Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a653630303a3a2f34302d3438203d3e20323030383832.roa
File:                     326130613a363034303a653630303a3a2f34302d3438203d3e20323030383832.roa (raw, json)
Hash identifier:          94Kvdq4R3wH1BWxZbxlt3dR0zCekHQGNcfBE9MR8jis=
Subject key identifier:   03:D5:72:E9:8B:B9:0B:78:1F:90:EB:5C:A7:FE:2A:7F:1A:F7:99:99
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       339D86F775DE1C07542F8A455FFDDE83A8E3AEDF
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a653630303a3a2f34302d3438203d3e20323030383832.roa
Signing time:             Fri 09 Dec 2022 08:20:58 +0000
ROA not before:           Fri 09 Dec 2022 08:15:58 +0000
ROA not after:            Fri 08 Dec 2023 08:20:58 +0000
asID:                     200882
IP address blocks:        2a0a:6040:e600::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:9d:86:f7:75:de:1c:07:54:2f:8a:45:5f:fd:de:83:a8:e3:ae:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:15:58 2022 GMT
            Not After : Dec  8 08:20:58 2023 GMT
        Subject: CN=03D572E98BB90B781F90EB5CA7FE2A7F1AF79999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c7:95:32:69:8b:7b:92:36:00:7b:82:1e:1c:
                    1e:c5:e5:f5:13:99:bf:9e:cd:c7:59:39:04:78:f2:
                    2c:13:33:85:19:af:61:08:e1:6e:53:21:9e:81:8e:
                    70:c6:e2:0d:39:43:cc:59:78:b5:0c:19:01:93:24:
                    71:33:b8:51:dc:1c:fa:14:09:50:06:0f:98:56:37:
                    10:8c:33:4c:36:e1:76:79:45:1d:5b:ad:5a:c8:6e:
                    ca:31:93:75:cf:03:e9:75:b3:68:bf:3b:b0:67:ad:
                    0a:3e:a4:a9:f4:9a:d7:19:9f:11:c3:e4:90:5a:f0:
                    14:a8:16:ff:2f:54:74:0b:68:18:96:da:ea:ce:7e:
                    ac:11:85:19:a7:92:3d:48:5a:9e:bd:07:23:ac:84:
                    f8:af:cc:d7:97:47:c0:26:a0:71:9e:f6:44:c0:6a:
                    30:37:5d:6a:d0:cd:ff:01:b1:5b:a1:e0:66:67:bd:
                    2f:66:ab:c8:40:c9:19:3e:7a:d3:a9:e9:8b:3a:61:
                    2d:b9:f5:87:72:57:09:4f:4d:37:7c:48:22:52:6c:
                    9e:6f:45:5c:36:69:90:8f:c1:3a:d0:bc:d9:5f:66:
                    ca:3d:6a:92:41:d8:fc:79:4b:5c:2c:a2:53:7e:13:
                    a1:9e:bb:b7:53:4a:a7:ff:be:6f:b3:bf:32:4e:dc:
                    62:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D5:72:E9:8B:B9:0B:78:1F:90:EB:5C:A7:FE:2A:7F:1A:F7:99:99
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a653630303a3a2f34302d3438203d3e20323030383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:e600::/40

    Signature Algorithm: sha256WithRSAEncryption
         7f:3f:55:de:c4:57:38:95:ef:08:45:16:c3:de:b7:00:86:6f:
         a7:2f:f5:fc:85:9f:63:81:c6:6e:a2:7f:98:0e:3a:a4:9a:e7:
         09:42:a2:4d:f0:c8:85:01:03:26:f9:2a:46:80:fc:a2:0a:7b:
         51:2f:b5:d9:e2:da:7b:b8:ea:ab:7f:88:45:96:2f:08:b4:00:
         87:25:1b:18:5f:bb:70:8c:26:77:db:15:89:6f:fe:43:0a:f4:
         ec:27:f0:45:0f:53:58:e3:8f:a6:38:3d:67:d9:79:c9:a8:05:
         87:99:c9:f9:ee:8c:b8:3a:b8:43:a3:4c:4a:ac:4f:41:cf:ad:
         54:5a:e3:35:3d:99:ae:60:fe:2c:20:29:82:1b:ee:3b:41:19:
         3e:4c:ee:ec:fb:c8:1a:99:8f:f4:ad:bb:76:42:a9:b2:d1:43:
         8b:01:76:1a:5f:2e:57:14:38:ee:56:fe:9a:dd:1c:c7:84:1a:
         89:cb:6f:cb:f4:bc:4e:3c:02:5c:f7:1a:d5:2d:b2:59:d8:5e:
         28:f6:2a:6e:66:e5:58:cc:02:98:90:33:73:e9:86:77:18:42:
         e6:e2:0b:50:3d:98:4c:11:fe:95:8a:9f:5c:45:4e:94:e3:eb:
         6d:fa:e9:3d:eb:90:c3:b0:e8:8b:50:d1:1a:f5:66:b2:d1:3e:
         2e:bb:b8:38
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIUM52G93XeHAdUL4pFX/3eg6jjrt8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMjEyMDkwODE1NThaFw0yMzEyMDgwODIwNThaMDMxMTAvBgNV
BAMTKDAzRDU3MkU5OEJCOTBCNzgxRjkwRUI1Q0E3RkUyQTdGMUFGNzk5OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAx5UyaYt7kjYAe4IeHB7F5fUT
mb+ezcdZOQR48iwTM4UZr2EI4W5TIZ6BjnDG4g05Q8xZeLUMGQGTJHEzuFHcHPoU
CVAGD5hWNxCMM0w24XZ5RR1brVrIbsoxk3XPA+l1s2i/O7BnrQo+pKn0mtcZnxHD
5JBa8BSoFv8vVHQLaBiW2urOfqwRhRmnkj1IWp69ByOshPivzNeXR8AmoHGe9kTA
ajA3XWrQzf8BsVuh4GZnvS9mq8hAyRk+etOp6Ys6YS259YdyVwlPTTd8SCJSbJ5v
RVw2aZCPwTrQvNlfZso9apJB2Px5S1wsolN+E6Geu7dTSqf/vm+zvzJO3GJDAgMB
AAGjggITMIICDzAdBgNVHQ4EFgQUA9Vy6Yu5C3gfkOtcp/4qfxr3mZkwHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChltyc3luYzov
L3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yLzBFMzU3RERB
MDRCODEwNzYyNjEyNEY1MkNGQzI0MzlCNzZEODVBRjkuY2VyMIGVBggrBgEFBQcB
CwSBiDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2ku
YXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAvMzI2MTMwNjEzYTM2MzAzNDMwM2E2NTM2
MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzAzMDM4MzgzMi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw
CAMGACoKYEDmMA0GCSqGSIb3DQEBCwUAA4IBAQB/P1XexFc4le8IRRbD3rcAhm+n
L/X8hZ9jgcZuon+YDjqkmucJQqJN8MiFAQMm+SpGgPyiCntRL7XZ4tp7uOqrf4hF
li8ItACHJRsYX7twjCZ32xWJb/5DCvTsJ/BFD1NY44+mOD1n2XnJqAWHmcn57oy4
OrhDo0xKrE9Bz61UWuM1PZmuYP4sICmCG+47QRk+TO7s+8gamY/0rbt2Qqmy0UOL
AXYaXy5XFDjuVv6a3RzHhBqJy2/L9LxOPAJc9xrVLbJZ2F4o9ipuZuVYzAKYkDNz
6YZ3GELm4gtQPZhMEf6Vip9cRU6U4+tt+uk965DDsOiLUNEa9Way0T4uu7g4
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org