Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a6130303a3a2f34302d3438203d3e20323036323138.roa
File:                     326130613a363034303a6130303a3a2f34302d3438203d3e20323036323138.roa (raw, json)
Hash identifier:          bYfYCG+3EPzYbAefpniLfbzZt4/7JxD3OeNgLMOQYio=
Subject key identifier:   0C:04:EF:A1:D6:21:0B:46:D6:D3:9B:A4:F9:2F:76:9B:E2:B9:85:16
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       06B23CB475C235CA0751D1D4CAB0AC62F622F7C5
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a6130303a3a2f34302d3438203d3e20323036323138.roa
Signing time:             Thu 22 Dec 2022 10:44:17 +0000
ROA not before:           Thu 22 Dec 2022 10:39:17 +0000
ROA not after:            Thu 21 Dec 2023 10:44:17 +0000
asID:                     206218
IP address blocks:        2a0a:6040:a00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b2:3c:b4:75:c2:35:ca:07:51:d1:d4:ca:b0:ac:62:f6:22:f7:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 22 10:39:17 2022 GMT
            Not After : Dec 21 10:44:17 2023 GMT
        Subject: CN=0C04EFA1D6210B46D6D39BA4F92F769BE2B98516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:b8:2e:d9:1d:b7:bf:be:3d:66:29:e1:39:8e:
                    73:fe:38:b9:aa:c3:01:25:12:a8:50:9f:c7:61:d7:
                    16:d0:89:62:71:11:35:c2:66:ac:c2:ee:dc:72:3c:
                    f7:78:98:66:0b:71:01:5c:88:0a:8e:85:8a:c1:a9:
                    5d:d7:02:d5:5a:11:f2:e5:91:6e:2a:f4:a3:e7:ec:
                    f5:29:9a:e6:94:77:fa:1d:7e:a0:51:a8:32:68:aa:
                    27:82:7e:7a:87:4f:d4:24:26:d9:6c:9a:75:3d:08:
                    da:4b:ef:37:be:9c:ba:f9:9d:ac:e8:96:2b:8f:a2:
                    10:d2:4c:dc:58:e0:82:36:c3:de:dc:fc:f7:a6:72:
                    5b:1c:e5:b6:57:a0:c2:4f:ae:f6:e0:5b:13:3e:f7:
                    e8:e8:97:d9:6c:96:44:b6:8d:b4:12:03:8c:7f:92:
                    6f:b1:9a:07:aa:7d:63:00:86:fe:39:b5:d9:cc:b3:
                    64:0e:c5:87:5a:bb:93:2d:16:a7:34:41:c1:26:e9:
                    f1:9b:89:1d:32:9e:e0:16:9c:41:70:28:1c:13:9a:
                    14:b9:f3:a6:bc:a4:dc:e6:38:67:06:7c:15:c8:fb:
                    61:0f:6f:31:4e:6c:d3:ad:b3:ca:77:a1:54:30:4a:
                    ad:5d:91:b5:3d:8b:11:b1:b2:1a:ed:bb:6d:e6:c1:
                    2e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:04:EF:A1:D6:21:0B:46:D6:D3:9B:A4:F9:2F:76:9B:E2:B9:85:16
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a6130303a3a2f34302d3438203d3e20323036323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         36:d8:5e:73:09:6a:c2:fd:60:09:0f:d9:4f:a1:81:b4:41:07:
         9f:3d:c2:5c:b9:40:46:c7:70:db:ac:97:71:96:02:8b:2f:60:
         08:b9:5e:40:fe:50:18:89:4f:81:af:13:a0:89:60:6d:94:a4:
         4a:23:e4:68:7b:51:7a:9d:76:69:f6:e3:0a:31:bf:de:5d:6c:
         a8:ba:10:ab:95:5e:2f:62:b1:5e:04:6e:44:cf:46:18:d8:33:
         1e:b9:34:85:50:59:13:ca:9c:ae:7c:d1:09:fd:f2:4e:50:cf:
         6d:8e:c1:e2:f4:f6:0d:db:96:e6:05:4f:b1:cd:e1:b8:d0:b7:
         e5:8b:f1:fb:05:a2:7d:0d:3e:d4:b9:bd:eb:31:ce:af:97:d7:
         5a:b3:4d:d5:ae:7c:ec:35:65:8a:e8:f7:3e:f0:39:5b:28:be:
         ec:d6:3b:69:bf:f4:8e:4b:59:3c:3c:5e:5a:94:83:74:f8:69:
         a1:b5:60:3a:20:6a:51:c0:28:c7:2e:ab:5b:71:05:fa:78:80:
         ca:c8:74:46:ec:10:0b:5f:3b:78:e4:af:2d:73:91:f0:b7:51:
         71:e4:ec:29:3a:5b:a5:b0:07:64:21:19:77:9a:b1:bb:95:c4:
         4a:55:15:68:73:1b:4e:bb:c4:d3:5a:1e:f1:a2:ce:a3:04:f2:
         34:41:41:a5
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUBrI8tHXCNcoHUdHUyrCsYvYi98UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMjEyMjIxMDM5MTdaFw0yMzEyMjExMDQ0MTdaMDMxMTAvBgNV
BAMTKDBDMDRFRkExRDYyMTBCNDZENkQzOUJBNEY5MkY3NjlCRTJCOTg1MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxuC7ZHbe/vj1mKeE5jnP+OLmq
wwElEqhQn8dh1xbQiWJxETXCZqzC7txyPPd4mGYLcQFciAqOhYrBqV3XAtVaEfLl
kW4q9KPn7PUpmuaUd/odfqBRqDJoqieCfnqHT9QkJtlsmnU9CNpL7ze+nLr5nazo
liuPohDSTNxY4II2w97c/Pemclsc5bZXoMJPrvbgWxM+9+jol9lslkS2jbQSA4x/
km+xmgeqfWMAhv45tdnMs2QOxYdau5MtFqc0QcEm6fGbiR0ynuAWnEFwKBwTmhS5
86a8pNzmOGcGfBXI+2EPbzFObNOts8p3oVQwSq1dkbU9ixGxshrtu23mwS5/AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUDATvodYhC0bW05uk+S92m+K5hRYwHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChltyc3luYzov
L3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yLzBFMzU3RERB
MDRCODEwNzYyNjEyNEY1MkNGQzI0MzlCNzZEODVBRjkuY2VyMIGTBggrBgEFBQcB
CwSBhjCBgzCBgAYIKwYBBQUHMAuGdHJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2ku
YXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAvMzI2MTMwNjEzYTM2MzAzNDMwM2E2MTMw
MzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjMwMzYzMjMxMzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgD
BgAqCmBACjANBgkqhkiG9w0BAQsFAAOCAQEANthecwlqwv1gCQ/ZT6GBtEEHnz3C
XLlARsdw26yXcZYCiy9gCLleQP5QGIlPga8ToIlgbZSkSiPkaHtRep12afbjCjG/
3l1sqLoQq5VeL2KxXgRuRM9GGNgzHrk0hVBZE8qcrnzRCf3yTlDPbY7B4vT2DduW
5gVPsc3huNC35Yvx+wWifQ0+1Lm96zHOr5fXWrNN1a587DVliuj3PvA5Wyi+7NY7
ab/0jktZPDxeWpSDdPhpobVgOiBqUcAoxy6rW3EF+niAysh0RuwQC187eOSvLXOR
8LdRceTsKTpbpbAHZCEZd5qxu5XESlUVaHMbTrvE01oe8aLOowTyNEFBpQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org