Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a313030303a3a2f33362d3438203d3e20323134343831.roa
File:                     326131343a316563373a313030303a3a2f33362d3438203d3e20323134343831.roa (raw, json)
Hash identifier:          mAC3tE41nQDojIaT/TKY9BuNdhC77RQ6VPm5O+XWCIE=
Subject key identifier:   FD:C4:CC:68:3F:37:94:41:2A:E4:92:8D:DB:86:EF:AE:87:1A:65:B4
Certificate issuer:       /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial:       41BB729B7A6EAB5A110DEAE4EED10CB4040642CD
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a313030303a3a2f33362d3438203d3e20323134343831.roa
Signing time:             Thu 10 Apr 2025 18:52:47 +0000
ROA not before:           Thu 10 Apr 2025 18:47:47 +0000
ROA not after:            Thu 09 Apr 2026 18:52:47 +0000
asID:                     214481
IP address blocks:        2a14:1ec7:1000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:bb:72:9b:7a:6e:ab:5a:11:0d:ea:e4:ee:d1:0c:b4:04:06:42:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
        Validity
            Not Before: Apr 10 18:47:47 2025 GMT
            Not After : Apr  9 18:52:47 2026 GMT
        Subject: CN=FDC4CC683F3794412AE4928DDB86EFAE871A65B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:72:1c:2a:35:60:7b:f7:1c:a8:3d:c3:05:8f:
                    60:a8:8b:08:89:a6:23:75:ac:ee:45:aa:af:da:91:
                    07:dd:56:3c:00:80:27:16:17:e9:4b:ae:bd:d9:86:
                    c1:75:fb:b4:df:4e:fb:40:77:fe:15:5c:cf:53:03:
                    3b:1f:3f:60:89:df:1a:67:a3:69:57:f4:dc:a7:92:
                    c2:8b:f7:a9:51:a4:53:32:c8:24:f0:5f:67:cc:f2:
                    77:8f:d1:d1:39:8a:12:46:54:f4:29:6f:bf:a1:2f:
                    64:76:cc:10:42:7c:7e:ca:ed:cd:fa:c2:36:ac:15:
                    5d:e3:e0:b6:3b:18:10:cc:b5:28:53:42:67:21:be:
                    e3:3a:6b:55:55:c2:a3:f2:92:8d:8d:e5:ba:6e:d2:
                    3b:51:73:05:5c:dc:d6:ab:e3:db:9e:99:a5:1c:e7:
                    5f:c1:48:8e:99:a3:3c:95:99:7b:7b:7e:1d:99:30:
                    d0:46:3a:bb:37:cf:6f:7a:25:2e:29:f1:35:a6:4e:
                    e4:f6:eb:37:bf:58:1e:56:77:93:a0:db:c2:dd:6c:
                    2a:cc:d9:f4:a5:13:73:4f:0d:f7:6a:ec:b3:2b:c7:
                    24:db:6f:0b:03:4f:09:32:e0:12:63:9f:5b:aa:26:
                    58:77:71:e4:b3:eb:2e:fb:06:97:ff:44:4d:f2:5b:
                    dd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C4:CC:68:3F:37:94:41:2A:E4:92:8D:DB:86:EF:AE:87:1A:65:B4
            X509v3 Authority Key Identifier:
                keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a313030303a3a2f33362d3438203d3e20323134343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:1ec7:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         29:27:7b:e3:65:8a:59:58:2c:5c:39:b3:63:1c:2f:cc:9f:42:
         24:66:c3:23:0e:19:e2:19:09:62:8c:72:30:af:5e:a7:2d:3a:
         a5:8d:cf:5c:e0:14:41:68:bc:b8:8a:38:cd:dd:42:6b:9f:b4:
         0e:5b:1c:c2:33:32:42:62:7f:77:81:c8:d6:65:98:57:95:50:
         7b:97:0c:04:90:1e:72:bd:2b:48:b7:d9:e4:20:26:7a:16:2b:
         59:ce:05:2c:2f:f7:55:25:9e:9b:52:b2:a4:3b:20:97:58:81:
         1e:84:fa:88:c2:db:bf:b0:37:75:19:3d:d7:a2:48:81:77:27:
         da:77:4f:dd:35:35:e2:2c:2d:a1:1a:6c:41:96:db:64:97:87:
         5c:f5:ff:e9:c0:82:01:cb:e7:a9:c3:4b:00:8e:78:6b:fa:63:
         86:17:c1:4a:ba:dd:96:94:71:59:c1:eb:b5:83:d0:35:04:32:
         3c:d6:46:43:00:59:15:f3:48:25:41:27:d6:d8:55:19:c7:2f:
         3c:5c:c9:09:d5:09:0e:56:6b:bc:90:8c:80:ba:e8:8a:5d:3d:
         ab:ac:97:66:e9:e2:61:65:37:bb:95:c7:56:3b:3b:0f:8f:62:
         04:0a:3b:82:23:7a:b1:8f:a5:88:db:52:0f:4a:16:ad:cd:a4:
         fd:df:e3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----