:
         aa:ff:8f:6d:8d:7a:2f:c7:f4:1a:e9:1b:dc:6a:ad:33:6c:d6:
         02:b1:f4:06:a9:9b:3e:34:f6:ee:f5:4f:16:31:ae:de:9b:e2:
         b6:0d:be:65:bb:16:56:3f:7d:b8:bd:c1:2e:3b:95:78:be:b5:
         18:6a:79:a8:85:f2:8c:71:f2:b4:72:c6:4d:55:5a:ed:44:a7:
         99:24:76:1c:ec:7f:70:6a:5a:f8:64:c3:11:24:04:13:7a:10:
         4c:8e:6d:9f:77:a1:9e:58:35:e6:bd:81:76:1d:79:81:a3:26:
         15:89:ca:7f:c0:65:e1:7a:8d:5e:cc:fe:b4:75:c0:9e:dd:17:
         fd:be:42:1f:5b:6f:67:84:28:17:a3:8d:ca:02:50:db:6f:b7:
         7f:3e:de:a5
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUR8NKNfMb7FOL01O0UJ6o6YDlxW0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ0NDJlMzNhOGY2MTU4MGI2YjRkZmM0ODI4ZDk1ZTA3
ODkxZjRiYzAeFw0yNDAzMTUyMDA1MzVaFw0yNTAzMTQyMDEwMzVaMDMxMTAvBgNV
BAMTKEM2NjFCRDVBRjc1QjdGNDcxRDg3NDA3MzA5OUI1RkQzNDJCNjVCRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1G4gYzpm2I07zFxGkbrlfMLTe
tYx54Cl8UAo0xyDrQH2ppe6JH2UgMapspGNqMjHkYxbfodcRFDFxNgB0NKb8eRJ9
vbmU+Bu9Msz5wIwyR3E4V6T8wXFjF+yzRXuu6y31pRoWPwvFIvGKd3PVYtmj4Mzt
uCx9n+hUiB4XKFQGZsGtTvSoS34dV1FE1Z7QFwJGoaGuEIDhYpiKNGqKbBl2vppT
T039xw9MEIE5tMHEOxJSK0AAUSdrkD0VS7SqS9xKMmgkvY1XwgwljgUsoU26BoPP
tKor6+ro1s1troDqlYfyV5mIBQBUDR/SMN1gvd31SIh7XZv0kqMZcoCo6KPfAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUxmG9Wvdbf0cdh0BzCZtf00K2W9IwHwYDVR0j
BBgwFoAUdEQuM6j2FYC2tN/Ego2V4HiR9LwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWQ5OTgwODItYTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4
NjM5LzAvNzQ0NDJFMzNBOEY2MTU4MEI2QjRERkM0ODI4RDk1RTA3ODkxRjRCQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RFUXVNNmoyRllDMnROX0VnbzJWNEhp
UjlMdy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWQ5OTgwODIt
YTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4NjM5LzAvMzI2MTMxMzQzYTM3NjMzNDNh
NjIzMDMwNjIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzUzMzM2Mzcucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqFAfEsAswDQYJKoZIhvcNAQELBQADggEBALFdjMmnZWeRgM9IEaYd
j+0twvf3+LxZAbPHcAfPkHeOPt9LyAzfglMeMG2ZjshuLhR21WCrTWnqAPLroCw/
yTGm4iEDKoS73lRcaK4kIZ1HywXoL6ISJONjN+4SOevPRUYmO0c+WkUOEgDHjKr/
j22Nei/H9BrpG9xqrTNs1gKx9Aapmz409u71TxYxrt6b4rYNvmW7FlY/fbi9wS47
lXi+tRhqeaiF8oxx8rRyxk1VWu1Ep5kkdhzsf3BqWvhkwxEkBBN6EEyObZ93oZ5Y
Nea9gXYdeYGjJhWJyn/AZeF6jV7M/rR1wJ7dF/2+Qh9bb2eEKBejjcoCUNtvt38+
3qU=
-----END CERTIFICATE-----