Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/0/326130613a363034303a613130343a3a2f34382d3438203d3e20323033383433.roa
File:                     326130613a363034303a613130343a3a2f34382d3438203d3e20323033383433.roa (raw, json)
Hash identifier:          kYLJ6OLA+67qQXQpHssN4V5FpaAZk6a1AlBu1uCtWl8=
Subject key identifier:   FD:CE:7E:AB:83:94:8F:56:58:2D:F8:03:D9:0C:96:8D:88:0F:D4:EF
Certificate issuer:       /CN=498074B32285FE33C7B5A4A2FBB588257F5871A7
Certificate serial:       2DF383C630FFDFFD69B42DA76EF1E581103AE367
Authority key identifier: 49:80:74:B3:22:85:FE:33:C7:B5:A4:A2:FB:B5:88:25:7F:58:71:A7
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/498074B32285FE33C7B5A4A2FBB588257F5871A7.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/0/326130613a363034303a613130343a3a2f34382d3438203d3e20323033383433.roa
Signing time:             Mon 16 Oct 2023 13:04:55 +0000
ROA not before:           Mon 16 Oct 2023 12:59:55 +0000
ROA not after:            Mon 14 Oct 2024 13:04:55 +0000
asID:                     203843
IP address blocks:        2a0a:6040:a104::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:f3:83:c6:30:ff:df:fd:69:b4:2d:a7:6e:f1:e5:81:10:3a:e3:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=498074B32285FE33C7B5A4A2FBB588257F5871A7
        Validity
            Not Before: Oct 16 12:59:55 2023 GMT
            Not After : Oct 14 13:04:55 2024 GMT
        Subject: CN=FDCE7EAB83948F56582DF803D90C968D880FD4EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:51:79:b5:cb:0e:08:ae:ba:de:97:11:53:9b:
                    43:20:70:69:31:0c:a5:8a:cd:26:77:14:3b:be:ec:
                    6d:0f:58:1f:be:db:7b:bb:eb:28:b5:41:11:87:38:
                    24:0a:0f:99:6f:c0:14:1f:dd:82:b0:65:41:9f:48:
                    77:c5:8a:68:a6:d6:c3:71:f4:ae:2c:b0:63:41:8a:
                    c6:b4:91:b8:5a:d5:0c:ed:ed:dc:09:f0:e1:5d:96:
                    ff:a5:1c:af:6a:fb:38:c0:76:1a:2b:86:0d:63:c3:
                    07:5c:e8:b2:e8:93:c1:5b:18:c5:b6:d5:a6:2b:97:
                    90:97:73:1e:46:49:4f:2c:78:f3:bf:0a:7b:44:79:
                    c2:51:34:5b:5c:db:50:d2:63:8e:d4:13:0c:19:6c:
                    d5:d3:a5:81:84:64:74:71:e9:74:57:25:b8:e3:ed:
                    75:55:6d:a7:70:9b:dc:a8:a7:fd:b8:9c:5f:99:01:
                    ab:2c:77:72:23:4e:ca:ba:5d:90:e6:75:eb:c7:12:
                    2f:de:b5:a5:a9:89:72:51:5a:5b:b6:55:c2:5f:dc:
                    e4:e4:9e:a8:75:46:be:a7:4d:be:76:ab:67:c0:d2:
                    3c:47:e3:d4:a5:b0:69:31:8e:6b:b5:a1:39:06:ba:
                    b8:05:a0:68:2c:d2:6a:34:08:38:b3:b3:e1:b6:56:
                    32:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CE:7E:AB:83:94:8F:56:58:2D:F8:03:D9:0C:96:8D:88:0F:D4:EF
            X509v3 Authority Key Identifier:
                keyid:49:80:74:B3:22:85:FE:33:C7:B5:A4:A2:FB:B5:88:25:7F:58:71:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/0/498074B32285FE33C7B5A4A2FBB588257F5871A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/498074B32285FE33C7B5A4A2FBB588257F5871A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/0/326130613a363034303a613130343a3a2f34382d3438203d3e20323033383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:a104::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:f4:7f:4a:0c:3b:24:4f:ff:a5:52:8a:fa:30:55:81:29:e5:
         92:d4:40:ca:99:a6:df:0a:e3:32:3a:af:d7:d8:a3:0f:01:99:
         07:22:84:86:7a:15:e8:82:27:26:fc:c9:72:40:0b:b5:5e:6a:
         14:59:2f:da:b7:45:12:b9:d9:e6:7b:0c:79:f0:c2:5f:36:e4:
         96:7d:cc:62:da:76:11:f7:b8:de:b8:cf:2f:da:5b:1b:83:19:
         2b:89:f8:f3:f4:de:11:59:f5:26:25:b3:b1:3e:6e:9d:a4:e5:
         7a:da:84:87:22:35:eb:ae:4f:c6:dd:e8:0f:31:92:d4:14:83:
         fa:c2:70:1c:7e:1f:6c:50:5d:d9:d8:db:d5:9f:ee:ba:e7:ca:
         80:53:9c:2c:f6:75:fa:2c:83:b2:6a:8e:72:2a:ba:ff:9f:4e:
         84:aa:e7:46:a7:8c:1d:ac:51:db:8d:27:e4:45:7b:36:f3:bc:
         5d:fb:c6:68:aa:3a:1f:73:da:4a:6f:18:d8:19:3c:f1:cb:05:
         8b:9b:47:33:2c:63:9d:3e:8e:a8:5f:fe:79:9f:8e:44:52:c6:
         77:d6:8a:fa:94:89:47:cb:cd:63:10:72:99:27:1c:83:12:68:
         c0:44:c5:1a:11:97:15:70:45:3d:10:5c:3b:6a:92:fe:d0:73:
         88:71:83:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----