Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/BERRYBYTE-RPKI/0/326130613a363034303a623030303a3a2f34302d3438203d3e20323034383537.roa
File:                     326130613a363034303a623030303a3a2f34302d3438203d3e20323034383537.roa (raw, json)
Hash identifier:          dQf7JyFG4MDQXrzFT2ivmWPBaJvv7PaAO0q/hw4ypQE=
Subject key identifier:   1B:4C:60:65:39:C7:AE:FE:8C:48:59:9A:E8:80:71:C5:D0:57:86:12
Certificate issuer:       /CN=2FE0EE8DDD3C769E638DC94D05042FA7CBBAF11A
Certificate serial:       3BB4FC2DE185FC68E07AF2014485450FF452E5D5
Authority key identifier: 2F:E0:EE:8D:DD:3C:76:9E:63:8D:C9:4D:05:04:2F:A7:CB:BA:F1:1A
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/2FE0EE8DDD3C769E638DC94D05042FA7CBBAF11A.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/BERRYBYTE-RPKI/0/326130613a363034303a623030303a3a2f34302d3438203d3e20323034383537.roa
Signing time:             Tue 13 Dec 2022 10:47:25 +0000
ROA not before:           Tue 13 Dec 2022 10:42:25 +0000
ROA not after:            Tue 12 Dec 2023 10:47:25 +0000
asID:                     204857
IP address blocks:        2a0a:6040:b000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:b4:fc:2d:e1:85:fc:68:e0:7a:f2:01:44:85:45:0f:f4:52:e5:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FE0EE8DDD3C769E638DC94D05042FA7CBBAF11A
        Validity
            Not Before: Dec 13 10:42:25 2022 GMT
            Not After : Dec 12 10:47:25 2023 GMT
        Subject: CN=1B4C606539C7AEFE8C48599AE88071C5D0578612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b5:b4:e9:de:a7:ef:d1:66:cd:3f:82:f8:ce:
                    d9:95:5d:36:8a:bf:8b:11:b9:c9:75:fd:e0:30:b5:
                    bc:69:e6:04:ac:7a:3d:b2:94:bd:b4:0d:42:da:fe:
                    05:61:eb:30:79:c4:1c:e4:6e:31:20:76:d6:2b:ac:
                    e2:7b:51:6f:09:23:d8:40:98:24:e8:fc:33:02:cf:
                    be:95:ae:e0:ee:ae:a8:c1:8d:66:78:ab:a8:1e:4c:
                    bc:d0:3e:a6:f4:d6:e1:47:b6:e9:c1:4a:8b:35:00:
                    ac:80:71:4a:0a:00:db:cf:85:6a:62:b9:c3:95:9c:
                    94:73:3c:70:9b:8e:aa:3b:76:55:a6:06:1f:a7:81:
                    00:e1:9f:ef:c2:21:33:be:16:1a:68:7a:ee:6a:5e:
                    dc:73:e6:ce:2d:64:1f:9d:3b:92:4c:73:ad:90:3e:
                    cd:0a:0a:46:6e:c4:9b:02:e4:ce:8e:a0:c9:5e:2d:
                    8a:54:1c:62:35:34:cb:05:ac:25:60:e5:a5:71:bb:
                    dd:79:31:76:fa:c0:f8:ef:4d:91:c3:12:a7:a9:4d:
                    60:ad:7d:84:ea:9c:ef:73:e4:00:c4:f4:d7:88:e3:
                    cb:88:a2:88:59:2e:2b:66:f5:0c:eb:ff:e8:42:9c:
                    f6:ba:75:5e:c1:e9:9e:0f:fe:49:98:0c:11:6a:b4:
                    d9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4C:60:65:39:C7:AE:FE:8C:48:59:9A:E8:80:71:C5:D0:57:86:12
            X509v3 Authority Key Identifier:
                keyid:2F:E0:EE:8D:DD:3C:76:9E:63:8D:C9:4D:05:04:2F:A7:CB:BA:F1:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/BERRYBYTE-RPKI/0/2FE0EE8DDD3C769E638DC94D05042FA7CBBAF11A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/2FE0EE8DDD3C769E638DC94D05042FA7CBBAF11A.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/BERRYBYTE-RPKI/0/326130613a363034303a623030303a3a2f34302d3438203d3e20323034383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         08:42:e3:1c:4a:bc:56:7c:3c:9a:63:61:7e:43:53:c3:fe:bd:
         9a:c4:74:8b:53:02:2d:94:f0:a8:6a:b3:72:26:5f:cf:20:ef:
         5d:52:05:d7:44:60:96:b6:95:3c:6a:bd:35:9f:43:aa:34:01:
         da:1b:6c:1b:9a:f5:db:ee:85:29:04:38:36:6e:d2:65:c1:be:
         dd:bc:09:d1:60:44:e6:85:fe:17:79:c5:d3:bc:89:12:2a:16:
         2d:01:87:6f:27:0d:f4:eb:47:16:1e:af:64:24:d5:45:1e:54:
         f5:e5:17:43:42:e5:a9:99:a6:df:2c:c1:65:22:d3:d8:23:ad:
         a5:a1:ec:a9:60:03:60:6c:74:2f:b4:6c:21:79:ad:de:5d:31:
         43:ed:73:bb:02:af:a4:4f:0f:b1:87:19:3f:0e:bb:e6:3f:a2:
         18:f6:1a:fc:d5:68:27:b1:95:ea:aa:95:c5:56:76:19:08:23:
         bb:61:a8:74:e1:dc:f3:57:f0:27:15:2f:2f:37:81:74:78:b8:
         28:81:40:e4:b8:bc:b3:83:38:58:76:15:a2:f7:f2:19:31:e6:
         6d:3d:2c:e1:32:1b:6d:1c:59:2e:6d:0f:84:4a:41:2c:37:93:
         68:b9:1b:7e:bf:17:f8:9a:f5:29:64:ca:b2:cd:fa:03:6c:1d:
         7b:b6:51:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----