Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/BERRYBYTE-RPKI/0/326130613a363034303a623030303a3a2f34302d3438203d3e203630383431.roa
File:                     326130613a363034303a623030303a3a2f34302d3438203d3e203630383431.roa (raw, json)
Hash identifier:          1hZVT8UToXKxKaijDuWAQEm2+9Lj17EF2ESpTAub6UQ=
Subject key identifier:   DE:DF:97:03:B9:4B:28:19:01:A0:80:C1:9F:27:6A:B1:B9:5D:D8:61
Certificate issuer:       /CN=2FE0EE8DDD3C769E638DC94D05042FA7CBBAF11A
Certificate serial:       7288339F75694B464CEDEA46D4E309EF2EFFDA5F
Authority key identifier: 2F:E0:EE:8D:DD:3C:76:9E:63:8D:C9:4D:05:04:2F:A7:CB:BA:F1:1A
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/2FE0EE8DDD3C769E638DC94D05042FA7CBBAF11A.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/BERRYBYTE-RPKI/0/326130613a363034303a623030303a3a2f34302d3438203d3e203630383431.roa
Signing time:             Tue 13 Dec 2022 10:47:44 +0000
ROA not before:           Tue 13 Dec 2022 10:42:44 +0000
ROA not after:            Tue 12 Dec 2023 10:47:44 +0000
asID:                     60841
IP address blocks:        2a0a:6040:b000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:88:33:9f:75:69:4b:46:4c:ed:ea:46:d4:e3:09:ef:2e:ff:da:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FE0EE8DDD3C769E638DC94D05042FA7CBBAF11A
        Validity
            Not Before: Dec 13 10:42:44 2022 GMT
            Not After : Dec 12 10:47:44 2023 GMT
        Subject: CN=DEDF9703B94B281901A080C19F276AB1B95DD861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:30:56:b6:61:50:53:48:28:36:62:59:c4:63:
                    18:90:3e:83:5f:ee:4d:ee:af:67:43:14:5b:64:cd:
                    2b:73:d8:04:8b:1a:a4:44:2b:37:88:dd:d3:2c:2f:
                    69:22:94:3c:8a:7e:16:f0:c6:7d:62:52:eb:f1:eb:
                    12:f8:a7:47:34:e7:c5:02:28:35:44:b6:26:38:e1:
                    ce:6e:2d:a6:bd:a1:f3:13:0b:55:a8:2b:2e:a6:75:
                    11:b0:77:08:0d:ac:9f:8d:e8:19:2b:4c:2d:f6:65:
                    ca:70:19:3d:2c:8b:10:20:c7:d4:81:28:04:04:81:
                    ab:64:43:02:cf:9d:46:69:a7:8f:85:d8:7d:ce:46:
                    2a:2a:de:5a:bf:16:d2:75:27:5c:c6:0f:80:da:47:
                    43:e5:52:ac:4a:5d:94:7e:67:c0:c7:6d:ae:c0:e0:
                    36:24:fe:54:9a:60:bb:80:1f:63:89:90:9e:01:46:
                    5f:0f:9c:60:34:58:34:4d:0c:7e:24:70:51:13:1e:
                    28:ff:de:b8:92:b3:72:86:fb:ca:ec:de:26:37:2b:
                    ef:78:41:0c:b5:21:a8:55:ba:02:96:d6:d8:50:2a:
                    1c:94:e4:f3:01:4c:d5:05:31:2c:25:db:bc:85:cc:
                    26:e3:c0:5c:82:28:dc:3a:7f:02:79:24:c8:33:52:
                    93:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:DF:97:03:B9:4B:28:19:01:A0:80:C1:9F:27:6A:B1:B9:5D:D8:61
            X509v3 Authority Key Identifier:
                keyid:2F:E0:EE:8D:DD:3C:76:9E:63:8D:C9:4D:05:04:2F:A7:CB:BA:F1:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/BERRYBYTE-RPKI/0/2FE0EE8DDD3C769E638DC94D05042FA7CBBAF11A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/2FE0EE8DDD3C769E638DC94D05042FA7CBBAF11A.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/BERRYBYTE-RPKI/0/326130613a363034303a623030303a3a2f34302d3438203d3e203630383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         ad:33:0c:31:f3:b8:d9:63:d1:6b:c6:6d:b2:9b:0d:fe:47:34:
         21:b5:ad:2d:bd:fc:90:e1:8d:bc:60:85:ad:c0:0a:7c:0d:76:
         64:94:53:83:8f:ae:64:0d:0e:22:2b:09:f2:c6:f5:76:0d:c2:
         95:77:0f:7e:23:2f:a2:fc:e3:1b:55:e0:0d:d2:e1:c9:df:d3:
         8b:35:55:2f:e3:39:3f:79:fb:92:b4:3a:11:c9:af:05:ba:22:
         3e:24:b4:52:55:16:dd:ea:dc:d9:13:ae:a9:dc:17:ca:4f:84:
         b1:da:1c:0d:50:18:81:bb:20:2f:ed:03:93:50:cd:e4:39:86:
         2d:d2:aa:99:af:57:bc:90:09:3b:7a:92:b4:eb:9a:94:8a:2e:
         24:92:06:cc:45:f8:4c:48:fc:b2:84:53:5b:bf:72:d2:47:64:
         18:b2:32:7e:f8:2b:ef:2a:01:34:47:99:15:58:9b:aa:aa:4f:
         7e:8b:1f:97:b8:04:59:62:58:b0:9f:b9:38:61:8f:d7:a4:cb:
         83:3f:70:e3:ba:31:84:9f:67:02:fa:4a:87:e5:cd:65:65:8e:
         a4:d0:f7:30:d0:f2:51:37:09:9c:75:a8:c8:af:0a:fd:e3:0c:
         5c:40:51:d5:42:af:b8:b9:4e:30:11:a5:18:89:79:73:63:eb:
         ec:fd:9f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----