Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa
File:                     326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa (raw, json)
Hash identifier:          dUzgpny38MghrKpugSdB9dzvd5zDywxo+PBsCyfJHn4=
Subject key identifier:   07:17:90:FD:72:9D:C9:09:24:22:A9:B4:ED:8F:70:74:03:37:4D:25
Certificate issuer:       /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71
Certificate serial:       2EBEBDFA1FCD6918D31FB0BC11D6439F3E65F3AB
Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa
Signing time:             Sun 20 Oct 2024 00:16:03 +0000
ROA not before:           Sun 20 Oct 2024 00:11:03 +0000
ROA not after:            Sun 19 Oct 2025 00:16:03 +0000
asID:                     208453
IP address blocks:        2a14:1ec7:f00f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:be:bd:fa:1f:cd:69:18:d3:1f:b0:bc:11:d6:43:9f:3e:65:f3:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71
        Validity
            Not Before: Oct 20 00:11:03 2024 GMT
            Not After : Oct 19 00:16:03 2025 GMT
        Subject: CN=071790FD729DC9092422A9B4ED8F707403374D25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:97:48:10:16:2e:34:a5:7a:27:98:27:c8:ec:
                    9d:80:30:00:fc:ca:5e:ca:f5:84:21:b2:1c:e4:fd:
                    32:51:61:05:55:09:99:8f:ad:af:74:9a:a8:68:98:
                    f7:d4:64:b8:5b:8d:e4:7f:a2:46:2e:9e:59:ea:37:
                    b2:14:4d:7b:87:09:0e:79:e4:e5:c3:cb:26:2f:0c:
                    45:6c:17:1a:57:bd:77:78:b0:ba:ad:92:df:67:78:
                    a5:de:5a:96:c2:36:2d:a9:10:8a:94:ea:39:b7:03:
                    55:02:8a:e2:d1:4a:f9:7a:69:6a:c8:2b:a3:de:a0:
                    fb:94:2c:8e:1f:ee:da:b5:cd:58:30:64:d9:02:a2:
                    e1:32:40:39:b4:63:45:29:91:c0:14:bb:cf:c7:71:
                    ce:22:af:70:d6:52:4c:ae:3a:13:a5:98:ec:02:1a:
                    c1:d8:1b:6a:66:d1:2b:39:cb:36:85:c1:0a:d8:f6:
                    33:45:8a:7d:73:5e:de:25:ef:b4:51:6f:cb:fa:f6:
                    62:cc:44:37:c3:36:57:4d:ca:dd:13:05:85:98:1e:
                    ca:b8:18:c4:29:7a:87:6a:ba:dc:3a:07:19:5f:20:
                    8b:15:6a:80:73:1b:50:29:c4:51:2d:48:8c:e1:4d:
                    e9:30:f6:2b:b1:dd:37:55:07:ee:8f:71:a6:d4:94:
                    a3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:17:90:FD:72:9D:C9:09:24:22:A9:B4:ED:8F:70:74:03:37:4D:25
            X509v3 Authority Key Identifier:
                keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:1ec7:f00f::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:b4:47:ec:51:60:cb:d7:c5:c5:82:15:2f:a3:e6:97:10:a3:
         5d:0d:eb:f9:d3:9f:e7:94:c7:a2:d1:f4:16:f6:9d:a3:6d:99:
         e8:7e:08:6b:b1:e7:0c:e8:65:bd:99:52:fb:9c:48:7f:c3:94:
         93:ce:72:f5:4e:45:3d:f3:ac:4d:93:63:9d:01:8f:77:e4:f1:
         b1:9d:1f:21:3f:e9:18:3f:89:aa:7e:7f:4e:bc:cb:4c:8a:14:
         60:c4:f2:bb:ad:6d:fe:23:ea:64:2a:65:db:1a:ad:d3:78:aa:
         5d:98:79:65:d1:b6:ca:26:92:9f:26:98:32:80:2e:28:b0:b0:
         4a:d8:6f:fe:17:02:79:bd:1c:aa:a2:68:a8:ba:f1:0d:f8:5f:
         49:58:99:78:a8:a0:87:53:a9:83:90:b7:df:7f:12:15:ba:cf:
         c2:5f:a0:c1:4e:08:09:18:80:0d:c8:94:e8:f1:a7:12:fe:56:
         b8:f7:c1:1b:be:42:54:19:cc:03:90:6d:96:50:2e:a6:73:f7:
         70:82:00:cd:40:26:60:e0:42:81:3f:4e:4f:9e:98:ee:e5:5f:
         04:6b:80:96:2e:f7:d7:b0:97:5d:0a:6a:24:2c:8f:26:78:81:
         64:48:da:f3:80:d9:04:dc:c6:b6:3f:13:89:8c:26:5d:50:58:
         ca:47:aa:0e
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIULr69+h/NaRjTH7C8EdZDnz5l86swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG
ODNFMEU3MTAeFw0yNDEwMjAwMDExMDNaFw0yNTEwMTkwMDE2MDNaMDMxMTAvBgNV
BAMTKDA3MTc5MEZENzI5REM5MDkyNDIyQTlCNEVEOEY3MDc0MDMzNzREMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfl0gQFi40pXonmCfI7J2AMAD8
yl7K9YQhshzk/TJRYQVVCZmPra90mqhomPfUZLhbjeR/okYunlnqN7IUTXuHCQ55
5OXDyyYvDEVsFxpXvXd4sLqtkt9neKXeWpbCNi2pEIqU6jm3A1UCiuLRSvl6aWrI
K6PeoPuULI4f7tq1zVgwZNkCouEyQDm0Y0UpkcAUu8/Hcc4ir3DWUkyuOhOlmOwC
GsHYG2pm0Ss5yzaFwQrY9jNFin1zXt4l77RRb8v69mLMRDfDNldNyt0TBYWYHsq4
GMQpeodqutw6BxlfIIsVaoBzG1ApxFEtSIzhTekw9iux3TdVB+6PcabUlKOXAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUBxeQ/XKdyQkkIqm07Y9wdAM3TSUwHwYDVR0j
BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj
MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj
N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND
OUNDNUYwRUY4M0UwRTcxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS83MTQ3NmQ2Mi05Y2ZhLTQ4NzEtYTJkOS1mYWRmNTc4MWMxMWIvMi8zMjYxMzEz
NDNhMzE2NTYzMzczYTY2MzAzMDY2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MDM4MzQzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKhQex/APMA0GCSqGSIb3DQEBCwUAA4IBAQAh
tEfsUWDL18XFghUvo+aXEKNdDev505/nlMei0fQW9p2jbZnofghrsecM6GW9mVL7
nEh/w5STznL1TkU986xNk2OdAY935PGxnR8hP+kYP4mqfn9OvMtMihRgxPK7rW3+
I+pkKmXbGq3TeKpdmHll0bbKJpKfJpgygC4osLBK2G/+FwJ5vRyqomiouvEN+F9J
WJl4qKCHU6mDkLfffxIVus/CX6DBTggJGIANyJTo8acS/la498EbvkJUGcwDkG2W
UC6mc/dwggDNQCZg4EKBP05Pnpju5V8Ea4CWLvfXsJddCmokLI8meIFkSNrzgNkE
3Ma2PxOJjCZdUFjKR6oO
-----END CERTIFICATE-----