Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763363a623030623a3a2f34382d3438203d3e20323132313439.roa
File:                     326131343a3763363a623030623a3a2f34382d3438203d3e20323132313439.roa (raw, json)
Hash identifier:          V2Xazd6nYZXnywxfIoeGoGMHHXsdh/oz6ZrVtu8IwVM=
Subject key identifier:   8C:D2:F0:FF:7A:07:64:09:5F:53:EE:73:95:CB:EC:22:CA:62:92:09
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       68D2C536B828FAEE3F97EFCCC5014385E169D762
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763363a623030623a3a2f34382d3438203d3e20323132313439.roa
Signing time:             Wed 21 Feb 2024 15:38:07 +0000
ROA not before:           Wed 21 Feb 2024 15:33:07 +0000
ROA not after:            Wed 19 Feb 2025 15:38:07 +0000
asID:                     212149
IP address blocks:        2a14:7c6:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d2:c5:36:b8:28:fa:ee:3f:97:ef:cc:c5:01:43:85:e1:69:d7:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Feb 21 15:33:07 2024 GMT
            Not After : Feb 19 15:38:07 2025 GMT
        Subject: CN=8CD2F0FF7A0764095F53EE7395CBEC22CA629209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b8:cf:b6:c0:a0:53:24:e9:d5:76:4a:df:47:
                    2e:9e:6d:a7:1a:e9:76:c8:28:cd:09:4a:7f:d1:a1:
                    89:f1:e3:8d:4c:bb:49:65:a1:de:42:0d:44:23:2b:
                    31:89:85:3e:b2:28:c2:08:3f:89:ab:f4:c7:e8:df:
                    62:9a:03:70:77:55:b4:6b:6d:ad:ba:25:43:80:d0:
                    b5:39:5f:55:f7:58:68:5b:37:4c:4f:fe:01:d6:0f:
                    74:17:53:d4:f9:e4:1f:4d:71:39:01:38:69:0b:9d:
                    86:76:1f:d9:33:f2:d3:c6:fd:e3:2d:dd:45:e8:24:
                    a6:70:66:a0:68:cd:72:e6:0f:dc:e8:6c:80:6b:63:
                    4c:eb:c1:35:cb:f5:37:7d:77:97:f1:b0:cd:67:cc:
                    e1:95:df:7e:e2:5c:52:0a:7e:aa:5e:0b:9a:b8:be:
                    7d:ee:34:54:96:ed:fd:70:60:ef:a5:42:25:ca:02:
                    39:dc:87:44:e8:61:b4:ca:bf:73:68:ac:dd:8b:9e:
                    cd:ed:fc:5b:6f:54:d5:8c:48:ce:15:07:5f:99:79:
                    a0:5d:bf:85:50:57:9f:e8:d7:1f:3d:76:54:81:73:
                    d5:8a:eb:95:03:ba:cf:1f:9f:68:af:84:4d:c4:4f:
                    e3:30:91:b3:a1:27:82:19:4d:d4:af:9d:f2:6f:3b:
                    20:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D2:F0:FF:7A:07:64:09:5F:53:EE:73:95:CB:EC:22:CA:62:92:09
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763363a623030623a3a2f34382d3438203d3e20323132313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c6:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:8e:c0:7e:43:25:5d:c9:5f:20:4c:76:6e:67:3c:85:60:7e:
         ad:31:d8:cf:ac:a1:ae:47:63:95:e3:79:30:8a:f8:76:98:49:
         43:de:1e:86:17:4c:73:01:87:d1:f6:be:22:cd:06:c1:7c:32:
         7e:cd:83:be:95:c0:6a:a8:a8:ff:65:bc:f0:10:f7:17:d1:cd:
         57:f2:ec:9a:a6:b9:40:c1:f7:a7:db:b7:e0:74:8f:dc:29:10:
         fc:31:5c:35:78:e6:1d:0b:e7:18:25:a9:4f:cb:a6:89:75:85:
         9d:0c:8f:ce:9e:5e:11:91:a8:ad:30:3b:02:cf:cb:47:ec:35:
         29:ae:58:7f:82:3e:5d:81:1a:96:98:d7:9c:5d:21:d2:68:cd:
         a6:32:13:5d:86:d8:16:ca:e9:07:ea:72:87:47:42:67:f9:f1:
         6c:f0:4a:37:30:6e:bd:b3:1d:dc:02:ea:5d:29:66:ef:59:4f:
         f9:9e:b8:e4:fe:cd:4a:fb:f0:f7:6e:d7:91:50:b3:25:49:25:
         1e:45:01:7c:ca:fe:44:04:6d:4d:0f:6d:3f:17:9a:7f:86:e0:
         62:b8:d9:56:63:a4:73:13:01:92:0f:70:08:f2:5d:41:36:b1:
         b3:27:64:06:c1:6d:23:55:97:35:8f:1d:4c:86:61:3e:74:9e:
         c9:9b:d4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----