Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/3/326130353a646663313a633432643a3a2f34382d3438203d3e203437343936.roa
File:                     326130353a646663313a633432643a3a2f34382d3438203d3e203437343936.roa (raw, json)
Hash identifier:          P3sJvO93p944HO1SKD0jJGHyyDisWWRYCs2ZHUwUqNc=
Subject key identifier:   3C:3F:0A:D6:03:38:6E:64:F5:58:8A:94:79:6B:AD:59:97:95:23:C7
Certificate issuer:       /CN=6085227D041EE38A5046749BFCC9B1327B980374
Certificate serial:       1B6C9F3B7284D1B2BFEC94C3A2DC50888DCC276D
Authority key identifier: 60:85:22:7D:04:1E:E3:8A:50:46:74:9B:FC:C9:B1:32:7B:98:03:74
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/6085227D041EE38A5046749BFCC9B1327B980374.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/3/326130353a646663313a633432643a3a2f34382d3438203d3e203437343936.roa
Signing time:             Fri 27 Oct 2023 09:55:29 +0000
ROA not before:           Fri 27 Oct 2023 09:50:29 +0000
ROA not after:            Fri 25 Oct 2024 09:55:29 +0000
asID:                     47496
IP address blocks:        2a05:dfc1:c42d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:6c:9f:3b:72:84:d1:b2:bf:ec:94:c3:a2:dc:50:88:8d:cc:27:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6085227D041EE38A5046749BFCC9B1327B980374
        Validity
            Not Before: Oct 27 09:50:29 2023 GMT
            Not After : Oct 25 09:55:29 2024 GMT
        Subject: CN=3C3F0AD603386E64F5588A94796BAD59979523C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:29:0c:65:89:2b:8d:15:b4:d5:53:4f:91:05:
                    41:6b:05:c2:92:f9:4e:60:e1:d8:2e:8d:b2:36:01:
                    62:15:b0:80:44:41:a9:36:02:ba:1a:f7:27:78:79:
                    9f:91:67:89:d5:79:25:83:07:2b:d2:3f:f3:29:b0:
                    b8:a4:55:5c:20:3c:3e:3a:2b:7c:86:02:0f:7d:2e:
                    be:0a:cf:10:85:ab:b9:5c:fe:ff:56:08:94:c2:9c:
                    b5:06:d2:1b:61:48:f7:d8:77:a1:01:5d:1d:76:3e:
                    22:d7:54:fa:e5:71:29:4b:d7:07:94:2c:30:b0:a8:
                    ba:49:1a:b1:8f:3f:98:71:d6:47:3b:2b:3d:9d:8a:
                    9c:80:f2:93:b0:a1:80:cb:10:65:f8:34:d6:c5:e6:
                    fa:2a:37:91:50:65:5c:d7:99:37:52:cc:d8:cc:e6:
                    b2:ee:a9:a8:19:11:17:c0:cd:0f:81:19:aa:98:78:
                    46:3e:07:e5:9a:8a:0e:12:c4:9b:32:fa:e3:60:ab:
                    6a:43:34:ad:18:7d:4c:03:12:2d:71:fe:63:21:1c:
                    00:ff:8e:24:78:f3:c0:a3:5f:cb:0e:bb:4d:cf:f7:
                    9b:8c:f1:a2:49:c0:6e:12:46:83:d5:ac:a9:80:2a:
                    77:7d:3a:05:a3:29:2d:b5:3e:01:28:b6:92:a5:1c:
                    69:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3F:0A:D6:03:38:6E:64:F5:58:8A:94:79:6B:AD:59:97:95:23:C7
            X509v3 Authority Key Identifier:
                keyid:60:85:22:7D:04:1E:E3:8A:50:46:74:9B:FC:C9:B1:32:7B:98:03:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/3/6085227D041EE38A5046749BFCC9B1327B980374.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/6085227D041EE38A5046749BFCC9B1327B980374.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/3/326130353a646663313a633432643a3a2f34382d3438203d3e203437343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:c42d::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:bb:c2:37:fc:15:f5:d7:3a:06:48:43:48:6b:98:49:77:4c:
         4c:8a:5e:49:36:aa:87:8f:74:d0:ba:31:71:bc:2e:ad:ee:94:
         08:6e:6b:53:a7:77:d7:02:98:9a:6a:0d:c4:5a:0a:b5:98:5d:
         12:67:8f:7a:ae:d9:05:2d:5b:2e:8a:e9:7f:44:af:cc:b7:90:
         16:7e:bb:e8:e5:91:10:c2:0d:cf:3c:69:44:09:ad:67:9d:46:
         28:92:08:2a:a6:68:57:08:22:35:6b:1c:9f:98:d1:e3:37:4a:
         d6:d2:4d:19:5c:1c:15:86:1a:19:db:e4:f9:a2:0d:11:c2:2a:
         c2:67:ed:95:22:d1:4d:62:a1:5e:48:5e:63:8f:fd:c9:ec:3f:
         a5:58:21:f1:f8:04:6f:92:d8:45:bb:93:17:4a:f4:2b:ea:1f:
         3e:b6:d2:bd:63:df:da:ba:96:f5:9f:34:07:f3:8c:a6:4e:b5:
         a0:6d:b5:d6:7d:d2:c0:f8:37:56:77:89:7a:8b:a0:4f:d8:1d:
         1a:14:e2:ec:46:46:47:e8:a2:8c:78:95:d8:bf:85:5d:b8:96:
         72:bb:eb:ef:0e:45:19:80:07:d9:9f:b3:7b:3c:95:73:be:62:
         37:c4:76:1f:fe:b7:54:dd:7e:af:7d:f6:22:80:a7:e6:38:2e:
         c6:75:82:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org