Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/2/326130613a363034303a613130303a3a2f34302d3430203d3e20323033383433.roa
File:                     326130613a363034303a613130303a3a2f34302d3430203d3e20323033383433.roa (raw, json)
Hash identifier:          HB9Xea+ziCeVypr/0f8TA8usy+WRT2STZsPD9URaPpk=
Subject key identifier:   F3:91:16:5A:A0:FD:BB:DC:F4:3A:9D:5A:51:70:4B:D7:35:4C:57:DE
Certificate issuer:       /CN=F9BEEC0A996497A611BBD137E4EF0B0D574C78D3
Certificate serial:       6BF3497C0DF74788372F4F506BA87033B8369A9F
Authority key identifier: F9:BE:EC:0A:99:64:97:A6:11:BB:D1:37:E4:EF:0B:0D:57:4C:78:D3
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F9BEEC0A996497A611BBD137E4EF0B0D574C78D3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/2/326130613a363034303a613130303a3a2f34302d3430203d3e20323033383433.roa
Signing time:             Mon 02 Jan 2023 17:35:46 +0000
ROA not before:           Mon 02 Jan 2023 17:30:46 +0000
ROA not after:            Mon 01 Jan 2024 17:35:46 +0000
asID:                     203843
IP address blocks:        2a0a:6040:a100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f3:49:7c:0d:f7:47:88:37:2f:4f:50:6b:a8:70:33:b8:36:9a:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9BEEC0A996497A611BBD137E4EF0B0D574C78D3
        Validity
            Not Before: Jan  2 17:30:46 2023 GMT
            Not After : Jan  1 17:35:46 2024 GMT
        Subject: CN=F391165AA0FDBBDCF43A9D5A51704BD7354C57DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:43:53:cf:be:81:3d:5c:a4:3e:dc:67:e8:39:
                    5d:00:1a:13:2a:7d:ac:d7:8e:1c:59:55:56:5b:8a:
                    ff:cc:a9:67:04:93:c8:68:52:f0:a2:89:f2:07:0b:
                    53:4d:af:50:59:9a:52:a2:4f:38:92:b5:4f:0f:28:
                    86:3a:88:f2:91:39:e1:e4:c0:24:e7:98:99:a8:78:
                    0a:b2:43:fb:59:b3:81:41:cd:54:62:23:b7:0f:44:
                    6d:bb:93:1f:de:fc:c2:8a:23:13:b1:13:8e:88:02:
                    69:46:e9:ca:de:26:84:5e:32:9e:13:41:84:c8:60:
                    92:a2:e4:6a:27:01:c4:bc:ff:46:17:c1:1c:38:8b:
                    e8:49:b9:b7:31:1f:9c:e3:7a:57:7f:d4:1a:17:a3:
                    b7:f8:86:e3:a2:51:f9:b6:d1:ad:12:cb:ff:b1:0f:
                    cb:4e:fd:81:53:00:08:b6:a2:e7:ea:91:4d:d0:30:
                    07:f9:66:3b:5b:5e:8d:ce:49:da:69:2f:ed:21:1f:
                    1d:6b:11:ae:be:2d:24:c7:d0:8f:7e:42:6e:e7:e3:
                    f0:8e:d5:86:8b:eb:42:b0:2a:21:03:05:da:ac:8a:
                    4d:c1:8a:96:fe:f8:27:b7:7d:67:b0:f6:a6:3a:d9:
                    21:f9:05:31:ec:79:53:d8:28:e5:05:4e:38:cd:33:
                    1f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:91:16:5A:A0:FD:BB:DC:F4:3A:9D:5A:51:70:4B:D7:35:4C:57:DE
            X509v3 Authority Key Identifier:
                keyid:F9:BE:EC:0A:99:64:97:A6:11:BB:D1:37:E4:EF:0B:0D:57:4C:78:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/2/F9BEEC0A996497A611BBD137E4EF0B0D574C78D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F9BEEC0A996497A611BBD137E4EF0B0D574C78D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/2/326130613a363034303a613130303a3a2f34302d3430203d3e20323033383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:a100::/40

    Signature Algorithm: sha256WithRSAEncryption
         01:bf:c0:3c:c8:6b:1c:5f:fe:36:1f:8c:43:5e:9c:b6:ab:a2:
         1c:b2:4b:85:69:bb:92:ea:90:fe:9f:d2:3f:90:13:a8:1f:26:
         1b:1d:04:24:54:66:17:56:27:ae:3a:76:5e:23:9b:b4:34:97:
         c4:13:31:9b:f7:ad:c5:fb:d5:35:16:61:10:74:f2:dc:3c:a9:
         d2:0b:bf:ff:0a:a8:16:2c:f3:ba:85:a2:00:14:27:3a:a6:5b:
         0c:b3:c6:ee:44:01:eb:c1:b4:0e:a3:13:31:c1:ee:b7:d5:81:
         26:97:9c:c4:3b:5c:74:d9:02:bb:81:33:96:42:49:a5:e7:e3:
         7d:e0:c9:0e:84:60:21:bf:b0:78:c6:37:55:f1:37:af:a5:54:
         f0:fb:f3:46:70:aa:4f:52:4d:0d:5d:b2:61:02:42:a0:51:59:
         3d:4e:c0:29:3d:4a:e1:f3:34:84:80:29:94:c6:76:f3:16:41:
         1f:4f:ba:ff:e3:d5:81:35:0e:fd:68:1f:2a:e9:c4:b0:3c:04:
         ad:38:2b:2f:d3:08:42:a0:71:e0:dc:c2:00:51:8a:8c:55:16:
         2b:19:27:f9:21:cc:5a:32:c3:77:53:a3:21:a0:0f:5f:1c:f5:
         9f:c1:7d:9a:6b:92:1a:a9:50:40:25:ae:b1:37:49:a8:72:21:
         40:c2:f6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----