Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/2/326130613a363034303a613130363a3a2f34382d3438203d3e20323033383433.roa
File:                     326130613a363034303a613130363a3a2f34382d3438203d3e20323033383433.roa (raw, json)
Hash identifier:          wU0nxgopVjkxXKw0qv8LtbuV40DJoNOmUPKrBzAcvZg=
Subject key identifier:   6B:ED:FA:E0:AA:AA:25:E0:49:24:B5:8F:53:E7:6F:F6:DA:89:A4:9F
Certificate issuer:       /CN=F9BEEC0A996497A611BBD137E4EF0B0D574C78D3
Certificate serial:       68938F0E93508500265D3897EC27D4B229E5661A
Authority key identifier: F9:BE:EC:0A:99:64:97:A6:11:BB:D1:37:E4:EF:0B:0D:57:4C:78:D3
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F9BEEC0A996497A611BBD137E4EF0B0D574C78D3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/2/326130613a363034303a613130363a3a2f34382d3438203d3e20323033383433.roa
Signing time:             Fri 01 Sep 2023 16:11:37 +0000
ROA not before:           Fri 01 Sep 2023 16:06:37 +0000
ROA not after:            Fri 30 Aug 2024 16:11:37 +0000
asID:                     203843
IP address blocks:        2a0a:6040:a106::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:93:8f:0e:93:50:85:00:26:5d:38:97:ec:27:d4:b2:29:e5:66:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9BEEC0A996497A611BBD137E4EF0B0D574C78D3
        Validity
            Not Before: Sep  1 16:06:37 2023 GMT
            Not After : Aug 30 16:11:37 2024 GMT
        Subject: CN=6BEDFAE0AAAA25E04924B58F53E76FF6DA89A49F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:31:89:5e:43:21:7e:ae:21:b5:37:6a:80:df:
                    cd:37:4d:4f:af:02:06:60:cd:b0:fc:e9:01:f3:fc:
                    4f:ad:86:56:c4:27:fa:a1:e4:73:d8:8e:7a:df:78:
                    6a:1c:ba:76:be:22:f7:88:66:a9:86:d2:c5:47:4e:
                    28:f5:90:2e:45:ed:37:1c:54:e7:14:ed:77:94:2b:
                    6e:57:04:be:13:0d:4e:54:2e:80:3c:85:7b:ec:07:
                    37:85:c8:c7:26:61:af:08:d6:1e:8c:06:28:40:22:
                    aa:ed:d3:38:bd:ca:85:13:e4:a3:fd:fd:ce:a3:50:
                    e1:7a:ce:39:45:04:ec:18:e2:e0:09:b3:48:35:f9:
                    84:bc:25:64:e0:b3:13:e5:04:0b:6d:60:f2:f5:bd:
                    b6:9d:47:2b:ee:32:75:5b:2f:2f:ec:32:b0:71:61:
                    48:13:8f:59:11:dd:fd:21:90:63:6e:48:bb:e0:f3:
                    bf:bb:5a:10:ee:ef:bb:61:18:0c:6a:cb:d8:65:20:
                    33:67:c8:5c:25:76:c8:3b:00:ba:be:dc:1a:7b:b7:
                    19:f6:69:c8:f1:35:7b:f5:45:7e:9e:46:ad:4b:75:
                    13:e9:5d:e7:90:63:95:ff:52:39:5c:05:96:0c:9c:
                    7f:4d:40:ac:4e:fb:4e:ab:02:e0:b1:7d:65:c6:aa:
                    c9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:ED:FA:E0:AA:AA:25:E0:49:24:B5:8F:53:E7:6F:F6:DA:89:A4:9F
            X509v3 Authority Key Identifier:
                keyid:F9:BE:EC:0A:99:64:97:A6:11:BB:D1:37:E4:EF:0B:0D:57:4C:78:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/2/F9BEEC0A996497A611BBD137E4EF0B0D574C78D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F9BEEC0A996497A611BBD137E4EF0B0D574C78D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/2/326130613a363034303a613130363a3a2f34382d3438203d3e20323033383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:a106::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:0f:62:90:55:7a:ac:9b:db:3b:c0:9b:80:2c:db:ed:e8:be:
         ad:c8:95:9d:63:9d:ba:92:53:b0:b7:8b:5f:85:b1:92:c7:9f:
         d6:bd:88:1e:ff:ba:c8:a4:15:15:41:31:e6:d8:8a:6f:ff:44:
         68:a0:cf:2f:e2:9a:5c:55:36:d8:02:c7:a7:c8:94:2d:fb:9d:
         15:a8:7a:58:92:a0:22:6d:f5:08:2a:a2:89:84:d1:7a:1d:9e:
         92:92:7d:f1:f3:f5:0b:91:44:b1:38:2f:d4:81:87:32:34:ed:
         48:fb:b1:07:56:49:f3:13:a7:cc:5f:2a:15:18:48:9d:cd:73:
         7a:52:14:0b:86:54:4c:9e:41:ab:08:58:3d:32:3d:c0:d7:d1:
         8d:cb:ec:42:34:64:bd:36:9b:b4:76:4f:82:ab:47:0f:d9:70:
         ce:65:ac:ce:68:5a:33:17:db:fa:a1:93:31:c0:4c:6e:62:9c:
         46:4a:db:c8:6f:bf:48:b7:d9:22:8f:91:20:5b:a3:4c:11:20:
         54:f5:7f:ad:ec:24:87:8b:47:62:d4:50:4a:e9:ff:d0:bf:37:
         f2:7a:92:a8:3f:96:fb:1e:8d:a7:35:f2:05:c4:7a:80:29:40:
         4e:61:c0:b0:96:ea:4a:38:09:70:ba:f2:34:88:60:ff:6b:4d:
         5d:4c:1c:d0
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUaJOPDpNQhQAmXTiX7CfUsinlZhowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlCRUVDMEE5OTY0OTdBNjExQkJEMTM3RTRFRjBCMEQ1
NzRDNzhEMzAeFw0yMzA5MDExNjA2MzdaFw0yNDA4MzAxNjExMzdaMDMxMTAvBgNV
BAMTKDZCRURGQUUwQUFBQTI1RTA0OTI0QjU4RjUzRTc2RkY2REE4OUE0OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuMYleQyF+riG1N2qA3803TU+v
AgZgzbD86QHz/E+thlbEJ/qh5HPYjnrfeGocuna+IveIZqmG0sVHTij1kC5F7Tcc
VOcU7XeUK25XBL4TDU5ULoA8hXvsBzeFyMcmYa8I1h6MBihAIqrt0zi9yoUT5KP9
/c6jUOF6zjlFBOwY4uAJs0g1+YS8JWTgsxPlBAttYPL1vbadRyvuMnVbLy/sMrBx
YUgTj1kR3f0hkGNuSLvg87+7WhDu77thGAxqy9hlIDNnyFwldsg7ALq+3Bp7txn2
acjxNXv1RX6eRq1LdRPpXeeQY5X/UjlcBZYMnH9NQKxO+06rAuCxfWXGqslLAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUa+364KqqJeBJJLWPU+dv9tqJpJ8wHwYDVR0j
BBgwFoAU+b7sCplkl6YRu9E35O8LDVdMeNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzliMjI2ZTItNzUxMi00YmFiLWJlYzMtMTNlNDUzYWJj
MmI3LzIvRjlCRUVDMEE5OTY0OTdBNjExQkJEMTM3RTRFRjBCMEQ1NzRDNzhEMy5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0Y5QkVFQzBBOTk2NDk3
QTYxMUJCRDEzN0U0RUYwQjBENTc0Qzc4RDMuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5LzM5YjIyNmUyLTc1MTItNGJhYi1iZWMzLTEzZTQ1M2FiYzJi
Ny8yLzMyNjEzMDYxM2EzNjMwMzQzMDNhNjEzMTMwMzYzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzMjMwMzMzODM0MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqCmBAoQYwDQYJKoZIhvcN
AQELBQADggEBAIoPYpBVeqyb2zvAm4As2+3ovq3IlZ1jnbqSU7C3i1+FsZLHn9a9
iB7/usikFRVBMebYim//RGigzy/imlxVNtgCx6fIlC37nRWoeliSoCJt9QgqoomE
0XodnpKSffHz9QuRRLE4L9SBhzI07Uj7sQdWSfMTp8xfKhUYSJ3Nc3pSFAuGVEye
QasIWD0yPcDX0Y3L7EI0ZL02m7R2T4KrRw/ZcM5lrM5oWjMX2/qhkzHATG5inEZK
28hvv0i32SKPkSBbo0wRIFT1f63sJIeLR2LUUErp/9C/N/J6kqg/lvsejac18gXE
eoApQE5hwLCW6ko4CXC68jSIYP9rTV1MHNA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org