Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/326131343a313463303a3a2f34382d3438203d3e20323037343837.roa
File:                     326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (raw, json)
Hash identifier:          MAksePoJ+rnc08XyHZPcbQHx/BhF1iv7lCiKD0GFWxw=
Subject key identifier:   4C:03:44:49:F1:FB:D1:A0:C2:C7:AD:E6:F8:E9:9E:47:C5:14:88:2A
Certificate issuer:       /CN=25827d84056b8444cc2a7842759035354b8416bc
Certificate serial:       64E3E74A881D371755A41942A3248984BD614257
Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/326131343a313463303a3a2f34382d3438203d3e20323037343837.roa
Signing time:             Fri 04 Apr 2025 00:15:46 +0000
ROA not before:           Fri 04 Apr 2025 00:10:46 +0000
ROA not after:            Fri 03 Apr 2026 00:15:46 +0000
asID:                     207487
IP address blocks:        2a14:14c0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e3:e7:4a:88:1d:37:17:55:a4:19:42:a3:24:89:84:bd:61:42:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc
        Validity
            Not Before: Apr  4 00:10:46 2025 GMT
            Not After : Apr  3 00:15:46 2026 GMT
        Subject: CN=4C034449F1FBD1A0C2C7ADE6F8E99E47C514882A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:33:e0:ea:b1:2c:03:7c:5d:3a:78:7d:45:0a:
                    d5:d1:43:d3:c8:2c:44:17:8a:9d:bf:d7:27:a8:50:
                    39:da:33:47:c1:7d:96:fb:0c:d7:e7:bd:f7:c0:3e:
                    92:c7:57:27:b0:1b:36:c9:28:1b:47:bd:f0:91:69:
                    2f:cb:15:4c:2f:8b:6b:dc:c9:c9:5d:33:db:b6:7b:
                    8c:61:01:02:79:0d:1e:75:41:c2:99:ed:cb:72:9b:
                    81:94:ac:a7:5e:da:3d:97:89:dc:e5:d0:15:0e:83:
                    89:6e:13:ee:28:25:12:82:63:12:5c:30:6b:02:0e:
                    e0:43:49:a1:80:43:af:68:1b:35:e3:f8:69:9b:69:
                    51:bc:d9:7f:8b:b3:85:91:79:76:a5:84:d0:4c:74:
                    c7:ff:c2:24:97:fd:96:35:00:60:a4:23:a6:87:2b:
                    78:55:12:fc:6c:33:58:fe:20:8b:dc:51:70:6f:be:
                    03:fd:fc:34:1e:10:17:73:7f:0b:d0:83:24:a5:ce:
                    e3:37:fe:e6:a9:36:f7:13:4f:01:cd:60:7f:e1:19:
                    60:65:f8:a7:25:25:78:24:76:3d:7b:db:c9:4e:5a:
                    5e:3d:da:8b:9c:4a:bc:28:e3:29:1b:6d:64:d5:a7:
                    e0:27:29:ee:99:ef:2a:37:5e:4e:fd:91:c0:f5:0d:
                    9e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:03:44:49:F1:FB:D1:A0:C2:C7:AD:E6:F8:E9:9E:47:C5:14:88:2A
            X509v3 Authority Key Identifier:
                keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/326131343a313463303a3a2f34382d3438203d3e20323037343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:14c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:b0:9c:d1:d7:f7:9f:aa:79:1a:0b:49:c1:07:50:53:76:b1:
         17:b8:2d:3a:85:d9:de:3f:fb:3f:54:fb:e9:4e:a1:da:47:0c:
         a5:a6:be:58:d4:7e:d1:4b:15:60:ac:ef:76:48:8e:40:c8:e6:
         73:90:20:95:ba:52:9b:0a:e6:f8:cf:53:8f:8d:44:0c:e5:d5:
         70:b3:ed:e3:a6:6b:5f:e2:44:bb:69:fc:96:25:6a:82:d3:c1:
         55:32:e8:eb:e7:33:4b:8b:2e:19:0a:17:af:d2:3a:5a:15:4b:
         20:b8:c7:af:66:8c:ac:c9:a8:86:51:1d:5e:f5:48:95:04:36:
         06:db:1f:35:55:01:54:6d:0f:fb:75:6e:11:dc:1c:42:3f:97:
         93:26:16:e2:77:e4:88:ec:9f:2f:22:58:96:80:de:75:bb:0a:
         34:2d:ba:d8:09:aa:95:17:19:e3:ce:7d:ec:d3:d4:ca:b4:06:
         d4:0b:57:f9:9b:91:4f:36:60:e0:ad:4d:75:21:89:35:62:f5:
         7c:54:00:1d:81:b2:80:ff:22:18:cf:ef:5f:95:ef:b2:00:16:
         5a:5e:e9:b5:af:b9:86:67:4d:7c:58:90:0d:c3:6d:40:37:6c:
         2c:37:dd:b8:40:b5:8e:a5:67:ff:41:ea:64:50:7c:40:50:2b:
         4c:2a:41:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----