Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763363a3a2f33322d3438203d3e203439353831.roa
File:                     326131343a3763363a3a2f33322d3438203d3e203439353831.roa (raw, json)
Hash identifier:          0E0OLlP2gnGgyDL/PzPTTLVUwE1vx+/GQLaagSkG8u4=
Subject key identifier:   72:71:A6:A5:6D:75:F7:1C:21:C1:4C:A1:23:36:6A:56:D8:6C:E5:27
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       5B8348842B88D3FED4595D00A94BF826DB07B05C
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763363a3a2f33322d3438203d3e203439353831.roa
Signing time:             Tue 07 May 2024 17:36:44 +0000
ROA not before:           Tue 07 May 2024 17:31:44 +0000
ROA not after:            Tue 06 May 2025 17:36:44 +0000
asID:                     49581
IP address blocks:        2a14:7c6::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:83:48:84:2b:88:d3:fe:d4:59:5d:00:a9:4b:f8:26:db:07:b0:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: May  7 17:31:44 2024 GMT
            Not After : May  6 17:36:44 2025 GMT
        Subject: CN=7271A6A56D75F71C21C14CA123366A56D86CE527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2c:fc:6d:d5:97:53:98:0a:c5:81:54:a2:46:
                    a9:d8:e3:73:ab:0c:33:2d:30:b3:83:af:83:22:a8:
                    06:12:26:a7:3f:ab:b2:e4:f9:6b:86:ad:71:99:cf:
                    ab:6c:8f:2d:06:60:5b:6a:8f:70:5e:35:65:d9:0c:
                    ad:0d:af:86:f4:d8:92:cd:5f:f9:d1:54:22:d7:62:
                    fd:cb:da:32:9a:82:51:68:7b:4f:a8:3a:4a:7d:9e:
                    17:88:04:75:b1:ed:aa:a3:f0:c5:5a:88:7b:51:85:
                    c3:2c:81:49:04:ce:bb:d4:bf:f8:cb:54:2d:9e:01:
                    55:58:93:97:df:f4:92:38:91:a0:a3:8f:41:87:f4:
                    b1:84:42:c2:65:60:65:c2:e2:ce:86:cf:74:36:8e:
                    82:78:c2:80:78:85:27:18:8b:c2:2c:56:5e:e2:cb:
                    b3:d6:24:c8:f5:73:a1:eb:01:48:92:13:04:cb:91:
                    ad:17:07:23:af:97:00:26:33:4a:8b:bb:ec:aa:60:
                    f4:1e:e2:c5:81:a7:d4:c5:5f:dd:14:53:76:fc:79:
                    a0:9d:b1:1f:fd:dd:52:d2:55:b5:a4:c9:92:c0:ad:
                    3c:6f:77:ce:6c:79:9d:9c:92:be:b8:7c:e6:75:79:
                    d1:96:31:bf:e3:c9:8f:0f:05:4a:25:00:ba:02:e6:
                    fd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:71:A6:A5:6D:75:F7:1C:21:C1:4C:A1:23:36:6A:56:D8:6C:E5:27
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763363a3a2f33322d3438203d3e203439353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c6::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:18:f1:69:18:bf:c1:9b:e2:b9:a1:13:e9:45:ae:d3:99:c1:
         f4:c8:8b:aa:93:d8:d7:bf:7c:bc:a4:e7:8f:f1:3c:e9:55:34:
         ea:69:dd:da:01:a2:b9:07:c5:6c:c9:e3:e5:67:b0:72:87:55:
         50:cd:46:6a:ce:9a:6f:fa:03:43:ff:74:93:aa:96:07:6d:5d:
         de:eb:c8:15:b3:3c:48:2d:b2:71:e9:aa:32:db:38:96:a2:0a:
         16:18:51:74:fa:49:fb:2e:f2:53:44:45:23:6d:ad:48:74:09:
         80:c1:64:05:97:cc:60:56:a7:d6:c9:62:99:2e:35:0a:5d:8c:
         15:c2:71:2d:bf:0d:83:79:57:e4:4f:49:6e:ce:53:af:88:c6:
         16:13:4a:ad:68:df:34:ab:ae:13:77:23:09:eb:42:78:cf:26:
         c5:78:3c:00:db:19:da:0e:28:1e:16:a6:a3:ff:10:97:75:e4:
         46:d0:69:cc:88:78:23:c1:db:88:e5:56:95:16:d4:1f:b6:06:
         c1:42:cb:3f:5f:98:d9:f6:78:b7:06:1c:2e:f2:4f:94:10:be:
         5f:60:7c:65:9a:c8:4e:b1:57:82:4d:e2:b7:89:65:0c:dd:24:
         a5:75:c8:07:46:1c:b4:bb:ed:cd:cb:55:4e:fa:90:af:9f:51:
         0a:5d:63:e4
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUW4NIhCuI0/7UWV0AqUv4JtsHsFwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ0NDJlMzNhOGY2MTU4MGI2YjRkZmM0ODI4ZDk1ZTA3
ODkxZjRiYzAeFw0yNDA1MDcxNzMxNDRaFw0yNTA1MDYxNzM2NDRaMDMxMTAvBgNV
BAMTKDcyNzFBNkE1NkQ3NUY3MUMyMUMxNENBMTIzMzY2QTU2RDg2Q0U1MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRLPxt1ZdTmArFgVSiRqnY43Or
DDMtMLODr4MiqAYSJqc/q7Lk+WuGrXGZz6tsjy0GYFtqj3BeNWXZDK0Nr4b02JLN
X/nRVCLXYv3L2jKaglFoe0+oOkp9nheIBHWx7aqj8MVaiHtRhcMsgUkEzrvUv/jL
VC2eAVVYk5ff9JI4kaCjj0GH9LGEQsJlYGXC4s6Gz3Q2joJ4woB4hScYi8IsVl7i
y7PWJMj1c6HrAUiSEwTLka0XByOvlwAmM0qLu+yqYPQe4sWBp9TFX90UU3b8eaCd
sR/93VLSVbWkyZLArTxvd85seZ2ckr64fOZ1edGWMb/jyY8PBUolALoC5v0LAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUcnGmpW119xwhwUyhIzZqVths5ScwHwYDVR0j
BBgwFoAUdEQuM6j2FYC2tN/Ego2V4HiR9LwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWQ5OTgwODItYTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4
NjM5LzAvNzQ0NDJFMzNBOEY2MTU4MEI2QjRERkM0ODI4RDk1RTA3ODkxRjRCQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RFUXVNNmoyRllDMnROX0VnbzJWNEhp
UjlMdy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWQ5OTgwODIt
YTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4NjM5LzAvMzI2MTMxMzQzYTM3NjMzNjNh
M2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM0MzkzNTM4MzEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAqFAfG
MA0GCSqGSIb3DQEBCwUAA4IBAQAPGPFpGL/Bm+K5oRPpRa7TmcH0yIuqk9jXv3y8
pOeP8TzpVTTqad3aAaK5B8VsyePlZ7Byh1VQzUZqzppv+gND/3STqpYHbV3e68gV
szxILbJx6aoy2ziWogoWGFF0+kn7LvJTREUjba1IdAmAwWQFl8xgVqfWyWKZLjUK
XYwVwnEtvw2DeVfkT0luzlOviMYWE0qtaN80q64TdyMJ60J4zybFeDwA2xnaDige
Fqaj/xCXdeRG0GnMiHgjwduI5VaVFtQftgbBQss/X5jZ9ni3Bhwu8k+UEL5fYHxl
mshOsVeCTeK3iWUM3SSldcgHRhy0u+3Ny1VO+pCvn1EKXWPk
-----END CERTIFICATE-----