Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a666530303a3a2f34302d3438203d3e20323031333932.roa
File:                     326130613a363034303a666530303a3a2f34302d3438203d3e20323031333932.roa (raw, json)
Hash identifier:          bTB/4kO07gvAr0hT1kCTYBhXkjp+/iaeAfYXSKUkCeU=
Subject key identifier:   A1:A3:2E:CA:E4:3F:CF:D8:63:86:B5:49:B4:F2:C9:60:72:42:98:AD
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       4C2F845D7A6506DCDE21D6E31AAD2EE47B3F8C2F
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a666530303a3a2f34302d3438203d3e20323031333932.roa
Signing time:             Fri 09 Dec 2022 08:20:59 +0000
ROA not before:           Fri 09 Dec 2022 08:15:59 +0000
ROA not after:            Fri 08 Dec 2023 08:20:59 +0000
asID:                     201392
IP address blocks:        2a0a:6040:fe00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:2f:84:5d:7a:65:06:dc:de:21:d6:e3:1a:ad:2e:e4:7b:3f:8c:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:15:59 2022 GMT
            Not After : Dec  8 08:20:59 2023 GMT
        Subject: CN=A1A32ECAE43FCFD86386B549B4F2C960724298AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:14:ab:ab:93:5a:77:11:b9:2f:17:ad:cc:4e:
                    ea:75:83:62:b6:bf:28:df:e2:84:b5:73:33:7a:cf:
                    93:b4:44:39:21:43:4b:b1:d6:6f:c4:9f:9f:45:88:
                    f0:08:39:3f:49:53:fc:10:f0:38:d6:8c:cb:08:55:
                    67:74:21:a9:72:11:e1:04:1c:e8:6f:d5:b8:86:34:
                    15:e3:52:d4:83:a2:ff:d8:9d:3a:d9:2a:63:2b:d8:
                    77:54:75:65:ec:f7:1c:83:5d:ba:1b:f0:88:8b:35:
                    f0:ef:03:68:bc:20:45:24:2e:cc:51:63:91:85:00:
                    ba:8d:e3:49:4a:ec:12:57:e0:a0:cf:7e:cf:fd:e6:
                    a4:4f:ce:6e:e3:a9:16:45:62:c9:7e:ba:f8:24:c7:
                    f1:0a:e6:8a:d4:9c:66:85:39:41:65:73:73:13:c3:
                    87:02:d2:6e:50:ec:aa:fd:7b:14:b3:4d:4a:b0:6c:
                    de:0b:b7:62:92:90:38:28:f5:5e:47:d8:3e:cd:8d:
                    4a:93:0e:0c:e3:e1:29:13:11:ad:42:cb:d0:d1:0e:
                    2b:0e:d3:c2:cb:a6:31:e8:a9:c5:78:4c:30:28:b5:
                    b5:67:c7:7e:c9:8d:a2:d0:85:d6:94:37:b5:39:73:
                    f5:ed:ee:74:6e:bf:8c:b8:c8:dc:35:55:e3:d5:15:
                    92:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A3:2E:CA:E4:3F:CF:D8:63:86:B5:49:B4:F2:C9:60:72:42:98:AD
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a666530303a3a2f34302d3438203d3e20323031333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:fe00::/40

    Signature Algorithm: sha256WithRSAEncryption
         36:e9:0b:30:23:5a:b3:75:2e:3d:e7:10:f4:c1:f6:87:87:e7:
         d7:13:01:98:24:a1:05:1e:69:49:f5:ab:1e:de:49:35:61:c5:
         2c:c6:1f:29:a9:44:3c:0d:bd:f9:52:98:f4:6b:7a:04:cb:8b:
         69:5a:ae:21:06:a9:c7:ac:9e:76:55:d6:dd:b3:00:db:be:ad:
         81:1f:33:62:74:b3:30:f6:ed:26:5b:c5:98:ab:27:77:03:4a:
         6d:9d:75:5c:ef:b6:d0:a5:76:7a:a4:2f:f8:1d:64:a7:cc:fe:
         b7:32:f3:15:8a:32:fb:88:cc:c8:a2:ef:38:de:2e:71:74:31:
         84:9b:07:9e:c4:9e:7f:e5:a9:5f:be:b6:8b:c9:9f:b5:c2:c9:
         c5:3e:d6:98:7f:2b:db:ff:19:0e:6e:7c:b2:cb:56:6a:bd:e5:
         c6:fb:4b:da:58:ea:8e:fc:6b:fb:52:9e:3d:1d:b5:87:79:3e:
         da:77:9e:c6:1c:57:7d:1f:6c:3d:fd:78:6c:2b:03:de:16:18:
         fe:01:65:9a:fd:28:0b:c6:20:4c:b1:de:c0:f8:64:24:97:23:
         9f:50:9e:52:6a:9c:1e:5c:65:fe:54:81:2c:1a:dd:b5:7b:12:
         02:ba:29:1c:4d:d8:0e:a5:29:e2:27:90:eb:5c:94:fa:c4:76:
         e2:ea:46:83
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIUTC+EXXplBtzeIdbjGq0u5Hs/jC8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMjEyMDkwODE1NTlaFw0yMzEyMDgwODIwNTlaMDMxMTAvBgNV
BAMTKEExQTMyRUNBRTQzRkNGRDg2Mzg2QjU0OUI0RjJDOTYwNzI0Mjk4QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnFKurk1p3EbkvF63MTup1g2K2
vyjf4oS1czN6z5O0RDkhQ0ux1m/En59FiPAIOT9JU/wQ8DjWjMsIVWd0IalyEeEE
HOhv1biGNBXjUtSDov/YnTrZKmMr2HdUdWXs9xyDXbob8IiLNfDvA2i8IEUkLsxR
Y5GFALqN40lK7BJX4KDPfs/95qRPzm7jqRZFYsl+uvgkx/EK5orUnGaFOUFlc3MT
w4cC0m5Q7Kr9exSzTUqwbN4Lt2KSkDgo9V5H2D7NjUqTDgzj4SkTEa1Cy9DRDisO
08LLpjHoqcV4TDAotbVnx37JjaLQhdaUN7U5c/Xt7nRuv4y4yNw1VePVFZJNAgMB
AAGjggITMIICDzAdBgNVHQ4EFgQUoaMuyuQ/z9hjhrVJtPLJYHJCmK0wHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChltyc3luYzov
L3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yLzBFMzU3RERB
MDRCODEwNzYyNjEyNEY1MkNGQzI0MzlCNzZEODVBRjkuY2VyMIGVBggrBgEFBQcB
CwSBiDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2ku
YXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAvMzI2MTMwNjEzYTM2MzAzNDMwM2E2NjY1
MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzAzMTMzMzkzMi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw
CAMGACoKYED+MA0GCSqGSIb3DQEBCwUAA4IBAQA26QswI1qzdS495xD0wfaHh+fX
EwGYJKEFHmlJ9ase3kk1YcUsxh8pqUQ8Db35Upj0a3oEy4tpWq4hBqnHrJ52Vdbd
swDbvq2BHzNidLMw9u0mW8WYqyd3A0ptnXVc77bQpXZ6pC/4HWSnzP63MvMVijL7
iMzIou843i5xdDGEmweexJ5/5alfvraLyZ+1wsnFPtaYfyvb/xkObnyyy1ZqveXG
+0vaWOqO/Gv7Up49HbWHeT7ad57GHFd9H2w9/XhsKwPeFhj+AWWa/SgLxiBMsd7A
+GQklyOfUJ5SapweXGX+VIEsGt21exICuikcTdgOpSniJ5DrXJT6xHbi6kaD
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org