Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/0/326130613a363034303a613130323a3a2f34382d3438203d3e20323033383433.roa
File:                     326130613a363034303a613130323a3a2f34382d3438203d3e20323033383433.roa (raw, json)
Hash identifier:          KYAGmf3OvUPRL9BXToU2DLgV8kaYbVAmG7RoxTX5Xr4=
Subject key identifier:   B2:06:0D:9D:8B:8A:12:30:5F:62:C0:F6:E5:9C:CE:36:29:F6:50:3A
Certificate issuer:       /CN=498074B32285FE33C7B5A4A2FBB588257F5871A7
Certificate serial:       6AD96CACE38A68633E1AB80FC7033B40E774A1B7
Authority key identifier: 49:80:74:B3:22:85:FE:33:C7:B5:A4:A2:FB:B5:88:25:7F:58:71:A7
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/498074B32285FE33C7B5A4A2FBB588257F5871A7.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/0/326130613a363034303a613130323a3a2f34382d3438203d3e20323033383433.roa
Signing time:             Mon 16 Oct 2023 13:04:55 +0000
ROA not before:           Mon 16 Oct 2023 12:59:55 +0000
ROA not after:            Mon 14 Oct 2024 13:04:55 +0000
asID:                     203843
IP address blocks:        2a0a:6040:a102::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d9:6c:ac:e3:8a:68:63:3e:1a:b8:0f:c7:03:3b:40:e7:74:a1:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=498074B32285FE33C7B5A4A2FBB588257F5871A7
        Validity
            Not Before: Oct 16 12:59:55 2023 GMT
            Not After : Oct 14 13:04:55 2024 GMT
        Subject: CN=B2060D9D8B8A12305F62C0F6E59CCE3629F6503A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:76:fc:e0:8d:9a:6f:2f:60:87:ef:d2:c7:5c:
                    4e:83:16:5d:d8:d6:bc:64:33:b7:ab:fd:6e:94:89:
                    de:d8:4b:49:b8:b9:7d:1b:98:c5:72:3f:94:eb:6a:
                    88:77:12:8d:83:9e:c9:4c:1a:1c:de:de:3a:d9:07:
                    10:4e:cf:bc:01:8a:60:68:d3:a0:fd:4d:fa:ee:45:
                    3c:24:5a:d7:04:71:10:de:1e:08:01:e9:2c:f8:e6:
                    8f:15:d8:0a:fc:07:02:2a:ef:87:96:00:4f:62:01:
                    28:83:ce:6b:7a:a9:f1:b0:34:10:4c:37:34:57:6f:
                    d4:56:c3:c5:a4:da:c5:cf:3f:7b:36:da:d9:94:56:
                    01:28:4b:da:f4:63:b6:48:10:fc:8b:19:aa:9a:05:
                    ce:b5:24:e6:a4:bc:1c:b9:a4:ed:af:fe:02:f5:4c:
                    9a:44:cd:16:04:42:9e:b1:9a:c6:14:ee:9c:18:64:
                    87:41:78:0e:de:3a:b4:65:ae:22:99:47:e2:60:fb:
                    ea:1d:3e:55:da:3f:ff:f5:98:fe:77:1c:c2:1d:2a:
                    f3:9a:a0:2a:01:7d:a5:3a:d1:d1:34:33:45:2d:3e:
                    3a:18:09:80:45:8b:2b:ff:46:1d:df:7b:f0:84:35:
                    58:7d:b8:aa:0c:7e:45:41:b1:16:ca:9d:8c:80:77:
                    7e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:06:0D:9D:8B:8A:12:30:5F:62:C0:F6:E5:9C:CE:36:29:F6:50:3A
            X509v3 Authority Key Identifier:
                keyid:49:80:74:B3:22:85:FE:33:C7:B5:A4:A2:FB:B5:88:25:7F:58:71:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/0/498074B32285FE33C7B5A4A2FBB588257F5871A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/498074B32285FE33C7B5A4A2FBB588257F5871A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/0/326130613a363034303a613130323a3a2f34382d3438203d3e20323033383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:a102::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:a3:e9:2a:56:67:7c:59:9a:f6:0a:cd:e3:aa:bc:b4:38:0e:
         04:b7:7f:b3:b5:2e:bd:31:a0:f6:ee:11:92:04:7a:79:fa:ee:
         ed:5f:5e:6f:9e:64:92:d1:58:11:5d:d8:5c:8c:e0:0e:fe:15:
         87:b6:6c:6b:e4:a6:f3:dc:90:d1:a3:cb:bb:9b:78:15:24:85:
         f1:73:7b:72:a0:ad:9b:51:a5:7b:57:dd:d5:b5:da:d4:eb:7a:
         a9:68:8a:5c:4f:0e:65:fa:ba:7f:b7:ca:3e:89:59:23:6c:e9:
         9a:7a:c7:ab:7c:72:41:a3:95:58:d3:99:a6:8d:c1:a5:5e:3f:
         db:ca:da:11:ce:ed:f1:3e:8c:d0:44:9e:14:76:a2:53:8c:0b:
         35:1a:2b:91:61:46:d0:3c:f9:ba:15:ba:10:58:01:6a:3a:b4:
         66:9c:c5:a2:e8:88:d1:c4:24:81:60:fc:ed:f8:fe:63:a7:68:
         81:71:00:f1:96:b5:f5:87:94:48:c1:1a:2a:13:36:aa:85:4d:
         5d:ca:96:d4:ec:db:3e:a0:ab:f4:8f:a5:d7:77:7c:20:9d:ed:
         51:70:e1:3e:e4:14:22:21:66:a3:89:07:5d:7d:7e:b7:bc:33:
         18:73:55:84:df:b5:5e:39:0d:72:fa:44:7e:d1:d6:10:7a:2b:
         56:5c:d7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----