Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a313030303a3a2f34382d3438203d3e20323030363336.roa
File:                     326131343a3763373a313030303a3a2f34382d3438203d3e20323030363336.roa (raw, json)
Hash identifier:          CrjJlxDL5gos0Nv9/BWEqiNW2kdIuKDdtA/i+YKiIRo=
Subject key identifier:   AC:E7:14:26:0B:56:E2:BF:5B:41:5B:06:9A:D9:91:9F:2A:B5:D5:C8
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       2199D412DC77F465EC9196E1DD16BC36F23C2615
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a313030303a3a2f34382d3438203d3e20323030363336.roa
Signing time:             Wed 06 Mar 2024 20:56:26 +0000
ROA not before:           Wed 06 Mar 2024 20:51:26 +0000
ROA not after:            Wed 05 Mar 2025 20:56:26 +0000
asID:                     200636
IP address blocks:        2a14:7c7:1000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:99:d4:12:dc:77:f4:65:ec:91:96:e1:dd:16:bc:36:f2:3c:26:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Mar  6 20:51:26 2024 GMT
            Not After : Mar  5 20:56:26 2025 GMT
        Subject: CN=ACE714260B56E2BF5B415B069AD9919F2AB5D5C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3d:d1:9c:b7:b7:30:f5:a5:37:a4:67:6c:56:
                    89:21:b6:44:96:e6:ff:44:e3:94:0f:2f:f1:e1:82:
                    75:ff:1f:05:63:f9:85:02:c3:9c:62:25:93:74:5c:
                    7f:c5:06:2c:db:1e:6c:16:f3:e7:28:a0:9a:03:5d:
                    1a:d4:bd:9a:bb:51:c2:46:df:10:56:90:67:8a:de:
                    e3:d6:6f:2e:19:8c:ef:3b:9b:70:23:43:f7:02:82:
                    0d:41:ab:a3:0b:e3:35:2c:64:ac:4b:b0:91:42:b4:
                    dd:01:7d:4f:33:52:07:eb:d7:47:0c:9e:5b:0b:09:
                    fa:0c:01:12:ec:cf:3d:d3:63:e9:c9:9a:65:36:de:
                    ae:a5:4b:0a:fa:f7:e8:84:d0:0e:dd:47:54:f7:d4:
                    46:23:44:87:05:b4:27:d2:2c:8a:3d:43:6a:21:32:
                    d9:20:7d:26:f8:b1:bf:f2:75:d6:e9:7d:f2:a0:a0:
                    4c:1a:ce:4d:3f:71:33:7e:81:49:e1:c4:f5:3f:4e:
                    ae:b6:08:b4:f5:8b:60:28:e0:61:e9:69:2d:61:0b:
                    27:33:87:7e:92:bd:6d:bc:bd:60:30:d6:cc:b8:a8:
                    bd:15:5d:94:a2:cb:d5:e1:ad:6f:ab:5f:1c:45:ae:
                    a3:72:99:4f:df:0b:60:d1:71:bf:7c:7a:c5:60:37:
                    4b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E7:14:26:0B:56:E2:BF:5B:41:5B:06:9A:D9:91:9F:2A:B5:D5:C8
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a313030303a3a2f34382d3438203d3e20323030363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c7:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:d7:c5:0a:be:fc:fd:7b:7c:4e:eb:6d:93:00:1c:00:fa:75:
         d4:2d:9e:30:63:74:37:20:c0:18:58:01:33:69:b8:5d:11:ad:
         bf:23:04:a8:0e:6c:5e:97:84:c9:bf:4c:44:6b:95:9f:80:9b:
         17:44:99:4e:82:a3:47:f9:f3:33:85:11:8e:d8:a8:0e:3d:68:
         d4:9c:fd:db:d6:de:ae:6d:d6:69:6b:fa:a8:15:09:6e:8d:3b:
         b0:1c:6e:fc:a7:44:4b:62:b5:cd:eb:b7:d5:70:a4:e6:8c:44:
         06:3c:03:57:46:59:67:5d:15:5d:e4:df:f1:ce:7d:48:a7:35:
         0a:97:84:dd:e4:85:58:a9:b9:71:06:e1:e3:27:83:27:d8:8b:
         79:83:d8:d5:88:71:bb:de:af:79:0c:e7:63:6b:e5:b4:95:a7:
         81:4d:18:2d:bf:fc:42:30:64:57:93:9f:6f:c4:98:85:93:f4:
         12:c6:55:04:c0:d1:28:76:3a:b5:51:c9:06:65:63:6f:5b:b5:
         d7:37:cb:2d:9b:3f:33:ea:61:1a:81:c7:00:58:4a:cb:95:81:
         13:ab:50:97:2d:d5:95:1a:9f:09:6c:fd:e9:3b:32:0d:54:a3:
         88:e4:d1:b7:b1:a1:a5:2d:d8:b1:26:25:41:d4:89:08:d7:8c:
         24:89:b4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----