Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763353a3a2f33322d3332203d3e203439353831.roa
File:                     326131343a3763353a3a2f33322d3332203d3e203439353831.roa (raw, json)
Hash identifier:          9+Y7QtcpMVAvLw179agmoWXZ/RlzPgtRdspw7+XIkIo=
Subject key identifier:   08:39:7A:CC:6F:EC:7C:BF:2E:45:F4:EF:13:49:55:B0:00:62:1C:45
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       7BCB78EE4F59204221A481161D4AFCC378B38D0F
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763353a3a2f33322d3332203d3e203439353831.roa
Signing time:             Mon 29 Apr 2024 15:35:26 +0000
ROA not before:           Mon 29 Apr 2024 15:30:26 +0000
ROA not after:            Mon 28 Apr 2025 15:35:26 +0000
asID:                     49581
IP address blocks:        2a14:7c5::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:cb:78:ee:4f:59:20:42:21:a4:81:16:1d:4a:fc:c3:78:b3:8d:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Apr 29 15:30:26 2024 GMT
            Not After : Apr 28 15:35:26 2025 GMT
        Subject: CN=08397ACC6FEC7CBF2E45F4EF134955B000621C45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:73:9c:68:1e:cc:e2:82:f8:c5:5a:eb:b7:c3:
                    fd:db:f6:c1:d6:e0:15:e2:5c:e1:68:fd:50:b3:cd:
                    4f:d8:e3:2c:b7:96:ea:f3:1f:3d:27:77:b1:85:8b:
                    4c:f6:c9:d8:f5:ea:aa:00:1d:e7:17:6e:9e:cf:ac:
                    e4:43:9b:15:c0:ca:e8:f8:f2:56:6a:32:05:0c:18:
                    31:50:2a:71:5d:21:9c:32:61:20:85:57:27:ac:71:
                    09:4c:c1:3c:a7:3f:28:f9:cc:bc:8c:46:cf:72:16:
                    92:5e:85:ed:b2:8a:1b:26:40:6f:6f:11:ce:44:7d:
                    22:4e:47:26:b5:d6:c7:bb:4f:27:dd:ab:ac:4d:76:
                    1f:94:07:4c:60:d1:31:5b:c5:90:24:2b:9d:e9:18:
                    9c:d3:3f:32:be:0b:78:71:95:a2:bc:23:93:30:a0:
                    b5:b4:d7:23:4a:50:a3:bc:6f:a4:54:b8:88:61:63:
                    06:3b:5a:f6:01:af:4c:07:02:ab:af:e0:90:6e:62:
                    7c:86:6a:de:c1:db:d5:d0:1b:05:d6:d3:45:89:52:
                    2a:2a:cb:93:dd:5e:f2:a6:3a:d0:bf:c1:fe:76:b1:
                    dc:e7:6d:23:a4:83:2a:f9:47:6d:d8:b8:39:bf:f2:
                    06:a6:d8:30:76:28:62:e2:b2:55:7d:6c:d9:40:8d:
                    c6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:39:7A:CC:6F:EC:7C:BF:2E:45:F4:EF:13:49:55:B0:00:62:1C:45
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763353a3a2f33322d3332203d3e203439353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c5::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:5a:dd:dc:53:59:4d:9a:1c:d6:2f:e4:7d:1d:61:3a:86:c1:
         bd:6c:a1:51:e3:62:d8:c2:20:31:4f:d6:a1:62:86:53:c9:d3:
         1e:31:a2:44:83:10:8b:9b:5a:cd:10:3f:10:80:ec:68:65:f2:
         71:7c:98:4c:f9:ed:e2:c7:e9:45:c2:9b:90:fd:68:48:8b:87:
         6c:c2:b2:da:eb:c1:d4:5c:be:b6:0b:cc:bd:27:23:4a:55:43:
         36:49:79:ea:6a:ed:58:b8:84:e3:18:63:00:ab:6a:7d:da:e5:
         b6:64:17:c9:14:cb:1e:88:29:a7:8d:d5:02:92:74:9f:53:90:
         4a:e7:43:e8:fa:56:96:1a:5e:af:bb:98:4a:8d:6d:d2:58:67:
         74:27:0b:40:dc:dd:fa:a4:07:b3:e8:f2:d0:27:24:12:09:49:
         f4:27:0a:00:22:a1:8a:7f:e0:b8:e9:2c:5b:cf:5c:5e:ad:84:
         9c:eb:6e:05:78:42:66:5b:09:90:af:bf:71:25:2b:ff:ea:98:
         05:61:b0:f9:ff:f9:73:0e:66:38:86:26:da:30:23:6e:69:da:
         fb:4f:60:c1:8e:f2:c5:8f:fc:54:90:18:04:93:fa:c9:51:23:
         7f:aa:08:69:7e:0d:7e:c3:08:67:1c:9f:dd:54:3f:e9:67:1e:
         11:e4:28:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----