Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a3a2f33322d3438203d3e203533333536.roa
File:                     326131343a3763373a3a2f33322d3438203d3e203533333536.roa (raw, json)
Hash identifier:          750UEPrq+AMg4ofTqvyNSU2B9jECu5PXZHbLHaV1VfM=
Subject key identifier:   A7:44:8A:B1:AF:EC:B4:EF:53:90:F6:3C:D1:44:05:50:C0:2D:C3:85
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       62350BCFA994A50F7A5C6F33A7A53BE877BBD2B7
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a3a2f33322d3438203d3e203533333536.roa
Signing time:             Fri 24 May 2024 18:19:14 +0000
ROA not before:           Fri 24 May 2024 18:14:14 +0000
ROA not after:            Fri 23 May 2025 18:19:14 +0000
asID:                     53356
IP address blocks:        2a14:7c7::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:35:0b:cf:a9:94:a5:0f:7a:5c:6f:33:a7:a5:3b:e8:77:bb:d2:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: May 24 18:14:14 2024 GMT
            Not After : May 23 18:19:14 2025 GMT
        Subject: CN=A7448AB1AFECB4EF5390F63CD1440550C02DC385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:15:06:7c:ad:d2:da:87:fb:00:76:d0:b5:73:
                    67:17:aa:5a:dc:82:2a:ad:3f:8f:37:b2:4e:37:70:
                    24:c7:fe:50:ff:57:cd:b3:ab:e7:ca:ee:49:39:38:
                    23:00:b4:37:01:a2:4c:c3:af:60:7e:eb:d7:94:dc:
                    35:22:ec:2c:c5:6b:73:35:95:fb:ba:22:af:87:b8:
                    f1:58:80:24:57:86:42:52:73:08:b9:ef:74:d2:bd:
                    ea:a6:d8:e6:20:ef:d2:df:21:e2:81:49:8f:6a:5e:
                    d4:0c:1a:cd:f9:5d:37:f1:64:5c:78:d7:41:23:9d:
                    50:7e:98:bd:66:a3:fa:c7:5f:d5:ad:0c:26:3a:1e:
                    c9:94:82:74:ef:33:d0:aa:9d:23:84:0b:0e:74:63:
                    32:83:c6:bc:12:18:24:9d:1b:4d:74:d5:5d:6f:b3:
                    d9:fd:97:41:8d:77:a0:51:74:fd:2c:ba:87:a1:4e:
                    f3:3e:83:46:bd:d6:23:29:d7:bb:10:b0:e9:85:11:
                    b0:03:df:b6:c3:f3:4b:97:7c:cf:eb:5b:f8:de:c0:
                    4f:90:40:01:7c:84:00:88:59:a4:d7:46:b6:d4:f7:
                    f2:18:69:90:d5:db:87:21:72:8c:aa:2f:92:6a:42:
                    9a:d9:2e:83:a7:06:96:ab:60:53:19:d8:1c:9e:c0:
                    27:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:44:8A:B1:AF:EC:B4:EF:53:90:F6:3C:D1:44:05:50:C0:2D:C3:85
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a3a2f33322d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c7::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:e5:ea:b4:85:02:6b:fd:5c:b7:c9:8e:c5:6b:73:ac:7c:eb:
         8e:4d:43:b8:1d:5d:0e:7b:2a:67:a9:66:69:d7:ef:aa:3b:9c:
         a8:7d:5e:e6:4d:74:e7:23:85:4f:e9:ea:f4:e4:b8:0e:00:92:
         d5:77:cd:a0:42:1d:65:21:39:e9:d9:20:e6:4f:30:c1:38:ce:
         7e:56:67:8b:9c:0d:29:7f:f9:23:b2:76:88:6f:85:51:8d:45:
         43:d1:8c:e7:87:3d:bf:cd:bb:ef:9d:e3:0d:cb:d6:7b:46:09:
         9f:6d:c1:a5:92:aa:39:43:3c:f8:6f:f2:50:15:87:d7:94:c8:
         91:88:0c:74:d1:43:f0:3e:33:5f:71:dc:3e:f4:1c:61:91:fd:
         00:55:b2:bd:e0:7b:43:58:a4:9d:97:ca:9d:95:bf:28:c3:26:
         a5:d8:18:26:1a:39:e3:b3:58:4f:e2:16:ae:e1:77:51:ae:2a:
         67:11:85:d0:4a:9a:e3:f4:f2:23:22:8b:6f:ff:a4:0b:07:8a:
         88:a5:c3:75:ee:54:99:f4:ee:f5:27:03:0c:02:af:04:a9:24:
         7d:de:80:f0:a3:87:32:bf:ae:5b:bc:91:01:0a:e9:91:f9:0a:
         68:2d:6c:c5:20:4f:4d:91:7b:47:33:20:9a:f4:05:73:e3:3a:
         dc:fc:e9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----