Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/326131343a373538343a333030303a3a2f34382d3438203d3e20313532333638.roa
File:                     326131343a373538343a333030303a3a2f34382d3438203d3e20313532333638.roa (raw, json)
Hash identifier:          MnToG5/hHH9Scp/i63sn6+7U3FU6WhprF2dCg9QmzZ4=
Subject key identifier:   3C:38:AB:EC:A6:2C:12:E7:2F:6E:3A:05:9A:FF:EA:80:18:60:86:77
Certificate issuer:       /CN=946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C
Certificate serial:       75DC970E6D1ACFE2287509D75252B0A15584EE5B
Authority key identifier: 94:6D:E1:5D:34:BE:AE:24:E2:9E:A1:6A:3F:E1:E6:59:1B:27:AD:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/326131343a373538343a333030303a3a2f34382d3438203d3e20313532333638.roa
Signing time:             Sat 05 Apr 2025 06:49:21 +0000
ROA not before:           Sat 05 Apr 2025 06:44:21 +0000
ROA not after:            Sat 04 Apr 2026 06:49:21 +0000
asID:                     152368
IP address blocks:        2a14:7584:3000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:dc:97:0e:6d:1a:cf:e2:28:75:09:d7:52:52:b0:a1:55:84:ee:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C
        Validity
            Not Before: Apr  5 06:44:21 2025 GMT
            Not After : Apr  4 06:49:21 2026 GMT
        Subject: CN=3C38ABECA62C12E72F6E3A059AFFEA8018608677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b4:09:33:0d:fd:3c:ab:1c:11:02:75:f0:12:
                    42:c6:2d:ea:9e:d2:4b:2a:5d:c7:b1:4a:1e:43:df:
                    b7:a2:22:df:e9:3e:b8:42:67:2d:11:94:6f:ef:b4:
                    51:bf:d4:8c:61:25:9b:f6:15:46:e2:ae:bd:ea:96:
                    ee:dc:f4:bb:04:15:c7:bd:15:19:44:7e:8e:d5:bd:
                    17:0a:e4:af:0f:37:fc:44:84:d7:77:cb:8c:a8:5e:
                    ca:9d:ad:b0:22:d3:00:15:48:7f:e3:62:02:b2:61:
                    fa:5c:50:d2:02:fd:28:ed:a6:bb:45:4c:8e:e0:fc:
                    2e:b5:0c:7a:bb:f4:82:6a:c5:f2:23:d6:58:53:b1:
                    2f:75:bb:8b:bc:91:cb:8f:f0:bc:1f:f8:01:7a:77:
                    af:5b:28:46:cb:3d:32:f5:f5:9e:39:1c:c6:4b:72:
                    0a:0c:c7:60:f4:a2:a0:77:37:1a:20:06:76:88:b4:
                    44:da:7f:37:1f:39:c0:2d:32:95:aa:fa:b8:59:35:
                    43:75:5b:bf:1c:be:04:1f:60:d4:07:a4:3a:cc:a3:
                    ab:6a:81:7b:d5:8a:cb:2b:d1:27:2d:34:43:69:e0:
                    97:c9:66:e6:f5:0c:f6:a4:2e:39:97:94:7a:9e:2e:
                    86:fa:34:58:25:f2:1a:17:b5:89:08:fa:9d:59:c1:
                    12:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:38:AB:EC:A6:2C:12:E7:2F:6E:3A:05:9A:FF:EA:80:18:60:86:77
            X509v3 Authority Key Identifier:
                keyid:94:6D:E1:5D:34:BE:AE:24:E2:9E:A1:6A:3F:E1:E6:59:1B:27:AD:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/326131343a373538343a333030303a3a2f34382d3438203d3e20313532333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:72:3c:97:f8:5f:d2:6d:d0:4c:82:ba:79:f9:6a:c1:a2:16:
         4c:24:0c:05:e4:1b:da:5a:65:77:04:c6:d0:90:15:3c:85:b5:
         91:04:af:f8:e3:6d:20:89:16:a2:41:46:41:83:93:ed:8c:89:
         5c:41:f0:e4:a5:0e:d4:64:28:4c:b1:c6:8e:ce:3a:55:1d:0e:
         1c:17:9c:7b:f2:51:19:38:78:51:a4:d1:d7:2d:0f:39:8e:00:
         7a:55:54:7a:c3:7e:2b:00:4d:63:67:91:8d:0b:43:c5:c9:96:
         d0:03:29:e7:68:dd:4c:5d:d1:de:93:b0:d6:84:2c:42:89:57:
         d4:e0:51:15:8d:d3:ba:61:4f:be:50:71:5a:1c:60:eb:44:1f:
         8e:af:9b:3e:d2:db:d4:3d:5f:62:19:1e:9e:09:48:98:d1:ce:
         59:ff:16:63:ba:5a:7d:4a:13:d6:6a:2d:4a:73:c4:76:79:ec:
         68:03:37:80:84:22:c0:e7:f5:31:1e:91:6b:2b:6e:4e:45:f6:
         f2:5d:be:99:36:b3:02:3d:2e:c0:b7:1a:13:f1:1c:3e:ba:04:
         05:0e:62:21:c3:52:8f:5d:9e:3b:4a:23:5d:1b:52:65:cd:2f:
         30:d5:3c:1b:8e:7c:a5:ea:91:2d:8b:61:d6:02:ee:ef:30:10:
         f4:30:aa:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----