Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a3a2f33322d3438203d3e203630323233.roa
File:                     326131343a3763373a3a2f33322d3438203d3e203630323233.roa (raw, json)
Hash identifier:          oCgMBgN68W7cNsW57gE1zirxPWkLX06uu+/6vPlTDro=
Subject key identifier:   7C:8E:BD:14:67:1D:FF:25:74:43:39:3D:45:45:24:B7:2D:03:38:40
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       044D39989E051B67139B32CB42100958CDC77A6C
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a3a2f33322d3438203d3e203630323233.roa
Signing time:             Sun 10 Mar 2024 16:12:02 +0000
ROA not before:           Sun 10 Mar 2024 16:07:02 +0000
ROA not after:            Sun 09 Mar 2025 16:12:02 +0000
asID:                     60223
IP address blocks:        2a14:7c7::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:4d:39:98:9e:05:1b:67:13:9b:32:cb:42:10:09:58:cd:c7:7a:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Mar 10 16:07:02 2024 GMT
            Not After : Mar  9 16:12:02 2025 GMT
        Subject: CN=7C8EBD14671DFF257443393D454524B72D033840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:28:96:31:4e:5e:0d:19:3b:8d:e2:9f:1c:59:
                    7c:82:3b:2b:79:85:18:9f:38:8c:60:97:62:09:d9:
                    1c:bb:2c:16:a4:41:67:f3:a2:0d:72:90:af:ef:52:
                    a2:05:55:5f:92:a3:69:7f:27:9f:5f:91:da:d6:d6:
                    b7:ba:76:4a:8c:38:db:46:16:16:65:ab:36:0f:e4:
                    49:a5:b1:2d:88:06:37:28:0f:b7:be:7c:f9:4c:b5:
                    fa:c8:ea:3a:78:7c:c5:7f:f6:08:a6:cf:d5:ee:f5:
                    26:c6:46:f6:99:47:85:b6:3a:0f:77:6c:d2:c6:67:
                    cc:59:fe:6c:77:1c:e8:8e:2e:34:f7:c3:13:ed:35:
                    9a:d0:82:be:cb:2a:fa:93:3b:c2:e4:4d:df:23:97:
                    b1:e6:71:af:2c:48:21:33:0d:ff:2f:91:ba:ab:9e:
                    dc:9c:de:85:59:af:f0:c1:b3:75:2f:67:b6:99:cc:
                    9b:67:a4:a6:87:bd:97:ab:6c:a1:b6:3d:09:29:6c:
                    d6:3b:f5:2a:53:de:5b:76:02:bd:13:81:08:19:c1:
                    a0:b2:81:fe:0c:8a:51:89:61:57:aa:ad:b0:1a:63:
                    f5:0e:15:05:cc:09:4d:fa:e7:40:e6:15:e2:0f:63:
                    b8:1c:e9:ef:f3:c4:19:24:10:74:38:71:9e:f5:9d:
                    fb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:8E:BD:14:67:1D:FF:25:74:43:39:3D:45:45:24:B7:2D:03:38:40
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a3a2f33322d3438203d3e203630323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c7::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:d7:37:63:07:33:46:54:6a:4c:34:0c:fd:67:71:54:53:74:
         21:a2:be:47:96:4f:31:fc:2b:f5:6a:dd:a1:9f:e9:05:4f:bc:
         21:da:d1:c6:1d:ca:a1:f5:79:25:df:e6:57:d8:e1:a5:14:94:
         f8:b0:dc:6f:3a:ec:60:18:3b:7b:c6:cb:cb:ca:59:4a:97:73:
         0c:2a:20:df:29:de:aa:a7:1d:7a:f6:59:75:28:00:03:e3:77:
         29:51:ea:71:2a:20:fd:8a:b8:82:3f:c2:8b:32:af:68:3b:e1:
         b1:18:37:30:53:58:e0:0c:34:c4:b1:ee:62:94:cd:01:a3:cb:
         6d:47:f3:ff:ff:0e:df:9b:3e:ae:22:98:71:ff:dc:14:3d:0e:
         e1:a6:67:79:39:93:dd:c1:4a:db:c5:80:67:03:d5:2a:49:bc:
         92:7f:75:a5:cf:41:15:c0:68:3a:6c:03:47:2d:8a:c2:63:b8:
         6e:72:68:d2:07:16:3a:d9:3c:9f:8f:de:07:aa:0a:85:1c:8f:
         20:6a:88:f8:be:69:9f:ea:d4:00:67:f1:21:0f:65:c9:87:60:
         56:e4:3f:f7:a5:15:06:58:97:11:18:d6:4d:99:cb:03:44:39:
         11:ae:51:49:05:03:3a:9a:9a:e0:fa:79:5e:35:c3:04:33:d4:
         15:95:75:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----