Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763353a623030623a3a2f34382d3438203d3e20323135333637.roa
File:                     326131343a3763353a623030623a3a2f34382d3438203d3e20323135333637.roa (raw, json)
Hash identifier:          x+x4mZA5ZVRduudDklWxbIWigasTUfFp7h1pgC8CLmQ=
Subject key identifier:   B0:2D:B0:33:FC:7C:40:8C:B5:21:A3:0D:59:39:0C:EF:96:1A:05:EB
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       7A9A80117F65559A1CAA9383FFB2CA0F2ADD6D97
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763353a623030623a3a2f34382d3438203d3e20323135333637.roa
Signing time:             Fri 15 Mar 2024 20:10:44 +0000
ROA not before:           Fri 15 Mar 2024 20:05:44 +0000
ROA not after:            Fri 14 Mar 2025 20:10:44 +0000
asID:                     215367
IP address blocks:        2a14:7c5:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:9a:80:11:7f:65:55:9a:1c:aa:93:83:ff:b2:ca:0f:2a:dd:6d:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Mar 15 20:05:44 2024 GMT
            Not After : Mar 14 20:10:44 2025 GMT
        Subject: CN=B02DB033FC7C408CB521A30D59390CEF961A05EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0a:ec:16:a9:53:2e:8f:ef:cf:db:4a:7c:51:
                    6a:34:34:11:10:91:61:3b:0b:60:2f:83:2c:74:09:
                    86:f9:8f:bb:a0:d6:3e:87:29:c0:8a:20:6e:b8:55:
                    69:76:94:58:ed:4f:4f:c5:4e:27:21:e1:63:c5:bb:
                    0e:3c:ec:f2:35:0c:66:c2:be:0d:13:ee:e4:40:2d:
                    38:7d:09:0c:81:2f:a5:cc:f5:d5:61:42:c3:59:70:
                    28:c0:41:d1:93:ea:83:9d:00:fe:17:ec:a7:93:66:
                    3e:44:a4:b7:78:8f:fd:af:26:c7:51:75:e7:05:63:
                    9e:5b:8b:e4:b0:36:d4:b3:05:b6:97:c5:50:2c:9c:
                    7c:f4:a1:55:e7:92:9f:bd:25:e8:03:a3:26:3c:62:
                    fa:51:fe:c8:87:6d:1f:23:a9:5b:cb:80:64:bc:47:
                    6c:77:5f:10:fc:90:39:94:24:74:d6:59:48:51:bb:
                    e4:ea:7b:72:ee:50:6b:c3:47:1e:e5:4b:7c:9d:9c:
                    bf:14:36:bc:1e:50:5f:fb:90:a9:58:63:ce:63:c9:
                    ea:d1:23:e9:91:14:98:2b:61:dd:dd:48:8f:ce:25:
                    a9:dc:3c:ac:b4:82:4f:d3:3b:9d:7b:02:50:28:98:
                    5f:c1:a6:3d:70:2e:99:68:44:8b:13:07:d1:72:da:
                    2d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2D:B0:33:FC:7C:40:8C:B5:21:A3:0D:59:39:0C:EF:96:1A:05:EB
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763353a623030623a3a2f34382d3438203d3e20323135333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c5:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:39:75:03:ee:b7:4d:af:65:46:b2:70:84:71:0d:0a:9d:ef:
         18:17:52:91:6b:48:98:5e:ec:46:07:1e:95:fc:9f:d9:17:ab:
         35:0d:1d:c7:c8:f8:c7:5a:1a:dd:52:e1:02:bc:6f:41:6b:1e:
         70:4a:72:4b:b9:b7:f3:5c:43:96:9a:e8:e0:ad:37:e2:7b:66:
         9b:24:ac:ab:ab:5c:e2:71:7b:de:ae:15:a5:35:53:94:cf:5d:
         63:ed:49:6a:85:12:6d:ec:18:3e:44:02:c5:56:8e:77:e8:06:
         79:0c:4a:a1:c7:8e:04:8a:8f:e8:8b:e9:1b:c0:db:3f:0a:60:
         9e:d5:5d:ca:77:33:45:40:16:bd:dd:52:ca:2b:94:a2:6a:35:
         7d:93:27:72:cc:64:21:f2:26:0b:8c:1e:d5:5f:d5:a9:85:5c:
         d1:6e:c5:44:de:b8:63:2d:29:ac:b6:2b:37:3f:b9:04:27:95:
         e7:46:dd:df:68:11:e9:fa:0d:c8:b0:e5:0d:87:31:60:26:22:
         b5:0b:ad:84:69:5f:ff:14:00:e8:b6:c0:bc:26:16:8a:ab:4a:
         b2:1c:69:f4:ba:86:20:6e:5b:a1:89:ae:79:0e:52:b9:f9:93:
         34:df:0a:e0:2d:a0:1c:11:1f:c8:79:64:9e:fd:61:07:d5:47:
         7c:8b:36:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----