Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a636530303a3a2f34302d3438203d3e20323030373832.roa
File:                     326130613a363034303a636530303a3a2f34302d3438203d3e20323030373832.roa (raw, json)
Hash identifier:          696n7Gs3H/d9+5GWcdwNWLTmDw57P5UTpGUJoNOy4HI=
Subject key identifier:   5A:87:66:04:83:92:65:DB:A1:52:7D:64:21:D9:E0:BD:FA:A7:32:E5
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       0D9F4816EB9974B196FDF2532B16677E9D49B66A
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a636530303a3a2f34302d3438203d3e20323030373832.roa
Signing time:             Fri 09 Dec 2022 08:21:01 +0000
ROA not before:           Fri 09 Dec 2022 08:16:01 +0000
ROA not after:            Fri 08 Dec 2023 08:21:01 +0000
asID:                     200782
IP address blocks:        2a0a:6040:ce00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:9f:48:16:eb:99:74:b1:96:fd:f2:53:2b:16:67:7e:9d:49:b6:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:16:01 2022 GMT
            Not After : Dec  8 08:21:01 2023 GMT
        Subject: CN=5A876604839265DBA1527D6421D9E0BDFAA732E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3c:32:be:27:1d:c2:7a:87:10:b7:ef:dc:c2:
                    98:e4:2f:18:2c:c9:97:e1:77:07:4c:24:3f:ed:b8:
                    58:44:12:02:b8:7e:35:23:f8:6e:6c:45:68:d2:b7:
                    da:c1:1c:3a:88:ee:61:79:26:7d:73:83:57:8b:3c:
                    10:6a:dd:c9:a2:8f:d7:53:b4:3a:b2:74:ba:88:be:
                    4f:3b:c7:77:d2:b5:21:48:25:bf:7c:6a:d4:eb:73:
                    3c:24:ef:60:94:03:33:c1:f2:c1:33:65:d8:47:ed:
                    e2:4b:23:88:1c:9c:e9:b0:6d:e6:59:79:c2:f6:26:
                    cd:f5:d3:eb:c7:83:5c:5a:fe:c5:e0:eb:79:4a:43:
                    71:f7:20:c5:0d:59:6e:3f:bb:dd:70:98:79:0f:3c:
                    67:92:e4:55:a8:03:5b:c6:8d:ff:5b:51:6e:62:13:
                    40:28:91:1b:2e:36:a3:82:cb:e6:76:45:ff:8a:bf:
                    c3:8e:0d:9b:db:fa:c5:2b:09:30:02:07:52:b3:41:
                    44:77:5d:d2:e0:83:68:cf:eb:c2:58:3e:6d:c7:bf:
                    54:d0:e1:21:84:38:95:22:d3:17:52:42:74:96:bb:
                    5a:e2:81:9b:6c:ce:11:47:d1:1d:15:0c:55:82:01:
                    f9:b7:65:21:3f:6b:f8:d5:bf:43:04:c4:22:98:cd:
                    d5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:87:66:04:83:92:65:DB:A1:52:7D:64:21:D9:E0:BD:FA:A7:32:E5
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a636530303a3a2f34302d3438203d3e20323030373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ce00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7a:8c:1d:ef:c6:6f:4d:71:31:1c:c8:3a:c9:b7:bc:6b:58:26:
         53:6a:c4:c4:04:b9:51:3f:a2:9b:19:b7:5f:22:3c:5e:9a:0c:
         4d:e9:ce:2c:0b:cc:a3:a6:e4:d7:2e:db:40:a9:aa:38:4a:ac:
         c6:b8:c7:1e:be:9c:6d:b9:37:14:e2:44:07:18:3f:98:37:d1:
         8e:05:d8:88:4a:1d:2d:fb:01:22:cf:b3:b4:b2:8e:ae:75:b2:
         76:e1:e1:1a:00:99:6d:d7:e4:1d:8b:85:cc:e6:a7:b9:3b:a1:
         1a:7d:02:ac:41:00:d4:3c:e6:3e:f7:f7:26:57:13:19:02:6c:
         32:9a:ca:72:a4:c4:af:91:18:26:32:32:00:b2:88:7e:6c:90:
         0d:55:8f:97:39:93:e5:bb:61:7c:22:e2:45:cd:79:48:0a:62:
         a2:f4:38:22:99:82:16:27:6a:75:4f:9e:65:d5:d6:8e:49:7c:
         04:ab:bb:37:0a:3e:4d:b8:9b:46:e8:c2:48:94:4c:7a:10:0a:
         8c:14:f4:e3:3c:d5:48:89:c6:c8:c6:85:30:05:3a:b2:29:bb:
         49:72:d5:24:18:ba:08:40:2c:56:d0:92:57:07:3f:3c:bd:e0:
         32:99:98:9b:f8:54:3c:4d:81:79:5c:63:6f:41:27:8c:e9:5b:
         e3:86:e1:4e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIUDZ9IFuuZdLGW/fJTKxZnfp1JtmowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMjEyMDkwODE2MDFaFw0yMzEyMDgwODIxMDFaMDMxMTAvBgNV
BAMTKDVBODc2NjA0ODM5MjY1REJBMTUyN0Q2NDIxRDlFMEJERkFBNzMyRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQPDK+Jx3CeocQt+/cwpjkLxgs
yZfhdwdMJD/tuFhEEgK4fjUj+G5sRWjSt9rBHDqI7mF5Jn1zg1eLPBBq3cmij9dT
tDqydLqIvk87x3fStSFIJb98atTrczwk72CUAzPB8sEzZdhH7eJLI4gcnOmwbeZZ
ecL2Js310+vHg1xa/sXg63lKQ3H3IMUNWW4/u91wmHkPPGeS5FWoA1vGjf9bUW5i
E0AokRsuNqOCy+Z2Rf+Kv8OODZvb+sUrCTACB1KzQUR3XdLgg2jP68JYPm3Hv1TQ
4SGEOJUi0xdSQnSWu1rigZtszhFH0R0VDFWCAfm3ZSE/a/jVv0MExCKYzdVTAgMB
AAGjggITMIICDzAdBgNVHQ4EFgQUWodmBIOSZduhUn1kIdngvfqnMuUwHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChltyc3luYzov
L3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yLzBFMzU3RERB
MDRCODEwNzYyNjEyNEY1MkNGQzI0MzlCNzZEODVBRjkuY2VyMIGVBggrBgEFBQcB
CwSBiDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2ku
YXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAvMzI2MTMwNjEzYTM2MzAzNDMwM2E2MzY1
MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzAzMDM3MzgzMi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw
CAMGACoKYEDOMA0GCSqGSIb3DQEBCwUAA4IBAQB6jB3vxm9NcTEcyDrJt7xrWCZT
asTEBLlRP6KbGbdfIjxemgxN6c4sC8yjpuTXLttAqao4SqzGuMcevpxtuTcU4kQH
GD+YN9GOBdiISh0t+wEiz7O0so6udbJ24eEaAJlt1+Qdi4XM5qe5O6EafQKsQQDU
POY+9/cmVxMZAmwymspypMSvkRgmMjIAsoh+bJANVY+XOZPlu2F8IuJFzXlICmKi
9DgimYIWJ2p1T55l1daOSXwEq7s3Cj5NuJtG6MJIlEx6EAqMFPTjPNVIicbIxoUw
BTqyKbtJctUkGLoIQCxW0JJXBz88veAymZib+FQ8TYF5XGNvQSeM6VvjhuFO
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org