Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/3/326130353a646663313a633432323a3a2f34382d3438203d3e203437343936.roa
File:                     326130353a646663313a633432323a3a2f34382d3438203d3e203437343936.roa (raw, json)
Hash identifier:          9XA2hjM84PC03MiEnd7DMPirFdb+gB/dtrB/oBiZtoI=
Subject key identifier:   EC:72:24:06:DD:4B:C0:35:9C:C9:FF:9B:9E:C5:DF:7B:B9:BC:E4:7B
Certificate issuer:       /CN=6085227D041EE38A5046749BFCC9B1327B980374
Certificate serial:       1B35F2A6132699777695E0BBED9D8215D9A42BB1
Authority key identifier: 60:85:22:7D:04:1E:E3:8A:50:46:74:9B:FC:C9:B1:32:7B:98:03:74
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/6085227D041EE38A5046749BFCC9B1327B980374.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/3/326130353a646663313a633432323a3a2f34382d3438203d3e203437343936.roa
Signing time:             Thu 26 Oct 2023 12:02:52 +0000
ROA not before:           Thu 26 Oct 2023 11:57:52 +0000
ROA not after:            Thu 24 Oct 2024 12:02:52 +0000
asID:                     47496
IP address blocks:        2a05:dfc1:c422::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:35:f2:a6:13:26:99:77:76:95:e0:bb:ed:9d:82:15:d9:a4:2b:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6085227D041EE38A5046749BFCC9B1327B980374
        Validity
            Not Before: Oct 26 11:57:52 2023 GMT
            Not After : Oct 24 12:02:52 2024 GMT
        Subject: CN=EC722406DD4BC0359CC9FF9B9EC5DF7BB9BCE47B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:68:e5:f9:86:a8:92:ca:f2:58:a5:f2:3b:69:
                    d5:1f:7c:b9:4b:59:cf:11:b7:c3:fc:9d:16:74:fd:
                    f0:68:a7:a3:ad:07:06:b6:20:9f:50:15:0b:4f:e3:
                    eb:d0:27:ae:55:d2:b8:09:74:7a:c1:2d:11:f2:b5:
                    80:1e:43:31:5b:2d:08:f0:cc:61:0d:9e:b7:81:46:
                    b5:37:b0:a5:a6:0d:c9:d3:fa:fc:d5:cd:09:bd:a5:
                    9b:36:ae:e1:bf:24:cb:63:b8:eb:e2:6e:ba:43:74:
                    39:ef:04:c8:99:de:54:b0:63:37:59:31:1d:85:cd:
                    72:e9:c1:ea:e8:47:0e:d7:a4:ae:3b:ce:e4:10:e2:
                    de:24:75:d8:7b:ae:a3:03:dc:2d:e8:02:c2:a8:b4:
                    b6:99:a0:ca:f0:5b:b9:6a:14:8c:f4:e3:7f:52:dc:
                    b1:e5:ac:0b:cf:20:ce:72:e6:12:58:71:ea:37:63:
                    16:82:fd:9d:9b:15:bf:d7:a6:42:ca:f2:3d:64:4d:
                    4c:96:2c:0b:ba:cb:86:39:08:4c:bf:52:61:e9:25:
                    af:15:a0:1f:36:56:49:b1:10:51:7f:e3:d1:96:7f:
                    90:3e:da:43:39:5f:04:c2:c2:11:02:b9:05:ac:3a:
                    e5:9d:90:9f:bd:f3:bc:47:a3:8c:e6:f4:8f:d7:f2:
                    36:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:72:24:06:DD:4B:C0:35:9C:C9:FF:9B:9E:C5:DF:7B:B9:BC:E4:7B
            X509v3 Authority Key Identifier:
                keyid:60:85:22:7D:04:1E:E3:8A:50:46:74:9B:FC:C9:B1:32:7B:98:03:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/3/6085227D041EE38A5046749BFCC9B1327B980374.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/6085227D041EE38A5046749BFCC9B1327B980374.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/3/326130353a646663313a633432323a3a2f34382d3438203d3e203437343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:c422::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:ed:d0:a9:56:c9:03:b0:de:60:ac:c7:a0:96:1b:ab:e2:6d:
         e7:bf:61:06:7b:d5:5a:35:6e:dc:be:c3:39:d2:38:4c:ea:90:
         c7:ed:98:d1:c2:74:99:f0:b2:9a:f0:74:0c:47:b8:31:0a:c7:
         34:4f:40:bd:55:ae:9e:11:61:f1:a2:a4:c2:5e:a7:a4:0a:22:
         d7:92:b7:5e:24:57:96:39:04:29:c4:8f:8e:b5:99:c0:a0:59:
         85:eb:5d:82:88:28:c0:f4:e8:cb:1e:fd:55:12:8c:62:63:36:
         bc:c7:02:2b:fe:f6:44:d9:ca:82:38:cc:c6:6e:58:a9:48:f2:
         10:f8:cf:84:b8:51:18:a5:06:51:17:4f:38:35:04:eb:20:8f:
         fe:7a:72:23:73:41:c4:18:80:ff:7c:6a:11:02:fe:42:d2:7f:
         71:0d:60:25:30:ca:e8:39:0b:d7:d9:65:02:46:99:dc:74:01:
         d6:a7:0e:12:b1:d5:68:5c:00:6d:b7:45:87:94:48:18:93:5c:
         1d:36:f4:3f:dc:9a:f9:5f:4b:c6:06:94:a6:39:89:38:2b:6b:
         57:ff:79:c4:d2:fe:57:e1:e0:22:c4:23:bb:65:eb:51:39:b0:
         a6:2b:6d:9a:b1:a0:39:29:86:27:22:7d:ff:57:3e:7e:1f:dd:
         06:c6:ec:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----